$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a9b3dd06-548a-3297-a7a1-6349330219b7.roa File: a9b3dd06-548a-3297-a7a1-6349330219b7.roa (raw, json) Hash identifier: N9Z3F+rwzyKOogEte1RkWiDxswxb5DRDp4JI6PQ/p6M= Subject key identifier: A9:C4:31:55:FE:AB:C8:8F:2F:C8:5B:C8:44:FC:8F:15:45:68:7A:BA Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584AD0D66704C01D3A70D42E0AC0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a9b3dd06-548a-3297-a7a1-6349330219b7.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 30036 IP address blocks: 108.178.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:67:04:c0:1d:3a:70:d4:2e:0a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=8a217c35-4382-4e1c-94e1-79418e2ce1e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a3:1f:4b:58:4e:ce:fc:41:45:d9:ea:36:a7: fe:eb:56:2b:d5:63:f7:54:6f:a4:e7:78:23:da:e4: 7d:9b:7a:1e:71:89:fc:d3:08:78:0c:fa:20:78:fe: c1:d6:0c:5d:3f:10:b5:cf:4f:d0:bd:68:18:84:dc: 87:a7:40:4f:23:8d:e5:07:56:91:42:7f:ae:ed:1d: 97:82:82:b9:5e:41:58:cd:6e:c3:0d:f8:74:fe:e2: 1a:1e:f6:27:bc:b5:d8:93:0f:36:e6:fb:f0:1e:5d: b5:13:fd:57:bf:dc:ad:f1:f8:15:3b:c4:d3:fb:80: 60:62:96:1b:1f:76:7f:56:c4:ff:02:ea:35:82:85: d5:d6:41:47:e8:94:6c:d3:4f:5c:20:ec:38:21:a7: 56:79:6f:82:71:a4:32:0b:12:9e:2b:84:d2:41:d3: 00:29:66:09:04:2c:5e:78:bf:f1:ab:22:4c:65:4b: 65:7b:c3:8b:74:32:69:12:28:5d:2a:ee:11:d0:64: a7:37:a3:c9:d1:21:37:2c:26:d8:98:23:89:b6:53: de:a8:61:de:80:ee:0a:9f:57:83:67:ee:53:8f:4a: b8:6b:ce:69:25:41:cf:50:b4:d8:7e:5f:68:78:58: 2a:00:bc:90:74:f9:92:a3:e2:59:10:0b:a6:a9:e0: e0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C4:31:55:FE:AB:C8:8F:2F:C8:5B:C8:44:FC:8F:15:45:68:7A:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a9b3dd06-548a-3297-a7a1-6349330219b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.178.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:5e:68:9d:2b:3a:ed:26:59:22:c6:d7:7d:d1:a2:eb:54:68: 9c:c5:ef:30:ac:95:e3:5d:c0:6c:a8:63:36:8e:64:ea:4f:20: f5:bc:3a:0d:5f:c7:3b:06:9d:2f:0d:79:a2:68:d8:d6:63:4b: fb:80:e1:19:a4:55:7d:ee:a3:c2:4f:37:1a:a5:1f:16:72:84: 26:fa:30:a5:51:c8:bc:75:82:57:27:7c:66:4c:a4:69:70:e7: 29:f6:dd:c5:48:c8:fb:7b:99:ae:5e:3a:f4:c6:c6:6d:24:17: f7:1f:0f:b8:5f:d5:7d:45:cc:9f:af:ef:e1:37:a4:be:a3:99: 85:61:7c:b8:9e:5f:8e:78:59:90:14:e8:3e:39:0e:eb:35:f8: 48:b2:6f:e2:29:56:78:6e:0b:a6:38:db:ff:a0:ed:35:f2:01: e5:5f:e6:b3:6f:7e:9b:cb:25:38:ff:86:39:bc:46:a9:9f:85: a6:4d:48:eb:38:d4:99:03:26:29:a1:62:40:c7:a7:48:27:81: 20:4d:08:7b:2b:6e:e9:15:8d:f0:6e:b3:68:37:b4:06:7d:d0: ef:8c:c5:3b:81:b3:e4:3a:13:ad:a6:a2:21:fc:58:c6:f0:23: 86:d7:9b:ea:8c:36:4a:4b:29:0e:4b:bf:bb:49:20:41:05:71: a8:22:ea:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1mcEwB06cNQuCsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk OGEyMTdjMzUtNDM4Mi00ZTFjLTk0ZTEtNzk0MThlMmNlMWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKMfS1hOzvxBRdnqNqf+61Yr1WP3VG+k53gj 2uR9m3oecYn80wh4DPogeP7B1gxdPxC1z0/QvWgYhNyHp0BPI43lB1aRQn+u7R2X goK5XkFYzW7DDfh0/uIaHvYnvLXYkw825vvwHl21E/1Xv9yt8fgVO8TT+4BgYpYb H3Z/VsT/Auo1goXV1kFH6JRs009cIOw4IadWeW+CcaQyCxKeK4TSQdMAKWYJBCxe eL/xqyJMZUtle8OLdDJpEihdKu4R0GSnN6PJ0SE3LCbYmCOJtlPeqGHegO4Kn1eD Z+5Tj0q4a85pJUHPULTYfl9oeFgqALyQdPmSo+JZEAumqeDgWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnEMVX+q8iPL8hbyET8jxVFaHq6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTliM2RkMDYtNTQ4YS0z Mjk3LWE3YTEtNjM0OTMzMDIxOWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLLnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVeaJ0rOu0mWSLG133RoutUaJzF7zCsleNdwGyoYzaOZOpPIPW8Og1f xzsGnS8NeaJo2NZjS/uA4RmkVX3uo8JPNxqlHxZyhCb6MKVRyLx1glcnfGZMpGlw 5yn23cVIyPt7ma5eOvTGxm0kF/cfD7hf1X1FzJ+v7+E3pL6jmYVhfLieX454WZAU 6D45Dus1+Eiyb+IpVnhuC6Y42/+g7TXyAeVf5rNvfpvLJTj/hjm8RqmfhaZNSOs4 1JkDJimhYkDHp0gngSBNCHsrbukVjfBus2g3tAZ90O+MxTuBs+Q6E62moiH8WMbw I4bXm+qMNkpLKQ5Lv7tJIEEFcagi6sY= -----END CERTIFICATE-----Generated at Sat Aug 23 14:25:27 2025 by rpki-client