$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/93836be7-b075-31b1-ae5d-34f09aa986f5.roa File: 93836be7-b075-31b1-ae5d-34f09aa986f5.roa (raw, json) Hash identifier: 5I3I2ovoIMzCHBbCPvaSRWhWQ2NfLSFBR8x9Kd6uE0c= Subject key identifier: 51:61:B5:2B:61:DA:73:E2:C3:DD:9E:05:78:2E:79:23:C2:9D:21:D1 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849E2250F7AB199FB61D0E1DEC0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/93836be7-b075-31b1-ae5d-34f09aa986f5.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 30036 IP address blocks: 108.166.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:0f:7a:b1:99:fb:61:d0:e1:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=b3e36a8f-3859-42b2-b083-6d00e057c6ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fe:61:54:82:07:44:47:de:08:a7:38:b8:d0: cf:7e:2b:dd:d5:b8:fa:ec:ba:20:e8:ce:85:ca:89: 41:c8:e6:4d:26:ff:f3:fd:89:d8:63:a6:22:d2:ac: 01:b0:51:a8:63:68:d6:c4:53:00:c3:6c:ca:f8:02: 2b:3e:13:71:2d:a9:f2:b1:9c:ac:2b:87:8d:0c:5a: b4:3f:e7:65:bb:b6:87:42:63:e0:27:e5:02:4c:4b: 1a:24:61:43:1b:05:9b:91:f3:9d:f7:7f:2d:16:d9: 94:7f:a6:32:31:07:62:8b:f5:34:48:6c:90:8d:45: d6:fd:15:80:66:23:cf:82:61:d3:9c:bf:2a:b7:4e: 3d:9e:c7:1d:74:a4:8a:64:02:17:ee:7c:90:93:ee: 8f:9b:55:e4:5d:1c:73:68:6d:29:af:64:21:3f:40: 3d:d2:66:9d:cc:a6:0c:44:da:f5:f9:c5:95:75:7c: d1:60:79:c5:61:71:60:21:fd:8a:76:73:c8:8f:89: 4a:0f:35:18:ad:08:5b:d4:d6:f4:4f:21:21:ea:55: 35:4d:44:48:f6:4c:b9:a7:57:f9:f9:43:f1:10:e6: 1f:be:fb:1d:07:77:21:c2:a0:71:50:aa:29:80:8d: 23:52:43:cd:30:6b:4b:6e:91:36:6b:77:48:16:b3: c4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:61:B5:2B:61:DA:73:E2:C3:DD:9E:05:78:2E:79:23:C2:9D:21:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/93836be7-b075-31b1-ae5d-34f09aa986f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:5d:45:59:ad:cd:c7:30:63:09:d6:d4:8d:5c:7f:2f:ad:e1: de:16:80:c9:9a:1c:e6:27:e1:32:c3:fc:68:87:45:24:b6:d3: a1:4f:11:66:fc:f2:12:14:63:8f:ab:c2:ef:3e:55:27:7f:48: 1d:c8:f9:71:dc:5e:ab:3f:c0:6a:eb:9d:9c:cf:b5:6f:11:65: e3:9b:36:fb:82:66:96:d3:f1:52:d6:d2:6c:1a:19:1a:a7:2d: c5:2f:e9:f0:35:ef:de:29:5f:48:91:ab:05:3a:aa:f2:ed:2f: 39:6e:c8:c4:b1:7f:2e:4a:50:96:7f:be:34:c9:c5:5e:1b:83: de:73:b7:fb:be:22:3f:18:64:e7:44:64:62:de:e1:2e:9f:9a: e5:93:cf:7d:93:a3:6c:bb:0d:70:7e:6f:63:f9:f9:d8:8a:86: 43:16:c9:31:1c:0c:c7:44:a2:be:99:fa:51:dd:0e:cf:61:da: 32:6f:ee:eb:02:37:b9:60:5d:2d:e0:9e:25:df:2c:4c:26:c9: 4c:78:32:1b:cf:34:ba:0c:0e:98:93:87:b1:ae:12:8f:54:61: 09:1b:a5:71:9c:e8:42:5b:d4:79:be:7e:88:96:37:80:c8:29: 1d:2b:96:4d:e7:70:d6:b2:6f:5b:9e:28:72:46:02:36:cc:3f: d2:83:f2:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJQ96sZn7YdDh3sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk YjNlMzZhOGYtMzg1OS00MmIyLWIwODMtNmQwMGUwNTdjNmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf5hVIIHREfeCKc4uNDPfivd1bj67Log6M6F yolByOZNJv/z/YnYY6Yi0qwBsFGoY2jWxFMAw2zK+AIrPhNxLanysZysK4eNDFq0 P+dlu7aHQmPgJ+UCTEsaJGFDGwWbkfOd938tFtmUf6YyMQdii/U0SGyQjUXW/RWA ZiPPgmHTnL8qt049nscddKSKZAIX7nyQk+6Pm1XkXRxzaG0pr2QhP0A90madzKYM RNr1+cWVdXzRYHnFYXFgIf2KdnPIj4lKDzUYrQhb1Nb0TyEh6lU1TURI9ky5p1f5 +UPxEOYfvvsdB3chwqBxUKopgI0jUkPNMGtLbpE2a3dIFrPEKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFhtSth2nPiw92eBXgueSPCnSHRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOTM4MzZiZTctYjA3NS0z MWIxLWFlNWQtMzRmMDlhYTk4NmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKacMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBdRVmtzccwYwnW1I1cfy+t4d4WgMmaHOYn4TLD/GiHRSS206FPEWb8 8hIUY4+rwu8+VSd/SB3I+XHcXqs/wGrrnZzPtW8RZeObNvuCZpbT8VLW0mwaGRqn LcUv6fA1794pX0iRqwU6qvLtLzluyMSxfy5KUJZ/vjTJxV4bg95zt/u+Ij8YZOdE ZGLe4S6fmuWTz32To2y7DXB+b2P5+diKhkMWyTEcDMdEor6Z+lHdDs9h2jJv7usC N7lgXS3gniXfLEwmyUx4MhvPNLoMDpiTh7GuEo9UYQkbpXGc6EJb1Hm+foiWN4DI KR0rlk3ncNayb1ueKHJGAjbMP9KD8tk= -----END CERTIFICATE-----Generated at Tue Jul 1 11:06:52 2025 by rpki-client