$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d9d7c8c9-2618-3869-8871-6d62fb89fafc.roa File: d9d7c8c9-2618-3869-8871-6d62fb89fafc.roa (raw, json) Hash identifier: PUpk6YjwDrO1mi6939/0ik/d/XoP/Xzt14/iauNkG4o= Subject key identifier: E7:C1:63:5A:C3:D9:CE:AC:9E:70:E8:13:90:6E:B9:64:47:23:1B:34 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584AD0D66777226340EA97B7A180 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d9d7c8c9-2618-3869-8871-6d62fb89fafc.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 30036 IP address blocks: 108.178.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:67:77:22:63:40:ea:97:b7:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=714f44dd-7f99-4e9b-a520-9402baefa8ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bc:f0:87:56:f5:26:03:47:ad:f4:b1:87:3d: 12:b7:12:63:85:46:73:dc:b7:2e:2c:df:ee:8c:87: 36:21:4c:ab:95:e3:20:07:30:c5:a1:bf:3e:23:01: 9f:b4:59:a1:bf:e9:68:7c:7b:ca:0f:b3:fb:d8:b2: 68:5f:5e:17:d9:b4:47:74:c5:1b:87:d5:f5:cb:85: 81:1b:90:63:ef:76:8e:10:9b:4f:31:99:a4:cc:30: fb:11:0a:58:20:b9:ea:76:55:c1:dd:ab:ad:d2:2e: 18:c5:28:d2:d1:52:1e:62:e4:95:5a:8b:8a:d8:67: cb:48:3f:7c:9c:36:81:b0:48:d1:0b:90:bd:24:39: 6e:8f:98:db:dd:3e:a7:f1:7e:b2:af:6f:72:b7:f7: e5:f3:31:46:d6:ca:44:7d:4d:67:d2:9a:6a:e3:cd: 49:6b:a3:89:9d:aa:08:80:52:41:6d:52:95:fb:7d: 86:8f:d7:d8:ac:fd:86:a3:2b:02:a7:33:4f:6d:3b: a4:00:d3:e4:98:3d:be:e9:97:67:d0:ab:e4:c6:52: ca:f0:41:35:cb:ea:1d:29:81:a2:67:62:f7:e5:0a: 64:3f:92:ea:27:2e:cf:43:70:c9:a6:50:c1:ee:d4: 86:30:03:e9:75:cb:0c:c6:7f:60:ef:d3:9d:da:a0: f9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C1:63:5A:C3:D9:CE:AC:9E:70:E8:13:90:6E:B9:64:47:23:1B:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d9d7c8c9-2618-3869-8871-6d62fb89fafc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.178.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:d5:29:5f:1e:00:c2:64:17:e7:af:22:21:da:73:41:a2:6a: 95:62:6f:e6:23:a2:14:b9:dc:cd:04:2d:a4:8d:e0:b6:8a:9e: df:80:4a:4a:c3:85:e3:91:ce:13:e7:5b:a4:ea:40:01:5a:dd: 0b:33:d1:f7:0e:29:b4:b7:66:2c:77:f2:19:91:9f:23:e1:e2: 6e:e9:ba:51:77:91:bd:f6:4a:5a:90:23:dc:3b:23:7d:3e:7c: ea:0a:54:c3:b3:11:b7:58:a1:f0:2f:05:d5:59:97:cf:42:78: 8f:e1:ab:4a:d3:9f:fb:4a:db:0c:0a:1d:c9:ff:7a:44:11:39: d3:87:2d:ef:2f:71:d9:54:fe:65:67:c2:de:58:d8:d7:13:f1: af:93:b9:80:35:dc:f9:c8:f4:5b:1a:e3:fd:e5:cf:aa:85:ec: 99:d7:b7:4f:e0:5c:8f:a4:73:36:d5:53:98:48:94:56:34:d2: e1:de:5f:a0:9e:fd:d8:95:e2:f8:02:04:7c:5e:1f:52:a2:3a: 10:f4:29:2d:21:87:34:40:2b:31:40:48:4e:20:67:16:cd:d5: bc:55:45:f3:4e:9c:6d:d3:bb:38:91:ca:a0:ce:44:66:e7:88: d4:d4:9f:92:4e:b2:6c:8f:32:5f:9d:09:a0:87:e3:67:0b:b2: 55:bd:fc:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1md3ImNA6pe3oYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk NzE0ZjQ0ZGQtN2Y5OS00ZTliLWE1MjAtOTQwMmJhZWZhOGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7zwh1b1JgNHrfSxhz0StxJjhUZz3LcuLN/u jIc2IUyrleMgBzDFob8+IwGftFmhv+lofHvKD7P72LJoX14X2bRHdMUbh9X1y4WB G5Bj73aOEJtPMZmkzDD7EQpYILnqdlXB3aut0i4YxSjS0VIeYuSVWouK2GfLSD98 nDaBsEjRC5C9JDluj5jb3T6n8X6yr29yt/fl8zFG1spEfU1n0ppq481Ja6OJnaoI gFJBbVKV+32Gj9fYrP2GoysCpzNPbTukANPkmD2+6Zdn0KvkxlLK8EE1y+odKYGi Z2L35QpkP5LqJy7PQ3DJplDB7tSGMAPpdcsMxn9g79Od2qD5uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfBY1rD2c6snnDoE5BuuWRHIxs0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDlkN2M4YzktMjYxOC0z ODY5LTg4NzEtNmQ2MmZiODlmYWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDVKV8eAMJkF+evIiHac0GiapVib+YjohS53M0ELaSN4LaKnt+ASkrD heORzhPnW6TqQAFa3Qsz0fcOKbS3Zix38hmRnyPh4m7pulF3kb32SlqQI9w7I30+ fOoKVMOzEbdYofAvBdVZl89CeI/hq0rTn/tK2wwKHcn/ekQROdOHLe8vcdlU/mVn wt5Y2NcT8a+TuYA13PnI9Fsa4/3lz6qF7JnXt0/gXI+kczbVU5hIlFY00uHeX6Ce /diV4vgCBHxeH1KiOhD0KS0hhzRAKzFASE4gZxbN1bxVRfNOnG3TuziRyqDORGbn iNTUn5JOsmyPMl+dCaCH42cLslW9/OA= -----END CERTIFICATE-----Generated at Sat Aug 23 14:25:00 2025 by rpki-client