$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae8311f4-991c-34d1-b153-b3185b728d85.roa File: ae8311f4-991c-34d1-b153-b3185b728d85.roa (raw, json) Hash identifier: r7SVXQ5xG/D/252anvXU5zmEJ6MkHcoWz0ZHC+2hYXg= Subject key identifier: C6:9E:12:0E:7A:D4:ED:70:73:95:0A:24:E5:8E:EB:96:A2:64:31:66 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC71118DC95CA469D77FC7EA0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae8311f4-991c-34d1-b153-b3185b728d85.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 13335 IP address blocks: 108.162.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:18:dc:95:ca:46:9d:77:fc:7e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=e0ade21f-cf18-40c3-9966-5b653844eef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:77:43:a1:0d:a5:50:dd:72:d7:56:6a:b3:8e: 45:a2:bb:04:81:94:77:6e:cf:51:52:9d:2e:4a:bd: ef:fb:b9:76:1a:10:50:4f:d4:f2:c9:cc:39:65:dc: 9f:04:d6:b5:90:23:09:1d:7d:79:fc:45:ee:36:14: 62:84:3d:ac:5a:bf:ac:ef:12:d6:b5:71:08:b5:0a: d6:bd:ce:b2:cf:0d:2d:ce:10:9b:b9:3f:3e:0d:ec: 7f:d1:85:46:c2:6f:31:86:ad:72:3c:59:71:55:51: c1:50:f9:9a:f1:92:fc:36:78:99:84:79:78:09:fc: 40:dc:bf:f8:a2:77:26:fa:cc:22:59:3e:b7:09:fa: 34:49:89:e2:74:7b:59:0f:16:c8:99:59:ce:2f:3e: f5:7f:c5:68:97:6c:4b:36:26:2f:3a:5e:7d:45:03: 52:f6:d3:0b:44:0b:bb:39:a0:2c:c0:cd:af:37:0d: 2f:94:e8:f5:6c:4e:04:14:ab:5f:1f:eb:59:46:a4: a8:b4:77:b4:39:f1:16:7b:2e:56:2b:88:9e:7b:a0: f2:df:47:ae:6c:be:93:60:19:f9:66:2e:57:f1:77: 54:5c:d7:28:3d:c4:c1:79:4d:c0:97:89:b1:6d:eb: 9b:ba:7b:b5:9f:c9:a9:ce:46:c1:b2:90:73:f0:85: 45:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9E:12:0E:7A:D4:ED:70:73:95:0A:24:E5:8E:EB:96:A2:64:31:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae8311f4-991c-34d1-b153-b3185b728d85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 108.162.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:97:07:06:28:5b:25:33:d0:91:1d:ad:01:c8:5f:57:d7:2b: 98:f8:21:e0:61:f2:a6:b5:46:ef:d3:99:18:ce:be:d7:6a:19: b0:d8:fe:bb:40:27:8f:03:db:97:aa:15:58:41:92:da:1a:84: e0:ce:b1:90:d3:9e:d5:f0:9d:d0:0b:8a:14:8d:45:30:c8:82: a4:ed:5c:46:ea:ba:b5:25:f6:4a:bf:49:fa:02:de:c9:9e:19: 21:fe:8d:5f:f6:1d:09:b2:39:1d:89:c2:67:95:15:7f:59:f6: 19:42:73:0e:60:41:65:ee:81:36:65:99:e0:20:de:94:1b:81: 14:2d:8e:e8:a7:d4:b8:45:56:3d:4f:f1:d3:fa:79:3a:79:ad: 2d:fa:70:6f:4c:73:38:56:a8:1b:e2:3a:26:4e:11:5d:93:c3: 10:df:cb:9c:e5:af:5b:01:c9:b9:98:5f:2f:6a:6c:e3:fb:5e: 22:2a:46:37:cb:38:f0:30:04:6c:8b:ce:76:f3:05:9a:a5:92: d1:82:cc:6a:bc:e6:d0:e8:20:79:60:34:bb:67:c5:4d:33:35: de:29:7d:4b:7e:f8:e3:3b:94:a2:62:9b:4c:b5:06:2f:71:4e: 55:f1:3b:60:81:07:99:fd:fc:25:8a:a4:12:29:04:05:25:f9: 2f:c6:10:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHERjclcpGnXf8fqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk ZTBhZGUyMWYtY2YxOC00MGMzLTk5NjYtNWI2NTM4NDRlZWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHdDoQ2lUN1y11Zqs45ForsEgZR3bs9RUp0u Sr3v+7l2GhBQT9Tyycw5ZdyfBNa1kCMJHX15/EXuNhRihD2sWr+s7xLWtXEItQrW vc6yzw0tzhCbuT8+Dex/0YVGwm8xhq1yPFlxVVHBUPma8ZL8NniZhHl4CfxA3L/4 oncm+swiWT63Cfo0SYnidHtZDxbImVnOLz71f8Vol2xLNiYvOl59RQNS9tMLRAu7 OaAswM2vNw0vlOj1bE4EFKtfH+tZRqSotHe0OfEWey5WK4iee6Dy30eubL6TYBn5 Zi5X8XdUXNcoPcTBeU3Al4mxbeubunu1n8mpzkbBspBz8IVFwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMaeEg561O1wc5UKJOWO65aiZDFmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWU4MzExZjQtOTkxYy0z NGQxLWIxNTMtYjMxODViNzI4ZDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKLuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeXBwYoWyUz0JEdrQHIX1fXK5j4IeBh8qa1Ru/TmRjOvtdqGbDY/rtA J48D25eqFVhBktoahODOsZDTntXwndALihSNRTDIgqTtXEbqurUl9kq/SfoC3sme GSH+jV/2HQmyOR2JwmeVFX9Z9hlCcw5gQWXugTZlmeAg3pQbgRQtjuin1LhFVj1P 8dP6eTp5rS36cG9MczhWqBviOiZOEV2TwxDfy5zlr1sBybmYXy9qbOP7XiIqRjfL OPAwBGyLznbzBZqlktGCzGq85tDoIHlgNLtnxU0zNd4pfUt++OM7lKJim0y1Bi9x TlXxO2CBB5n9/CWKpBIpBAUl+S/GENg= -----END CERTIFICATE-----Generated at Sat Aug 23 15:01:30 2025 by rpki-client