$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d1da16e8-c07d-300f-a26a-1611e9245748.roa File: d1da16e8-c07d-300f-a26a-1611e9245748.roa (raw, json) Hash identifier: beYu/yiNVykxftkMY59bPnzsQeAied7ACmTQtwdU5Ak= Subject key identifier: BB:53:35:A0:6B:73:33:B7:DA:DB:42:C9:18:B6:7B:AE:6D:14:55:DE Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584AD0D66683BE71A7CEDD731500 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d1da16e8-c07d-300f-a26a-1611e9245748.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 30036 IP address blocks: 108.178.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:66:83:be:71:a7:ce:dd:73:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=54e991a8-e1b3-443b-a803-6521d62e36c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0b:f9:4a:33:d2:4e:3f:00:1b:c9:86:51:46: ac:d0:b7:0f:de:b2:d3:1f:a7:32:e6:bd:2c:cf:0e: 93:8a:ac:45:4e:f9:c9:ce:0d:40:e2:0f:b4:04:f9: ad:c1:74:a9:81:87:48:57:ea:76:70:38:29:b9:4d: 20:ef:d6:27:fd:9d:90:f8:39:84:56:42:7c:3b:08: 05:3b:6a:4d:81:86:55:49:69:a0:2e:9d:87:d2:0f: 13:92:94:90:95:07:dd:98:c8:7f:66:7d:c3:74:71: 48:d2:2c:3e:64:b4:34:0e:42:a3:5a:99:33:a4:61: eb:2c:07:33:92:21:b6:27:1c:6f:99:f9:f7:d7:c4: f0:3f:55:64:f8:99:12:c5:4b:60:82:31:33:ca:17: 6b:b7:90:d2:f1:7f:c8:bf:11:28:d7:13:94:61:bd: 2f:a4:3d:26:d6:c2:4c:99:59:f2:ea:57:dc:f5:34: 8b:d6:c6:a2:e4:d5:c5:51:7d:c1:0c:ea:34:6e:25: 07:1a:ba:68:84:c1:3a:8f:d3:ec:cc:6a:6e:25:d7: 60:f4:91:70:db:28:a1:cb:27:d0:e7:c6:74:38:a4: fc:a5:1b:f9:97:a6:88:c0:2a:f1:e5:34:6c:a5:bd: 1e:81:5a:13:0d:19:bd:9b:b6:b8:9b:2f:01:ac:6c: 11:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:53:35:A0:6B:73:33:B7:DA:DB:42:C9:18:B6:7B:AE:6D:14:55:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d1da16e8-c07d-300f-a26a-1611e9245748.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.178.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:80:e1:1d:43:36:95:61:5f:44:73:ef:85:74:d0:ef:0a:f2: cc:5c:6a:4c:cf:94:ff:36:ae:d6:95:32:ba:fd:d1:01:f0:88: 61:af:82:79:3f:99:43:df:82:1f:76:e3:ec:7a:c1:96:89:fa: 22:aa:b9:6c:94:1f:18:e1:d7:b2:2a:37:71:f6:13:ab:4d:d8: ec:c4:3e:ac:be:c4:3e:00:be:b4:3b:7f:ff:01:15:9e:1c:27: 73:77:09:4f:f8:d3:1b:8c:63:44:25:ea:05:83:e6:9d:77:01: 9f:08:0b:72:d8:da:54:01:0f:1f:27:a8:30:00:f1:a1:fa:f8: 53:50:bf:52:1c:db:0a:42:4c:d7:01:a2:bc:1f:35:7a:fb:f5: 8d:1e:84:df:9b:a7:99:19:73:9d:3c:17:c9:e6:dc:61:0d:c6: 58:45:59:51:7e:21:ca:d5:5d:c3:69:87:e6:16:8d:1d:44:a3: 8d:2a:35:e3:14:2c:d0:44:e1:b4:92:19:75:8a:e7:32:bb:40: 53:9c:27:cb:4c:82:50:df:5a:d1:bc:6f:93:1b:02:82:c7:e2: 33:bb:e0:b7:2c:79:e5:03:69:60:c6:ce:84:83:3c:ba:0c:0f: d8:14:07:98:7a:75:01:a4:45:dc:e2:2a:07:65:39:2b:45:53: ab:de:ea:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1maDvnGnzt1zFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk NTRlOTkxYTgtZTFiMy00NDNiLWE4MDMtNjUyMWQ2MmUzNmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswv5SjPSTj8AG8mGUUas0LcP3rLTH6cy5r0s zw6TiqxFTvnJzg1A4g+0BPmtwXSpgYdIV+p2cDgpuU0g79Yn/Z2Q+DmEVkJ8OwgF O2pNgYZVSWmgLp2H0g8TkpSQlQfdmMh/Zn3DdHFI0iw+ZLQ0DkKjWpkzpGHrLAcz kiG2Jxxvmfn318TwP1Vk+JkSxUtggjEzyhdrt5DS8X/IvxEo1xOUYb0vpD0m1sJM mVny6lfc9TSL1sai5NXFUX3BDOo0biUHGrpohME6j9PszGpuJddg9JFw2yihyyfQ 58Z0OKT8pRv5l6aIwCrx5TRspb0egVoTDRm9m7a4my8BrGwRywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLtTNaBrczO32ttCyRi2e65tFFXeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDFkYTE2ZTgtYzA3ZC0z MDBmLWEyNmEtMTYxMWU5MjQ1NzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLL3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaA4R1DNpVhX0Rz74V00O8K8sxcakzPlP82rtaVMrr90QHwiGGvgnk/ mUPfgh924+x6wZaJ+iKquWyUHxjh17IqN3H2E6tN2OzEPqy+xD4AvrQ7f/8BFZ4c J3N3CU/40xuMY0Ql6gWD5p13AZ8IC3LY2lQBDx8nqDAA8aH6+FNQv1Ic2wpCTNcB orwfNXr79Y0ehN+bp5kZc508F8nm3GENxlhFWVF+IcrVXcNph+YWjR1Eo40qNeMU LNBE4bSSGXWK5zK7QFOcJ8tMglDfWtG8b5MbAoLH4jO74LcseeUDaWDGzoSDPLoM D9gUB5h6dQGkRdziKgdlOStFU6ve6rM= -----END CERTIFICATE-----Generated at Sat Aug 23 18:50:04 2025 by rpki-client