$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/639b9974-be7b-3fd1-a2a4-d40829998095.roa File: 639b9974-be7b-3fd1-a2a4-d40829998095.roa (raw, json) Hash identifier: Q8yQNUnWQDgZZF5UDEa65oHss7Nu9E+NX3NC+VXvSeo= Subject key identifier: 61:0D:F2:6E:DF:5B:66:A8:DE:76:C2:7B:49:BF:CB:A0:D6:73:1A:D9 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584AD0D667512DDE4CDDDEB7C6C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/639b9974-be7b-3fd1-a2a4-d40829998095.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 30036 IP address blocks: 108.178.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:67:51:2d:de:4c:dd:de:b7:c6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=b53c3d68-4dc0-4bf5-9dcd-80eb061df92f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:7e:f3:38:90:89:8a:cd:ec:a4:db:c1:f0:3b: 6b:25:26:51:45:e8:78:eb:58:64:19:f1:9d:da:5a: 68:99:83:81:34:2e:83:d7:12:9b:2d:b3:22:6d:04: 16:1f:49:49:1d:60:b6:1f:f7:b0:61:3c:79:c7:51: 84:c7:21:e1:c0:11:16:f4:45:1d:75:2e:95:38:d1: 9a:c6:e0:48:46:b6:b0:51:cb:03:46:96:e3:29:67: 86:24:9d:90:d8:5d:85:b6:a9:4b:ca:20:c4:45:56: 7c:91:1a:b2:c6:e4:8f:98:33:8f:9e:9d:e0:cd:8c: 94:ad:54:af:69:eb:39:cb:46:d9:89:e1:8f:62:84: bf:d7:bc:84:b7:0a:5b:38:fa:df:f1:66:ca:bf:dc: 8a:b3:0e:af:7d:7c:98:47:c4:28:eb:5b:82:12:74: 22:06:6a:72:ab:5f:5e:37:6c:6a:d1:cc:7c:f7:05: 22:8e:d6:69:74:20:49:59:26:02:cb:1a:cf:db:3b: eb:82:06:6b:b0:30:f5:a2:58:fd:ba:9b:fa:7f:83: 25:b9:66:e8:e2:5b:c0:ff:3b:98:b6:71:18:b1:34: 61:ad:32:4d:11:18:d1:d9:10:b8:a7:27:f6:45:12: eb:65:55:b0:75:3c:db:7e:b7:0b:2c:bc:fc:5d:15: 16:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:0D:F2:6E:DF:5B:66:A8:DE:76:C2:7B:49:BF:CB:A0:D6:73:1A:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/639b9974-be7b-3fd1-a2a4-d40829998095.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.178.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:e7:31:d1:9f:4d:8e:15:d2:6a:2f:b0:90:30:2e:94:be:e4: 84:da:5b:5e:2e:59:3e:64:28:ec:a9:6e:33:4d:1e:11:40:ef: 27:90:ee:47:63:94:7f:4b:cc:97:8d:c4:f4:09:9c:f3:2e:24: 3a:ae:4e:08:74:ed:7c:5c:dd:77:29:b6:7f:34:3e:64:38:38: 4d:7a:f5:1b:01:1a:fd:cd:c0:84:d8:0b:5c:19:bd:28:8a:fd: 5d:f6:25:30:c5:8f:e6:ed:5c:76:84:74:53:2c:ed:0a:46:7c: 3f:5b:5a:43:1d:84:32:fa:90:12:b3:2d:a5:16:f7:eb:f2:01: 3c:1e:17:1a:88:6f:2a:98:8c:c8:79:23:a1:72:17:6f:4c:ab: 70:26:90:9a:40:7d:05:da:6c:48:c0:43:bc:5a:e3:bd:93:6c: b2:f1:d7:0b:f1:74:2a:25:d4:0b:f0:98:0f:6e:46:ba:6c:60: 3f:6f:72:29:ac:46:c9:1c:dc:b5:ed:e4:41:9a:0a:43:87:96: 8d:bb:1a:71:58:ea:fa:d2:93:37:ef:50:1e:a4:ef:f6:b7:2e: 90:3b:62:fa:14:22:73:fd:0c:d7:31:7b:5d:8a:25:57:5e:73: e4:08:13:f8:42:bb:a1:13:36:c2:8b:e6:3a:68:9f:0f:7c:10: 62:a1:ef:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1mdRLd5M3d63xsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk YjUzYzNkNjgtNGRjMC00YmY1LTlkY2QtODBlYjA2MWRmOTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgH7zOJCJis3spNvB8DtrJSZRReh461hkGfGd 2lpomYOBNC6D1xKbLbMibQQWH0lJHWC2H/ewYTx5x1GExyHhwBEW9EUddS6VONGa xuBIRrawUcsDRpbjKWeGJJ2Q2F2FtqlLyiDERVZ8kRqyxuSPmDOPnp3gzYyUrVSv aes5y0bZieGPYoS/17yEtwpbOPrf8WbKv9yKsw6vfXyYR8Qo61uCEnQiBmpyq19e N2xq0cx89wUijtZpdCBJWSYCyxrP2zvrggZrsDD1olj9upv6f4MluWbo4lvA/zuY tnEYsTRhrTJNERjR2RC4pyf2RRLrZVWwdTzbfrcLLLz8XRUWLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEN8m7fW2ao3nbCe0m/y6DWcxrZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNjM5Yjk5NzQtYmU3Yi0z ZmQxLWEyYTQtZDQwODI5OTk4MDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLLCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXnMdGfTY4V0movsJAwLpS+5ITaW14uWT5kKOypbjNNHhFA7yeQ7kdj lH9LzJeNxPQJnPMuJDquTgh07Xxc3Xcptn80PmQ4OE169RsBGv3NwITYC1wZvSiK /V32JTDFj+btXHaEdFMs7QpGfD9bWkMdhDL6kBKzLaUW9+vyATweFxqIbyqYjMh5 I6FyF29Mq3AmkJpAfQXabEjAQ7xa472TbLLx1wvxdCol1AvwmA9uRrpsYD9vcims Rskc3LXt5EGaCkOHlo27GnFY6vrSkzfvUB6k7/a3LpA7YvoUInP9DNcxe12KJVde c+QIE/hCu6ETNsKL5jponw98EGKh790= -----END CERTIFICATE-----Generated at Sat Aug 23 13:48:49 2025 by rpki-client