$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b5ac4dcd-2e04-30c2-a0d4-2551ea5cc7c4.roa File: b5ac4dcd-2e04-30c2-a0d4-2551ea5cc7c4.roa (raw, json) Hash identifier: 5MhZBDt5Ab5mZc5mKJR1VMT8vU34P9TVPB/1Hhd6kw0= Subject key identifier: 45:51:04:31:02:B3:EA:3C:31:B6:61:5B:18:2E:E1:4C:FE:B7:5E:60 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584AD0D63D1472E14EE8A027E680 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b5ac4dcd-2e04-30c2-a0d4-2551ea5cc7c4.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 30036 IP address blocks: 108.178.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:3d:14:72:e1:4e:e8:a0:27:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=6b623c22-4556-4422-9ac0-b16437c89dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:02:d5:da:16:45:49:d4:8e:77:57:84:ac:8f: 24:de:4f:98:bd:87:b7:fe:f2:e7:82:8a:48:6e:ec: 60:57:60:84:8d:54:f3:55:0e:15:95:af:45:cc:15: ab:ed:3f:39:c3:aa:12:c6:24:de:e3:ff:1b:cf:9e: 03:59:4b:b8:f1:7d:cd:57:12:85:77:62:9b:d9:04: b5:ea:9b:4f:c2:9a:f0:71:34:fe:87:8d:6a:cb:d3: 17:b6:74:af:8d:e0:75:d0:8b:11:ec:19:64:33:26: cd:6d:1c:25:45:ff:13:48:c8:90:da:17:64:ad:e7: b7:dc:c2:a1:85:b6:70:79:62:5a:ac:bd:18:ba:13: 10:cb:bf:c2:f3:32:d8:63:d1:30:07:6f:06:e0:10: ea:39:40:5c:38:cb:a0:12:d6:0b:10:69:33:fd:12: bd:5c:c1:47:7e:ee:9b:be:23:7a:57:db:3e:6e:91: 4a:81:43:14:d5:b4:8e:ab:fe:71:83:4c:de:20:c7: 42:7b:df:32:f1:6b:1c:2b:ec:0c:eb:30:63:88:44: 03:4d:d2:c2:1b:28:0e:75:21:27:61:5b:9e:d1:a6: a2:08:6f:02:9c:65:5d:ac:34:0b:5e:6f:6a:f4:ac: ec:c0:5f:e0:2d:53:0d:f0:f2:80:1c:4e:6f:07:b0: cb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:51:04:31:02:B3:EA:3C:31:B6:61:5B:18:2E:E1:4C:FE:B7:5E:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b5ac4dcd-2e04-30c2-a0d4-2551ea5cc7c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.178.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:9e:25:24:13:1b:df:25:1d:b8:68:b7:b2:4a:94:77:44:5d: c0:b3:00:a3:79:53:e1:29:c1:a5:42:ce:a1:e0:9c:7d:fb:a0: d2:b8:5e:54:dc:93:dd:38:dd:1b:a6:b4:8f:ac:c1:fe:a0:c6: dd:61:bb:cc:56:48:c4:4d:e4:01:d9:50:80:a7:67:94:a3:27: 7e:1b:1d:e0:99:f4:c9:87:fd:85:30:11:02:68:ab:28:78:f8: 80:87:15:13:66:6b:06:19:65:65:6d:d4:18:46:11:55:f0:10: 86:19:cd:12:de:e7:cf:2c:65:64:80:bf:f1:28:bd:1c:67:85: a1:bd:25:59:96:f7:55:f4:f1:d4:e6:00:0c:cf:f0:0b:56:59: 69:dd:e2:8e:cb:84:97:9c:87:03:e6:8f:ce:63:bb:3b:87:09: 68:26:ea:b8:d6:c3:2a:ba:1f:fc:0d:ce:c1:8b:e4:88:92:b3: 71:97:1f:05:85:02:46:9f:37:d8:6a:62:b5:2f:b3:30:13:0b: b1:a1:70:4b:7b:79:a7:e5:ee:40:1f:99:30:27:81:71:56:cb: 97:67:5d:37:8a:ab:07:d6:84:4e:08:97:9f:b8:ff:26:af:a6: bb:7d:1f:35:ab:e9:02:ee:ae:ad:f5:7d:ac:46:6a:56:84:f5: 59:ab:01:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1j0UcuFO6KAn5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk NmI2MjNjMjItNDU1Ni00NDIyLTlhYzAtYjE2NDM3Yzg5ZGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywLV2hZFSdSOd1eErI8k3k+YvYe3/vLngopI buxgV2CEjVTzVQ4Vla9FzBWr7T85w6oSxiTe4/8bz54DWUu48X3NVxKFd2Kb2QS1 6ptPwprwcTT+h41qy9MXtnSvjeB10IsR7BlkMybNbRwlRf8TSMiQ2hdkree33MKh hbZweWJarL0YuhMQy7/C8zLYY9EwB28G4BDqOUBcOMugEtYLEGkz/RK9XMFHfu6b viN6V9s+bpFKgUMU1bSOq/5xg0zeIMdCe98y8WscK+wM6zBjiEQDTdLCGygOdSEn YVue0aaiCG8CnGVdrDQLXm9q9KzswF/gLVMN8PKAHE5vB7DLpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVRBDECs+o8MbZhWxgu4Uz+t15gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjVhYzRkY2QtMmUwNC0z MGMyLWEwZDQtMjU1MWVhNWNjN2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLLpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKeJSQTG98lHbhot7JKlHdEXcCzAKN5U+EpwaVCzqHgnH37oNK4XlTc k9043RumtI+swf6gxt1hu8xWSMRN5AHZUICnZ5SjJ34bHeCZ9MmH/YUwEQJoqyh4 +ICHFRNmawYZZWVt1BhGEVXwEIYZzRLe588sZWSAv/EovRxnhaG9JVmW91X08dTm AAzP8AtWWWnd4o7LhJechwPmj85juzuHCWgm6rjWwyq6H/wNzsGL5IiSs3GXHwWF AkafN9hqYrUvszATC7GhcEt7eafl7kAfmTAngXFWy5dnXTeKqwfWhE4Il5+4/yav prt9HzWr6QLurq31faxGalaE9VmrAf8= -----END CERTIFICATE-----Generated at Sat Aug 23 20:11:59 2025 by rpki-client