$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/960a70a6-9876-33a5-b74b-ca70419b4dc8.roa File: 960a70a6-9876-33a5-b74b-ca70419b4dc8.roa (raw, json) Hash identifier: OTy1kyT+xspuFKYhyKlMavjRzIjV9JSWbRINjCrvY3k= Subject key identifier: 86:32:E2:F5:1E:3B:EF:47:5A:39:9C:03:41:10:BA:FD:E2:B6:CC:BB Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584AD0D6666CF65169B9D1BCADC0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/960a70a6-9876-33a5-b74b-ca70419b4dc8.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 30036 IP address blocks: 108.178.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:66:6c:f6:51:69:b9:d1:bc:ad:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=96535871-e73c-472a-b507-18059ccab841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:23:fa:ea:05:19:6f:86:cb:07:6e:e8:c3:d7: ab:ff:45:89:ba:6a:3e:c0:64:e4:c9:98:df:08:f6: 49:cc:2a:b1:bf:5f:50:f2:96:60:14:e4:d4:09:9a: bc:82:c3:dd:0f:44:09:08:a8:e0:bc:64:fa:2b:f7: da:e4:68:a5:37:3a:49:c4:b9:1a:fa:cd:20:5a:c3: 66:e4:72:5d:a5:28:47:16:d8:99:1e:0c:94:6f:d3: 26:0a:b6:7d:c2:e8:ea:32:e3:0a:48:28:2e:f3:62: aa:73:0d:e0:39:63:d7:09:e4:f9:b4:c5:62:af:d6: 77:42:a8:ba:bc:76:b5:de:ec:e3:9b:3d:29:26:28: 0c:b8:ee:57:c8:04:38:28:8f:22:86:b6:2b:7a:8d: ef:d0:d6:b8:bb:a6:1e:91:ba:a2:60:99:3e:22:51: 90:38:cc:5f:8f:f6:f7:da:44:5f:8d:4c:18:72:cc: bc:bb:12:7a:87:ae:2e:f7:42:84:11:b0:d1:30:ec: e0:9e:a8:ff:9d:31:5f:70:bc:2c:9e:4e:8e:e1:cb: ad:d1:3c:fb:b2:77:23:30:c2:de:c4:3e:c1:65:56: 89:10:d9:d3:a2:09:fe:9f:63:86:fe:c6:9f:e4:05: 70:76:b9:d0:6f:81:9c:26:1c:fe:0c:14:84:2b:f1: 60:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:32:E2:F5:1E:3B:EF:47:5A:39:9C:03:41:10:BA:FD:E2:B6:CC:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/960a70a6-9876-33a5-b74b-ca70419b4dc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.178.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:69:c8:06:0a:6b:69:9d:12:37:ff:4f:26:28:d0:5f:f7:74: 88:fc:1e:e4:cc:d1:c8:b3:47:22:2b:2e:fc:d7:66:b0:07:f0: 32:21:e3:69:0d:eb:a7:49:62:30:48:11:2b:a4:81:86:49:54: 8e:a6:47:13:16:54:fb:2d:31:17:8d:19:1d:8e:cf:4d:00:f7: a2:7f:c3:9f:1c:04:da:0b:b9:67:f0:72:5c:a2:9d:e8:df:af: de:05:62:b2:8a:e1:d7:cc:77:ed:4a:e4:ec:4c:e3:3b:3f:d4: 34:2b:2b:43:3a:39:0c:f5:68:fb:6f:c2:60:4c:7a:7a:28:11: 8a:dd:93:ee:b8:57:22:08:43:3a:8b:41:18:c1:a3:6c:6b:0a: 87:92:97:3a:b1:32:7e:60:f7:ff:c7:fa:99:fb:4c:fc:a0:1f: 11:28:1f:e7:cb:f9:74:8d:28:ce:00:4e:6e:3e:ca:02:27:0e: a1:8f:cb:aa:91:79:b7:31:67:11:d1:6c:80:10:ff:36:f3:89: 49:46:0b:bd:31:d0:fc:51:bc:4a:81:10:14:2b:3c:82:a7:fb: 95:40:bc:71:19:ea:0d:9e:a5:92:7a:b9:60:8a:04:51:bb:c8: 38:7d:de:24:21:59:9a:df:e2:76:93:cb:31:00:4d:7f:c6:11: cd:ad:8e:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1mZs9lFpudG8rcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk OTY1MzU4NzEtZTczYy00NzJhLWI1MDctMTgwNTljY2FiODQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCP66gUZb4bLB27ow9er/0WJumo+wGTkyZjf CPZJzCqxv19Q8pZgFOTUCZq8gsPdD0QJCKjgvGT6K/fa5GilNzpJxLka+s0gWsNm 5HJdpShHFtiZHgyUb9MmCrZ9wujqMuMKSCgu82Kqcw3gOWPXCeT5tMVir9Z3Qqi6 vHa13uzjmz0pJigMuO5XyAQ4KI8ihrYreo3v0Na4u6YekbqiYJk+IlGQOMxfj/b3 2kRfjUwYcsy8uxJ6h64u90KEEbDRMOzgnqj/nTFfcLwsnk6O4cut0Tz7sncjMMLe xD7BZVaJENnTogn+n2OG/saf5AVwdrnQb4GcJhz+DBSEK/Fg3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYy4vUeO+9HWjmcA0EQuv3itsy7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOTYwYTcwYTYtOTg3Ni0z M2E1LWI3NGItY2E3MDQxOWI0ZGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLLYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1pyAYKa2mdEjf/TyYo0F/3dIj8HuTM0cizRyIrLvzXZrAH8DIh42kN 66dJYjBIESukgYZJVI6mRxMWVPstMReNGR2Oz00A96J/w58cBNoLuWfwclyinejf r94FYrKK4dfMd+1K5OxM4zs/1DQrK0M6OQz1aPtvwmBMenooEYrdk+64VyIIQzqL QRjBo2xrCoeSlzqxMn5g9//H+pn7TPygHxEoH+fL+XSNKM4ATm4+ygInDqGPy6qR ebcxZxHRbIAQ/zbziUlGC70x0PxRvEqBEBQrPIKn+5VAvHEZ6g2epZJ6uWCKBFG7 yDh93iQhWZrf4naTyzEATX/GEc2tjt4= -----END CERTIFICATE-----Generated at Sat Aug 23 18:52:45 2025 by rpki-client