$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ab20e66a-5e27-3ad6-b6f7-8c96a59500a3.roa File: ab20e66a-5e27-3ad6-b6f7-8c96a59500a3.roa (raw, json) Hash identifier: je9MeOIXSWV8gxW2KOMZ4mNaZHAmCr5pkPCn5eftGms= Subject key identifier: D5:02:97:73:D0:20:AA:73:5E:61:AB:47:91:A8:C1:E5:48:E1:4D:34 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584ADC00FE2206A242211A9F1BC0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ab20e66a-5e27-3ad6-b6f7-8c96a59500a3.roa Signing time: Fri 15 Aug 2025 01:00:32 +0000 ROA not before: Fri 15 Aug 2025 01:00:32 +0000 ROA not after: Thu 13 Nov 2025 02:00:32 +0000 asID: 30036 IP address blocks: 108.161.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dc:00:fe:22:06:a2:42:21:1a:9f:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 15 01:00:32 2025 GMT Not After : Nov 13 02:00:32 2025 GMT Subject: CN=75402e84-ff07-4000-a04e-fabff677321e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:12:23:3c:82:ba:d1:81:4c:98:36:39:c3:19: 25:e7:67:79:85:b8:c5:d7:81:bb:03:99:d0:b7:3d: 3a:6d:43:b0:ba:d8:3d:b4:37:92:88:c2:15:69:7b: f1:7f:f6:14:6f:46:16:aa:ce:e6:be:f5:0c:74:40: 36:a6:a4:fe:36:41:5c:55:ed:23:ca:36:57:42:7c: 42:49:32:6d:ab:a6:16:8d:27:62:85:0b:7b:0d:77: 96:44:c5:e4:59:c4:b3:30:f0:7b:a8:e2:fa:19:3e: 27:df:94:ab:c5:f2:e1:67:42:3e:de:ab:8f:0b:4f: e1:cc:7c:ff:47:e4:79:59:ce:9b:32:cd:4c:63:73: c1:0e:fb:40:99:64:fa:8c:ce:8e:c6:fc:1b:8a:74: 4f:6b:06:99:74:b9:ec:95:41:6e:a8:7f:29:d6:4e: 3d:f0:96:87:fe:f4:be:76:ab:f4:28:be:f6:16:07: 84:73:9f:04:47:2e:91:e1:98:2d:56:6a:1d:bf:de: 12:aa:50:10:61:27:97:f7:0e:81:2d:c8:06:12:be: 3c:37:1c:5f:57:05:d9:4c:ef:73:08:7c:b6:58:c4: 99:dd:ca:ae:fb:d5:6d:8e:42:e0:3f:cd:a7:32:0c: 2d:50:80:c9:ec:9e:52:cb:b3:12:82:46:b1:fb:95: a8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:02:97:73:D0:20:AA:73:5E:61:AB:47:91:A8:C1:E5:48:E1:4D:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ab20e66a-5e27-3ad6-b6f7-8c96a59500a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.161.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:47:d9:f8:ab:2d:82:15:74:b6:32:f9:4d:6f:e0:9b:74:07: 9d:87:24:ee:63:93:e5:72:3e:c5:fd:ca:53:11:24:9b:69:5b: 6b:39:2a:db:0d:ba:f9:ee:23:ee:7b:38:0d:ca:d5:0a:a0:42: 34:6e:5a:2f:35:a8:62:89:bb:d9:31:f6:47:19:d3:bc:c4:24: ff:8f:a3:38:7a:c4:a1:50:8b:36:a4:12:39:25:38:41:7b:46: 24:07:c0:6d:79:5c:1f:ba:4b:41:41:a3:c5:f2:ee:89:e3:3a: 21:94:df:c9:87:b1:79:da:70:ab:84:bd:0e:99:05:02:e4:e1: 58:e5:b5:6c:e3:a0:09:a2:08:6d:c2:b1:9f:13:06:69:54:a1: 90:59:73:ad:75:14:dc:2b:01:d2:ee:26:0d:5a:3e:6b:af:5f: 60:75:de:76:d0:dc:c6:5d:e9:e1:ff:ee:8b:7a:67:83:02:34: a5:19:d5:18:b6:90:6e:d5:8c:f2:b8:e8:74:1e:d9:e4:aa:25: 32:0b:f2:c5:ff:b5:3c:e3:68:79:f5:ec:3f:48:99:fa:04:9c: d6:21:9d:d7:9b:58:6d:0c:7c:5c:bb:fe:92:73:c4:5f:24:ec: 68:ec:61:56:cc:9a:0d:55:b8:bb:bf:c4:c4:58:f4:c3:b7:d6: 2d:4f:5e:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErcAP4iBqJCIRqfG8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgxNTAxMDAzMloXDTI1MTExMzAyMDAzMlowLzEtMCsGA1UEAxMk NzU0MDJlODQtZmYwNy00MDAwLWEwNGUtZmFiZmY2NzczMjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhIjPIK60YFMmDY5wxkl52d5hbjF14G7A5nQ tz06bUOwutg9tDeSiMIVaXvxf/YUb0YWqs7mvvUMdEA2pqT+NkFcVe0jyjZXQnxC STJtq6YWjSdihQt7DXeWRMXkWcSzMPB7qOL6GT4n35SrxfLhZ0I+3quPC0/hzHz/ R+R5Wc6bMs1MY3PBDvtAmWT6jM6OxvwbinRPawaZdLnslUFuqH8p1k498JaH/vS+ dqv0KL72FgeEc58ERy6R4ZgtVmodv94SqlAQYSeX9w6BLcgGEr48NxxfVwXZTO9z CHy2WMSZ3cqu+9VtjkLgP82nMgwtUIDJ7J5Sy7MSgkax+5WopwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUCl3PQIKpzXmGrR5GoweVI4U00MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYWIyMGU2NmEtNWUyNy0z YWQ2LWI2ZjctOGM5NmE1OTUwMGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKFcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpH2firLYIVdLYy+U1v4Jt0B52HJO5jk+VyPsX9ylMRJJtpW2s5KtsN uvnuI+57OA3K1QqgQjRuWi81qGKJu9kx9kcZ07zEJP+Pozh6xKFQizakEjklOEF7 RiQHwG15XB+6S0FBo8Xy7onjOiGU38mHsXnacKuEvQ6ZBQLk4VjltWzjoAmiCG3C sZ8TBmlUoZBZc611FNwrAdLuJg1aPmuvX2B13nbQ3MZd6eH/7ot6Z4MCNKUZ1Ri2 kG7VjPK46HQe2eSqJTIL8sX/tTzjaHn17D9ImfoEnNYhndebWG0MfFy7/pJzxF8k 7GjsYVbMmg1VuLu/xMRY9MO31i1PXqs= -----END CERTIFICATE-----Generated at Sat Aug 23 13:12:58 2025 by rpki-client