$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a29a8287-cde6-44dc-b043-729b2dc9ed7f/eb971c07-011b-37f6-9cf8-8cb4b0d20b8e.roa File: eb971c07-011b-37f6-9cf8-8cb4b0d20b8e.roa (raw, json) Hash identifier: kVfvjKjulSntAQIUV06GTQK/vodI6ez6uTNIjANMOjY= Subject key identifier: FD:AB:5B:49:DD:2F:A5:7D:28:16:84:E4:AC:C8:D8:47:D8:3D:AD:81 Certificate issuer: /CN=a29a8287-cde6-44dc-b043-729b2dc9ed7f Certificate serial: 010D0C9F4328584ADC00FFB92BDB0956FDA74280 Authority key identifier: 6A:4B:5C:ED:8E:BA:4F:ED:AF:ED:63:6C:68:9C:E8:BE:37:BE:08:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a29a8287-cde6-44dc-b043-729b2dc9ed7f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a29a8287-cde6-44dc-b043-729b2dc9ed7f/eb971c07-011b-37f6-9cf8-8cb4b0d20b8e.roa Signing time: Fri 15 Aug 2025 01:00:32 +0000 ROA not before: Fri 15 Aug 2025 01:00:32 +0000 ROA not after: Thu 13 Nov 2025 02:00:32 +0000 asID: 138995 IP address blocks: 108.187.0.0/24 maxlen: 24 108.187.1.0/24 maxlen: 24 108.187.2.0/24 maxlen: 24 108.187.4.0/24 maxlen: 24 108.187.5.0/24 maxlen: 24 108.187.6.0/24 maxlen: 24 108.187.7.0/24 maxlen: 24 108.187.8.0/24 maxlen: 24 108.187.9.0/24 maxlen: 24 108.187.10.0/24 maxlen: 24 108.187.11.0/24 maxlen: 24 108.187.12.0/24 maxlen: 24 108.187.13.0/24 maxlen: 24 108.187.14.0/24 maxlen: 24 108.187.15.0/24 maxlen: 24 108.187.32.0/24 maxlen: 24 108.187.33.0/24 maxlen: 24 108.187.34.0/24 maxlen: 24 108.187.35.0/24 maxlen: 24 108.187.36.0/24 maxlen: 24 108.187.37.0/24 maxlen: 24 108.187.40.0/24 maxlen: 24 108.187.41.0/24 maxlen: 24 108.187.42.0/24 maxlen: 24 108.187.43.0/24 maxlen: 24 108.187.44.0/24 maxlen: 24 108.187.45.0/24 maxlen: 24 192.163.160.0/24 maxlen: 24 192.163.161.0/24 maxlen: 24 192.163.162.0/24 maxlen: 24 192.163.166.0/24 maxlen: 24 192.163.167.0/24 maxlen: 24 192.163.168.0/24 maxlen: 24 192.163.169.0/24 maxlen: 24 192.163.170.0/24 maxlen: 24 192.163.171.0/24 maxlen: 24 192.163.172.0/24 maxlen: 24 192.163.173.0/24 maxlen: 24 192.163.174.0/24 maxlen: 24 192.163.175.0/24 maxlen: 24 192.229.112.0/24 maxlen: 24 192.229.113.0/24 maxlen: 24 192.229.114.0/24 maxlen: 24 192.229.115.0/24 maxlen: 24 192.229.116.0/24 maxlen: 24 192.229.117.0/24 maxlen: 24 192.229.118.0/24 maxlen: 24 192.229.119.0/24 maxlen: 24 192.229.120.0/24 maxlen: 24 192.229.121.0/24 maxlen: 24 192.229.122.0/24 maxlen: 24 192.229.123.0/24 maxlen: 24 192.229.124.0/24 maxlen: 24 192.238.160.0/24 maxlen: 24 192.238.161.0/24 maxlen: 24 192.238.162.0/24 maxlen: 24 192.238.163.0/24 maxlen: 24 192.238.164.0/24 maxlen: 24 192.238.165.0/24 maxlen: 24 192.238.166.0/24 maxlen: 24 192.238.167.0/24 maxlen: 24 192.238.168.0/24 maxlen: 24 192.238.169.0/24 maxlen: 24 192.238.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a29a8287-cde6-44dc-b043-729b2dc9ed7f/a29a8287-cde6-44dc-b043-729b2dc9ed7f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a29a8287-cde6-44dc-b043-729b2dc9ed7f/a29a8287-cde6-44dc-b043-729b2dc9ed7f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a29a8287-cde6-44dc-b043-729b2dc9ed7f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dc:00:ff:b9:2b:db:09:56:fd:a7:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a29a8287-cde6-44dc-b043-729b2dc9ed7f Validity Not Before: Aug 15 01:00:32 2025 GMT Not After : Nov 13 02:00:32 2025 GMT Subject: CN=95d744a5-b77c-4d7d-98f8-9e52324b9a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:87:be:57:c4:9e:79:1a:21:be:02:c5:e6:51: 96:21:98:6a:0a:d0:b7:f6:b4:25:f9:9e:f3:a1:5b: 1f:aa:79:03:b8:ff:66:6a:29:c8:73:1f:88:c7:6e: 37:23:a6:ec:16:17:8b:d1:bf:78:f0:2c:03:3d:c8: c5:f8:de:8d:fd:46:fd:2c:3a:e7:89:3d:4e:84:40: 16:c0:97:a5:81:49:05:4b:60:ad:82:07:0e:3d:6f: 6d:da:3f:5d:d6:99:11:d4:7c:7d:6e:e2:b6:49:0e: 02:08:d5:dc:00:67:97:f9:cf:20:dd:dd:f8:ab:e3: 27:39:10:83:c3:e7:97:e7:f1:5d:ef:e7:b3:ad:17: 62:d7:fa:86:7b:6c:9e:06:f0:ec:f5:1f:c5:ea:a1: e7:bc:86:14:d3:ea:e1:ad:4e:72:2b:9b:6c:6b:70: 79:e9:7f:a2:0b:51:1c:bf:72:74:e9:c9:07:ab:61: 7c:c7:84:2b:7e:cd:61:49:d0:5c:6d:23:ed:08:db: 6e:bd:6a:bb:f7:27:63:de:9d:8d:51:30:97:8d:d4: 6d:7f:02:05:89:c3:c4:a8:cc:8c:49:57:6f:b3:4f: d7:01:9f:72:73:5b:72:b7:22:a5:65:7a:8f:08:ae: 0f:05:70:20:bc:28:75:e7:d5:89:b8:25:c4:4a:06: cb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:AB:5B:49:DD:2F:A5:7D:28:16:84:E4:AC:C8:D8:47:D8:3D:AD:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a29a8287-cde6-44dc-b043-729b2dc9ed7f/eb971c07-011b-37f6-9cf8-8cb4b0d20b8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a29a8287-cde6-44dc-b043-729b2dc9ed7f/a29a8287-cde6-44dc-b043-729b2dc9ed7f.crl X509v3 Authority Key Identifier: keyid:6A:4B:5C:ED:8E:BA:4F:ED:AF:ED:63:6C:68:9C:E8:BE:37:BE:08:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a29a8287-cde6-44dc-b043-729b2dc9ed7f.cer sbgp-ipAddrBlock: critical IPv4: 108.187.0.0-108.187.2.255 108.187.4.0-108.187.15.255 108.187.32.0-108.187.37.255 108.187.40.0-108.187.45.255 192.163.160.0-192.163.162.255 192.163.166.0-192.163.175.255 192.229.112.0-192.229.124.255 192.238.160.0-192.238.170.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:61:de:c4:84:a7:b8:6e:0d:fa:be:4a:cb:15:2d:3b:ae:98: bd:0e:26:16:8f:58:1d:f8:1c:aa:be:81:55:7f:a8:82:5b:85: 63:8c:fb:56:f6:43:aa:f6:9c:87:6f:ff:f8:c4:f8:18:4b:fb: 45:75:7a:d4:ba:60:46:a2:d7:10:0f:93:f2:47:63:23:7b:88: ef:ea:74:62:34:d2:ff:33:b8:34:f2:9a:d1:b5:b8:67:dc:28: e8:df:26:c7:16:b0:05:48:0f:b2:d1:f6:13:d7:fb:8e:03:65: 6f:15:c9:71:16:ff:b8:d9:69:0c:b9:ef:ce:9e:c2:7c:fa:5f: a1:b0:2f:1a:ec:d6:0f:7c:b5:fe:f8:fd:a3:d5:50:c6:46:7a: 6d:37:80:4b:c6:8b:78:bb:02:3c:5e:3d:a4:ad:6c:c9:d5:12: 00:01:9e:b4:59:99:3e:02:1f:c1:79:d8:3a:af:0f:38:75:7c: b9:8a:6f:f6:17:b9:1c:ce:8b:dd:01:4a:72:92:02:41:f1:4c: 82:1c:16:81:12:4a:2b:05:5e:b5:df:f6:fe:ff:e8:ca:be:ab: 1d:c1:d7:0c:f3:05:45:92:51:55:d8:4b:4c:2b:f2:ec:9c:a5: 79:eb:5d:fe:b0:33:1a:4b:ee:8d:a2:d6:52:81:44:45:6a:30: 31:ff:f1:74 -----BEGIN CERTIFICATE----- MIIGrTCCBZWgAwIBAgIUAQ0Mn0MoWErcAP+5K9sJVv2nQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI5YTgyODctY2RlNi00NGRjLWIwNDMtNzI5YjJkYzll ZDdmMB4XDTI1MDgxNTAxMDAzMloXDTI1MTExMzAyMDAzMlowLzEtMCsGA1UEAxMk OTVkNzQ0YTUtYjc3Yy00ZDdkLTk4ZjgtOWU1MjMyNGI5YTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIe+V8SeeRohvgLF5lGWIZhqCtC39rQl+Z7z oVsfqnkDuP9mainIcx+Ix243I6bsFheL0b948CwDPcjF+N6N/Ub9LDrniT1OhEAW wJelgUkFS2CtggcOPW9t2j9d1pkR1Hx9buK2SQ4CCNXcAGeX+c8g3d34q+MnORCD w+eX5/Fd7+ezrRdi1/qGe2yeBvDs9R/F6qHnvIYU0+rhrU5yK5tsa3B56X+iC1Ec v3J06ckHq2F8x4Qrfs1hSdBcbSPtCNtuvWq79ydj3p2NUTCXjdRtfwIFicPEqMyM SVdvs0/XAZ9yc1tytyKlZXqPCK4PBXAgvCh159WJuCXESgbL8QIDAQABo4IDvzCC A7swHQYDVR0OBBYEFP2rW0ndL6V9KBaE5KzI2EfYPa2BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hMjlh ODI4Ny1jZGU2LTQ0ZGMtYjA0My03MjliMmRjOWVkN2YvZWI5NzFjMDctMDExYi0z N2Y2LTljZjgtOGNiNGIwZDIwYjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTI5YTgyODctY2RlNi00NGRjLWIw NDMtNzI5YjJkYzllZDdmL2EyOWE4Mjg3LWNkZTYtNDRkYy1iMDQzLTcyOWIyZGM5 ZWQ3Zi5jcmwwHwYDVR0jBBgwFoAUaktc7Y66T+2v7WNsaJzovje+CK0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hMjlhODI4Ny1jZGU2LTQ0ZGMtYjA0My03Mjli MmRjOWVkN2YuY2VyMIGIBggrBgEFBQcBBwEB/wR5MHcwdQQCAAEwbzALAwMAbLsD BABsuwIwDAMEAmy7BAMEBGy7ADAMAwQFbLsgAwQBbLskMAwDBANsuygDBAFsuyww DAMEBcCjoAMEAMCjojAMAwQBwKOmAwQEwKOgMAwDBATA5XADBADA5XwwDAMEBcDu oAMEAMDuqjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQCTYd7EhKe4bg36vkrLFS07rpi9DiYWj1gd+ByqvoFV f6iCW4VjjPtW9kOq9pyHb//4xPgYS/tFdXrUumBGotcQD5PyR2Mje4jv6nRiNNL/ M7g08prRtbhn3Cjo3ybHFrAFSA+y0fYT1/uOA2VvFclxFv+42WkMue/OnsJ8+l+h sC8a7NYPfLX++P2j1VDGRnptN4BLxot4uwI8Xj2krWzJ1RIAAZ60WZk+Ah/Bedg6 rw84dXy5im/2F7kczovdAUpykgJB8UyCHBaBEkorBV613/b+/+jKvqsdwdcM8wVF klFV2EtMK/LsnKV5613+sDMaS+6NotZSgURFajAx//F0 -----END CERTIFICATE-----Generated at Sat Aug 23 13:35:58 2025 by rpki-client