$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a5b4829-2d99-3de8-8efe-3261710e92cb.roa File: 4a5b4829-2d99-3de8-8efe-3261710e92cb.roa (raw, json) Hash identifier: NbtT9g09Q2nG7Sbp7GLoRurrE9OvFJT3QHOyhL0khHI= Subject key identifier: 51:F1:28:C4:9B:E1:D7:7E:05:99:1A:28:12:25:B7:FA:66:9D:04:A6 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584AD0D6678A1E6053DDEFA6AC00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a5b4829-2d99-3de8-8efe-3261710e92cb.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 30036 IP address blocks: 108.178.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:67:8a:1e:60:53:dd:ef:a6:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=6f5bfcff-7bde-49be-95a5-923c91a51241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9f:a4:2a:e4:ba:06:60:a1:f7:e4:29:50:b7: 85:c0:3f:7f:b1:00:48:f6:dd:47:6f:da:50:dc:f9: 67:37:19:d1:68:15:ea:f0:06:14:9a:f4:69:c6:a3: 8c:9c:2e:24:60:ad:a1:f2:2d:ca:b2:5b:fa:82:d3: 83:43:45:4e:51:e1:a9:5a:f8:7d:2b:45:8f:96:ff: 2e:e6:ca:4d:fa:19:b2:af:4d:3d:13:07:83:ad:15: 32:b0:92:1e:36:a7:5c:33:95:64:4f:61:ad:62:68: 3e:02:ce:f8:bf:75:e9:82:03:99:bb:55:d1:af:de: 61:48:eb:4a:66:df:69:35:25:39:d4:ca:27:eb:69: 33:84:eb:03:d7:dd:74:69:fc:d9:8d:2d:1b:4f:20: 8a:e7:24:a0:3d:a9:f4:57:ad:a1:69:71:a8:03:86: 40:f0:a6:2f:b3:84:6b:78:9e:76:d6:39:05:de:af: 5c:28:82:50:80:b0:27:63:9b:46:0a:58:1c:1c:99: c2:af:cc:06:5d:11:79:ef:00:0f:b9:29:af:f7:3e: 43:53:6a:0b:17:0d:98:08:a9:30:ce:0d:89:8e:d8: ea:96:65:6d:e6:70:30:76:2d:87:98:1c:5d:dd:27: cd:69:aa:86:99:f1:2c:9d:75:f5:e0:0c:32:5d:28: ca:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F1:28:C4:9B:E1:D7:7E:05:99:1A:28:12:25:B7:FA:66:9D:04:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a5b4829-2d99-3de8-8efe-3261710e92cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.178.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:e6:d6:01:1b:2b:4f:4d:08:35:c6:bc:c5:54:c6:98:84:fa: 61:fe:47:cf:98:57:87:b6:76:af:f4:fe:af:00:ec:5c:c9:60: 4c:e9:8c:ab:d2:bf:01:b7:9e:55:bd:c7:19:ef:b4:86:d7:bd: f7:46:1c:d6:63:6e:c7:05:28:eb:a0:1c:d8:e3:8c:33:f5:38: 5b:63:d4:9b:6f:ee:e3:7a:4f:84:fb:49:fd:05:39:f8:bf:16: bf:db:4a:40:85:e9:a8:6b:44:fe:a8:9f:9c:78:87:59:29:bf: db:56:81:e3:f0:5d:50:82:21:07:9e:4b:28:ad:3b:79:43:9e: c3:ec:5f:2e:fa:9c:f6:f2:2b:bf:a8:4e:53:0e:72:83:09:56: 49:6e:0b:bf:fe:eb:63:af:17:04:7d:e6:f6:a3:29:09:03:b0: d2:5a:73:1d:5e:30:04:ad:ff:b8:53:8c:22:2b:9d:f8:0f:6c: 21:30:47:12:07:06:05:a5:cf:f7:83:e9:8a:32:07:e6:12:5e: c8:58:62:8c:01:d2:b7:c5:1f:fa:f9:c9:f9:0e:7c:8a:1d:ad: bc:ef:58:af:d4:9f:fb:bf:c6:82:8b:32:bc:75:ce:f0:c1:77: fb:a7:76:8d:59:85:87:b8:c9:82:37:a6:5b:45:d6:9f:d0:fc: b2:ac:48:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1meKHmBT3e+mrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk NmY1YmZjZmYtN2JkZS00OWJlLTk1YTUtOTIzYzkxYTUxMjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJ+kKuS6BmCh9+QpULeFwD9/sQBI9t1Hb9pQ 3PlnNxnRaBXq8AYUmvRpxqOMnC4kYK2h8i3Kslv6gtODQ0VOUeGpWvh9K0WPlv8u 5spN+hmyr009EweDrRUysJIeNqdcM5VkT2GtYmg+As74v3XpggOZu1XRr95hSOtK Zt9pNSU51Mon62kzhOsD1910afzZjS0bTyCK5ySgPan0V62haXGoA4ZA8KYvs4Rr eJ521jkF3q9cKIJQgLAnY5tGClgcHJnCr8wGXRF57wAPuSmv9z5DU2oLFw2YCKkw zg2JjtjqlmVt5nAwdi2HmBxd3SfNaaqGmfEsnXX14AwyXSjKhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHxKMSb4dd+BZkaKBIlt/pmnQSmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNGE1YjQ4MjktMmQ5OS0z ZGU4LThlZmUtMzI2MTcxMGU5MmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLLbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjm1gEbK09NCDXGvMVUxpiE+mH+R8+YV4e2dq/0/q8A7FzJYEzpjKvS vwG3nlW9xxnvtIbXvfdGHNZjbscFKOugHNjjjDP1OFtj1Jtv7uN6T4T7Sf0FOfi/ Fr/bSkCF6ahrRP6on5x4h1kpv9tWgePwXVCCIQeeSyitO3lDnsPsXy76nPbyK7+o TlMOcoMJVkluC7/+62OvFwR95vajKQkDsNJacx1eMASt/7hTjCIrnfgPbCEwRxIH BgWlz/eD6YoyB+YSXshYYowB0rfFH/r5yfkOfIodrbzvWK/Un/u/xoKLMrx1zvDB d/undo1ZhYe4yYI3pltF1p/Q/LKsSKg= -----END CERTIFICATE-----Generated at Sat Aug 23 14:25:49 2025 by rpki-client