$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bdfa307b-4d25-3d25-acdf-7c0672499955.roa File: bdfa307b-4d25-3d25-acdf-7c0672499955.roa (raw, json) Hash identifier: zlq4uW+ER/ibEp6ywF4BWP+AVjNlaLu9nM+B45z+QbY= Subject key identifier: 7A:19:77:57:74:FC:F8:31:74:D9:0A:02:AA:41:AE:A7:6E:C4:ED:1E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584AC71107B503596FD7F997D45A Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bdfa307b-4d25-3d25-acdf-7c0672499955.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 13335 IP address blocks: 108.162.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:07:b5:03:59:6f:d7:f9:97:d4:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=e1a10405-71f8-42f4-892b-daab37cf4660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f1:45:ff:56:be:f4:ca:95:50:25:e0:82:85: a1:b9:67:d7:7f:e4:d1:b4:c2:8e:05:65:5d:a9:0b: b4:f0:61:39:b5:13:23:00:07:5c:a5:e9:f8:61:90: 44:51:32:6a:49:d2:48:37:29:3d:9d:e8:05:6f:43: bc:84:24:cd:f3:a0:8d:6e:a5:fd:b9:21:1c:2c:dc: 34:f5:80:79:7e:ac:b0:c6:e0:05:99:8e:64:c2:b0: fa:62:3a:71:70:8e:50:d7:e1:fd:c2:96:41:00:15: f8:93:4e:ab:c7:37:53:5e:53:89:5c:ff:d5:d2:eb: 83:05:35:53:f8:6b:ac:eb:c5:1b:da:bb:a6:96:8a: 14:4d:da:c0:ae:7d:a2:3f:ba:b5:79:af:cf:1d:c2: 46:13:70:f7:b6:54:c4:08:f2:ec:08:36:a1:a0:fb: 37:da:68:6b:5f:70:41:47:a6:03:db:4a:38:24:06: 18:6b:01:0e:f6:1b:78:32:c6:10:23:9c:6f:9f:38: 66:f3:bd:ee:ba:92:d1:b0:d0:7a:f6:55:ae:6d:17: 0b:cb:dd:89:f1:d7:70:85:88:b9:09:b1:45:91:d1: c0:71:16:66:66:6b:53:40:e8:77:b0:1d:f9:77:03: 43:af:5b:e2:82:9a:b5:e1:af:7e:8b:84:45:69:98: 48:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:19:77:57:74:FC:F8:31:74:D9:0A:02:AA:41:AE:A7:6E:C4:ED:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bdfa307b-4d25-3d25-acdf-7c0672499955.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 108.162.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:45:80:1d:ce:28:03:38:b0:0d:24:9e:df:e7:60:3e:53:51: 41:73:74:51:34:46:c7:4e:40:f6:46:60:7f:05:97:7b:66:eb: 7a:14:d0:65:d9:65:e2:70:24:57:5f:e7:0c:59:7e:0e:e1:c0: 58:a1:25:0b:32:d1:00:3d:66:f3:f1:04:9f:bc:fc:74:05:bd: a0:07:ec:d6:a3:43:51:61:91:e9:9e:4d:b2:82:ac:54:e0:03: f2:cc:8e:56:ba:b9:70:0d:ca:1f:ab:33:fe:50:56:39:6c:7b: 0c:f3:af:66:71:83:73:7e:ff:a6:67:34:3a:36:e0:91:7c:bf: 3c:04:90:59:62:ca:1f:74:1b:df:cb:a9:63:d2:84:0e:86:12: 02:c4:66:54:60:6a:2a:49:5d:51:ad:25:dc:dc:75:92:ed:83: 69:c8:e9:50:2a:b3:4a:81:b9:0a:1a:de:d6:4b:05:12:eb:a6: 01:c6:ef:06:bd:3d:f6:fa:08:9c:a8:0d:1d:84:24:8b:6e:c9: 24:30:77:44:0a:f9:7a:5b:7f:d6:5d:aa:d6:fa:5e:22:cd:0f: c4:4d:d7:dd:44:ba:3b:d7:b9:61:46:4c:64:5b:fa:8e:a0:3a: 36:d7:60:f0:ee:4c:ff:34:50:a7:79:23:a4:b5:0b:a8:e1:08: 44:fe:13:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHEQe1A1lv1/mX1FowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk ZTFhMTA0MDUtNzFmOC00MmY0LTg5MmItZGFhYjM3Y2Y0NjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvFF/1a+9MqVUCXggoWhuWfXf+TRtMKOBWVd qQu08GE5tRMjAAdcpen4YZBEUTJqSdJINyk9negFb0O8hCTN86CNbqX9uSEcLNw0 9YB5fqywxuAFmY5kwrD6YjpxcI5Q1+H9wpZBABX4k06rxzdTXlOJXP/V0uuDBTVT +Gus68Ub2rumlooUTdrArn2iP7q1ea/PHcJGE3D3tlTECPLsCDahoPs32mhrX3BB R6YD20o4JAYYawEO9ht4MsYQI5xvnzhm873uupLRsNB69lWubRcLy92J8ddwhYi5 CbFFkdHAcRZmZmtTQOh3sB35dwNDr1vigpq14a9+i4RFaZhIxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHoZd1d0/PgxdNkKAqpBrqduxO0eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmRmYTMwN2ItNGQyNS0z ZDI1LWFjZGYtN2MwNjcyNDk5OTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKLWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZFgB3OKAM4sA0knt/nYD5TUUFzdFE0RsdOQPZGYH8Fl3tm63oU0GXZ ZeJwJFdf5wxZfg7hwFihJQsy0QA9ZvPxBJ+8/HQFvaAH7NajQ1FhkemeTbKCrFTg A/LMjla6uXANyh+rM/5QVjlsewzzr2Zxg3N+/6ZnNDo24JF8vzwEkFliyh90G9/L qWPShA6GEgLEZlRgaipJXVGtJdzcdZLtg2nI6VAqs0qBuQoa3tZLBRLrpgHG7wa9 Pfb6CJyoDR2EJItuySQwd0QK+Xpbf9Zdqtb6XiLND8RN191EujvXuWFGTGRb+o6g OjbXYPDuTP80UKd5I6S1C6jhCET+E1k= -----END CERTIFICATE-----Generated at Sat Aug 23 18:19:57 2025 by rpki-client