$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6658825e-5fc5-362a-9eb0-30634ffadae7.roa File: 6658825e-5fc5-362a-9eb0-30634ffadae7.roa (raw, json) Hash identifier: 5RZ0AR4dpLE+b9/NDggszPSlN/fCZgJSnyhyPETgNcw= Subject key identifier: 90:B9:62:E1:04:7C:DD:BA:AE:B8:A4:72:B8:52:90:E5:77:BC:D8:E9 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849FB453063F0D2E3F35AB89880 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6658825e-5fc5-362a-9eb0-30634ffadae7.roa Signing time: Mon 26 May 2025 13:01:03 +0000 ROA not before: Mon 26 May 2025 13:01:03 +0000 ROA not after: Sun 24 Aug 2025 13:01:03 +0000 asID: 30036 IP address blocks: 108.161.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fb:45:30:63:f0:d2:e3:f3:5a:b8:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: May 26 13:01:03 2025 GMT Not After : Aug 24 13:01:03 2025 GMT Subject: CN=72a4956d-0d74-4475-8ad4-e066e5ecf65d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c3:0d:0a:2b:81:24:6b:1e:59:79:c6:77:a9: 83:f8:f5:e0:17:24:be:82:5e:4c:15:84:5e:e1:df: 2f:58:82:a2:07:1d:5f:c0:4e:2e:58:6f:df:31:bb: 74:3d:e0:3b:bd:60:3f:db:4b:7a:44:4d:84:2d:01: 71:0c:05:4d:45:59:07:51:52:66:b3:52:83:93:a5: 5f:69:c2:85:08:6f:49:69:cc:a7:5f:0a:05:7e:e3: 06:45:b3:93:40:49:93:2f:4c:21:31:06:78:24:64: c6:15:75:ee:10:7b:c8:42:de:a2:6e:e9:7b:28:87: ca:45:65:c9:da:0d:32:3c:d4:ac:24:5f:49:d0:55: 8d:fe:f3:29:72:b0:8d:24:df:d5:02:dd:a8:cf:7c: 0d:1b:8f:fb:12:06:c4:df:98:63:6e:d0:d9:c3:71: 65:2c:eb:92:5d:f5:21:f6:b0:cb:da:ed:51:cb:bb: b5:0c:90:dd:17:e2:d1:fc:50:f1:e5:13:1d:e2:62: 13:b0:cd:c5:f6:f7:de:c2:2e:ec:ab:35:fe:cb:3b: f5:da:9c:46:7b:2c:0c:6e:a7:5d:8a:54:7d:a5:f6: 55:d6:b6:50:cd:87:3e:37:1c:26:cd:25:94:51:eb: 9a:71:d1:40:48:c9:a0:1d:28:cf:c4:9f:5d:a5:f4: c4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B9:62:E1:04:7C:DD:BA:AE:B8:A4:72:B8:52:90:E5:77:BC:D8:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6658825e-5fc5-362a-9eb0-30634ffadae7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.161.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:02:06:2d:21:09:14:b3:a8:c5:e3:c8:ea:5a:ca:c8:3e:b7: b3:65:c3:63:d5:de:80:2e:18:07:97:dc:61:29:92:87:ed:db: 52:b1:0f:6e:b7:b7:0d:e5:9c:dc:9c:de:11:88:c4:bc:71:78: 3f:4a:87:fd:53:b8:c6:0d:f1:dd:e3:a9:4b:41:16:f4:41:e1: 55:61:72:8c:4b:7d:50:43:98:ac:b3:5a:c4:ed:a7:9b:52:b1: 0c:3e:a5:41:b0:3b:ed:4b:d5:c6:ce:61:c2:1e:71:75:cf:87: b4:f9:c1:60:e0:ff:cc:a7:44:a1:53:37:bc:29:95:bc:cf:b3: 4b:ff:52:b3:2b:58:b0:1e:20:05:b2:8e:75:b2:c6:aa:14:be: 12:99:cb:9d:77:bd:47:f7:08:24:6b:86:83:ba:35:dd:a4:4d: d1:f6:73:51:df:1c:24:ed:6d:8e:3c:8c:be:90:fd:67:25:f0: 44:ef:7d:e9:01:d8:57:44:14:c4:0c:2e:ab:32:05:5b:41:8c: 5a:ec:dc:c1:00:7a:ad:4a:0f:1a:f4:e1:a6:3a:f3:16:41:e5: 45:4f:4f:cc:d0:0c:a3:1c:05:6e:b2:03:8a:7e:0c:09:44:e1: f7:a6:57:ad:cf:b8:68:aa:d0:d0:b3:5e:c5:48:97:b2:7f:c6: b7:92:b7:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn7RTBj8NLj81q4mIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDUyNjEzMDEwM1oXDTI1MDgyNDEzMDEwM1owLzEtMCsGA1UEAxMk NzJhNDk1NmQtMGQ3NC00NDc1LThhZDQtZTA2NmU1ZWNmNjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMMNCiuBJGseWXnGd6mD+PXgFyS+gl5MFYRe 4d8vWIKiBx1fwE4uWG/fMbt0PeA7vWA/20t6RE2ELQFxDAVNRVkHUVJms1KDk6Vf acKFCG9JacynXwoFfuMGRbOTQEmTL0whMQZ4JGTGFXXuEHvIQt6ibul7KIfKRWXJ 2g0yPNSsJF9J0FWN/vMpcrCNJN/VAt2oz3wNG4/7EgbE35hjbtDZw3FlLOuSXfUh 9rDL2u1Ry7u1DJDdF+LR/FDx5RMd4mITsM3F9vfewi7sqzX+yzv12pxGeywMbqdd ilR9pfZV1rZQzYc+NxwmzSWUUeuacdFASMmgHSjPxJ9dpfTEbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJC5YuEEfN26rrikcrhSkOV3vNjpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNjY1ODgyNWUtNWZjNS0z NjJhLTllYjAtMzA2MzRmZmFkYWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKFfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHICBi0hCRSzqMXjyOpaysg+t7Nlw2PV3oAuGAeX3GEpkoft21KxD263 tw3lnNyc3hGIxLxxeD9Kh/1TuMYN8d3jqUtBFvRB4VVhcoxLfVBDmKyzWsTtp5tS sQw+pUGwO+1L1cbOYcIecXXPh7T5wWDg/8ynRKFTN7wplbzPs0v/UrMrWLAeIAWy jnWyxqoUvhKZy513vUf3CCRrhoO6Nd2kTdH2c1HfHCTtbY48jL6Q/Wcl8ETvfekB 2FdEFMQMLqsyBVtBjFrs3MEAeq1KDxr04aY68xZB5UVPT8zQDKMcBW6yA4p+DAlE 4femV63PuGiq0NCzXsVIl7J/xreSt7w= -----END CERTIFICATE-----Generated at Tue Jul 1 15:27:34 2025 by rpki-client