$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6e3249de-4e8c-377d-980e-6a30cc94815e.roa File: 6e3249de-4e8c-377d-980e-6a30cc94815e.roa (raw, json) Hash identifier: /ujheXvSMWBv1C7Nz+8sgRrD83M/EW/n1eaDziKzOGk= Subject key identifier: 7D:0E:78:3D:D1:DA:11:EC:D4:12:72:F2:21:1C:2B:9E:DF:2F:C4:3E Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584ADC00FDD027C5900DA9235680 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6e3249de-4e8c-377d-980e-6a30cc94815e.roa Signing time: Fri 15 Aug 2025 01:00:32 +0000 ROA not before: Fri 15 Aug 2025 01:00:32 +0000 ROA not after: Thu 13 Nov 2025 02:00:32 +0000 asID: 30036 IP address blocks: 108.161.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dc:00:fd:d0:27:c5:90:0d:a9:23:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 15 01:00:32 2025 GMT Not After : Nov 13 02:00:32 2025 GMT Subject: CN=1973224d-d90f-4c3a-b809-d5591f21a74d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:83:02:b7:61:07:eb:0a:84:8c:01:d1:0d:8d: 23:70:22:9e:84:56:9c:0f:44:19:89:eb:36:76:4c: d1:63:cd:d6:96:9f:fa:ba:90:1f:3a:de:51:3e:66: e5:a4:5b:89:5d:5e:71:90:62:f6:23:09:53:33:74: 65:d5:08:bb:87:6f:da:fe:70:0c:42:7a:c9:67:c0: 49:ac:ab:bc:e0:57:59:7c:ed:b4:c3:de:25:b3:3b: 3f:d5:be:c3:d9:fb:ed:f8:00:db:db:8e:89:f7:26: f7:7a:6a:f1:cb:28:4d:25:51:0f:63:9b:05:2d:9d: f6:5b:64:21:7b:a9:5c:e3:88:e5:f9:c1:c3:e3:26: 49:0c:70:df:45:ca:c2:b6:6f:cd:fe:1d:f5:b1:79: fe:11:ed:47:ec:73:8d:eb:7a:43:f6:f9:40:85:50: 9e:b0:4f:ef:cd:64:70:b5:99:ea:96:96:04:c2:03: 8c:75:a1:e6:f2:3c:77:f9:24:1f:d2:79:aa:a3:40: 21:a0:98:17:c4:fa:ae:30:aa:e6:45:3a:43:5a:ff: 02:19:ac:1c:90:20:13:6a:c7:bc:4f:29:cc:e5:02: 95:f1:b1:08:44:8b:5c:88:5f:b1:52:35:6e:68:00: 16:0c:1d:1a:4d:71:5c:e7:ac:d3:6c:70:06:a7:26: 4b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:0E:78:3D:D1:DA:11:EC:D4:12:72:F2:21:1C:2B:9E:DF:2F:C4:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6e3249de-4e8c-377d-980e-6a30cc94815e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.161.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:fa:c3:8e:ef:21:c6:fc:37:29:1d:98:fc:b3:b9:fa:14:28: 5c:e6:e7:9a:c1:a1:da:23:2b:2e:66:2d:f4:d1:ba:ad:b8:68: 95:07:61:08:a6:49:2f:ba:95:5f:8e:b8:77:91:01:6d:74:ac: ae:9b:29:da:4a:f6:d2:08:97:23:48:16:9b:7c:14:93:73:30: b2:5f:a8:3d:98:2a:0c:2f:18:95:25:f2:50:79:ce:e4:f9:42: b3:e7:8e:85:0f:42:d1:b0:c6:07:40:cc:43:ad:34:29:6b:21: 17:ef:41:c6:e6:d7:47:a2:76:56:72:c1:ab:bf:1f:54:39:8c: 33:cd:a5:cc:4a:aa:04:eb:6b:f2:bf:fc:8d:20:07:1a:92:96: 5a:b1:4c:58:33:a3:0e:60:d6:c3:cb:0f:67:5b:c5:d1:6c:68: 1b:68:43:9c:e2:a5:50:c1:68:79:b3:30:de:a8:90:3d:62:c4: e1:d2:71:e8:e0:ce:2f:a8:b9:30:98:5e:12:81:a7:ce:6e:c0: 1b:db:03:57:b8:2d:a1:2e:40:fc:fa:b2:37:f9:80:aa:bd:95: 5a:c7:e9:0c:c3:a3:be:be:e2:c7:26:b5:06:a1:25:2e:fa:35: 25:85:e7:df:9e:3d:e2:78:9b:7c:79:b3:0c:71:71:04:08:b1: c7:2a:7a:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErcAP3QJ8WQDakjVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgxNTAxMDAzMloXDTI1MTExMzAyMDAzMlowLzEtMCsGA1UEAxMk MTk3MzIyNGQtZDkwZi00YzNhLWI4MDktZDU1OTFmMjFhNzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYMCt2EH6wqEjAHRDY0jcCKehFacD0QZies2 dkzRY83Wlp/6upAfOt5RPmblpFuJXV5xkGL2IwlTM3Rl1Qi7h2/a/nAMQnrJZ8BJ rKu84FdZfO20w94lszs/1b7D2fvt+ADb246J9yb3emrxyyhNJVEPY5sFLZ32W2Qh e6lc44jl+cHD4yZJDHDfRcrCtm/N/h31sXn+Ee1H7HON63pD9vlAhVCesE/vzWRw tZnqlpYEwgOMdaHm8jx3+SQf0nmqo0AhoJgXxPquMKrmRTpDWv8CGawckCATase8 TynM5QKV8bEIRItciF+xUjVuaAAWDB0aTXFc56zTbHAGpyZLvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH0OeD3R2hHs1BJy8iEcK57fL8Q+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNmUzMjQ5ZGUtNGU4Yy0z NzdkLTk4MGUtNmEzMGNjOTQ4MTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKFYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEr6w47vIcb8NykdmPyzufoUKFzm55rBodojKy5mLfTRuq24aJUHYQim SS+6lV+OuHeRAW10rK6bKdpK9tIIlyNIFpt8FJNzMLJfqD2YKgwvGJUl8lB5zuT5 QrPnjoUPQtGwxgdAzEOtNClrIRfvQcbm10eidlZywau/H1Q5jDPNpcxKqgTra/K/ /I0gBxqSllqxTFgzow5g1sPLD2dbxdFsaBtoQ5zipVDBaHmzMN6okD1ixOHScejg zi+ouTCYXhKBp85uwBvbA1e4LaEuQPz6sjf5gKq9lVrH6QzDo76+4scmtQahJS76 NSWF59+ePeJ4m3x5swxxcQQIsccqegk= -----END CERTIFICATE-----Generated at Sat Aug 23 18:41:24 2025 by rpki-client