$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8ee8e724-28dc-31b4-afc7-2df16aa4ddec.roa File: 8ee8e724-28dc-31b4-afc7-2df16aa4ddec.roa (raw, json) Hash identifier: QMtnaCHE0YZVco+jjOGtKOQ3pW9ie9Bgnr6fJRobdCs= Subject key identifier: B2:79:83:33:3C:4D:5C:F1:D2:B0:37:25:BD:AF:7C:D0:2A:73:F0:AF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC71117D0CD8F9B7E541D9BC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8ee8e724-28dc-31b4-afc7-2df16aa4ddec.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 13335 IP address blocks: 108.162.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:17:d0:cd:8f:9b:7e:54:1d:9b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=bb27e315-f3f6-4d0f-bb56-725e420f0623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f2:38:2b:40:35:f5:6b:88:27:7e:5e:c4:46: 92:46:93:d1:4d:f9:50:00:13:f1:4d:24:90:69:5f: 5f:88:02:69:af:16:1c:be:00:fd:5b:b9:fc:b1:6b: a6:c7:e4:57:ff:68:e5:43:d9:a8:ea:d6:28:71:40: 5e:f2:c8:49:62:95:6f:2a:63:de:82:5f:8b:69:10: 3b:5b:81:5a:0e:08:25:3b:c1:cc:f3:2e:9e:c3:fb: 1a:cd:32:5d:51:73:c3:92:c0:ee:f2:16:ff:52:81: f0:62:74:1f:78:3d:7b:f9:b7:59:81:8f:32:53:16: 7d:78:d8:2c:5e:bc:ef:ca:bf:ca:4a:9a:c4:3c:fb: cb:25:26:ed:e9:b5:f5:a7:54:41:67:dd:73:56:3f: eb:bc:c7:a5:8c:ad:b1:38:dc:3a:d3:a2:ce:26:83: d1:52:9e:96:f9:d5:14:5d:93:a9:cb:c6:0c:af:47: d2:21:eb:8a:bb:86:b9:10:00:bc:bd:45:fd:93:17: 77:5d:12:a0:41:d1:f6:4f:ab:38:91:e4:d8:1e:75: eb:7d:94:31:e8:18:5d:8a:7b:5c:38:55:5b:f5:59: 26:76:1c:91:08:08:65:07:4c:c7:30:23:5a:26:e7: 37:8f:1f:76:4c:5c:34:da:de:a9:76:90:fe:81:18: 8f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:79:83:33:3C:4D:5C:F1:D2:B0:37:25:BD:AF:7C:D0:2A:73:F0:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8ee8e724-28dc-31b4-afc7-2df16aa4ddec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 108.162.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:18:84:50:be:39:3f:bb:1f:4e:96:b9:29:fe:55:17:f6:a2: b3:72:81:e2:35:98:aa:78:82:1b:ea:f0:cf:99:3b:77:62:2c: b1:05:6c:48:ab:c5:1b:72:b2:c5:43:2e:b7:29:70:d4:f8:dc: d7:b2:14:fb:9a:f3:59:9e:b0:06:12:e7:d7:00:87:e3:fa:58: 8a:81:44:0e:60:9b:f3:a3:4c:c3:c0:00:96:92:9d:2d:ef:9a: 4a:f4:0c:fc:26:d7:3d:fd:c4:16:00:81:a7:94:34:34:17:ab: ad:5e:60:b4:eb:0d:42:94:0e:9c:da:37:5a:d8:de:ec:6c:21: 86:bf:3c:1b:3a:6c:22:29:9c:4a:8e:55:a9:a2:4f:ab:4d:2b: 96:b3:83:e1:2b:32:8c:3e:3c:ed:02:24:f1:7c:48:1d:c5:40: 64:0d:fc:a0:98:c9:ac:35:0f:78:14:f9:d2:39:0e:06:99:7e: 9c:90:65:df:46:d5:0b:08:95:59:34:f5:63:7c:56:0b:0a:33: 43:e4:b9:9b:7f:3d:8c:29:43:20:1e:49:64:94:ca:e4:f2:5c: fd:31:89:4d:f3:20:82:3b:6c:c7:67:b1:0d:8a:f8:52:ab:b2: 0c:12:4c:5a:3a:68:36:fe:13:ac:0c:7b:dc:83:c0:0f:62:6a: 79:e8:92:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHERfQzY+bflQdm8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk YmIyN2UzMTUtZjNmNi00ZDBmLWJiNTYtNzI1ZTQyMGYwNjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/I4K0A19WuIJ35exEaSRpPRTflQABPxTSSQ aV9fiAJprxYcvgD9W7n8sWumx+RX/2jlQ9mo6tYocUBe8shJYpVvKmPegl+LaRA7 W4FaDgglO8HM8y6ew/sazTJdUXPDksDu8hb/UoHwYnQfeD17+bdZgY8yUxZ9eNgs Xrzvyr/KSprEPPvLJSbt6bX1p1RBZ91zVj/rvMeljK2xONw606LOJoPRUp6W+dUU XZOpy8YMr0fSIeuKu4a5EAC8vUX9kxd3XRKgQdH2T6s4keTYHnXrfZQx6Bhdintc OFVb9VkmdhyRCAhlB0zHMCNaJuc3jx92TFw02t6pdpD+gRiP5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJ5gzM8TVzx0rA3Jb2vfNAqc/CvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGVlOGU3MjQtMjhkYy0z MWI0LWFmYzctMmRmMTZhYTRkZGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKLdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAYhFC+OT+7H06WuSn+VRf2orNygeI1mKp4ghvq8M+ZO3diLLEFbEir xRtyssVDLrcpcNT43NeyFPua81mesAYS59cAh+P6WIqBRA5gm/OjTMPAAJaSnS3v mkr0DPwm1z39xBYAgaeUNDQXq61eYLTrDUKUDpzaN1rY3uxsIYa/PBs6bCIpnEqO VamiT6tNK5azg+ErMow+PO0CJPF8SB3FQGQN/KCYyaw1D3gU+dI5DgaZfpyQZd9G 1QsIlVk09WN8VgsKM0PkuZt/PYwpQyAeSWSUyuTyXP0xiU3zIII7bMdnsQ2K+FKr sgwSTFo6aDb+E6wMe9yDwA9iannokt8= -----END CERTIFICATE-----Generated at Sat Aug 23 15:02:49 2025 by rpki-client