$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0a48d047-020d-3a7d-a62c-e9fb60d6e703.roa File: 0a48d047-020d-3a7d-a62c-e9fb60d6e703.roa (raw, json) Hash identifier: EQjMyAeiGQIZgq6n3kXLLIt3Wsqg6BzebE51Kh4iy3Q= Subject key identifier: C5:EA:5B:46:E2:BA:D3:5E:C8:EB:7E:25:98:3C:45:2A:05:B1:22:52 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584AC2E0D25F1638F130CB487800 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0a48d047-020d-3a7d-a62c-e9fb60d6e703.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 30036 IP address blocks: 108.166.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:d2:5f:16:38:f1:30:cb:48:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=ef52634a-8d21-4779-b16a-d85080acbe70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cc:b1:2a:24:30:dd:d3:6b:46:43:ff:8f:ea: ea:4b:2e:62:b0:fd:fc:9f:01:82:5f:33:a0:59:48: 3a:23:5f:e7:8c:21:a2:f9:4b:46:db:55:20:c4:cc: 05:55:8e:c7:d8:b5:78:a8:1c:6a:c7:41:24:11:08: 60:d6:ed:ab:78:f5:18:98:77:dc:4b:b4:54:54:2b: 4b:7a:89:c5:87:16:83:1a:ab:87:37:0e:96:43:67: 0a:88:e8:d4:94:32:d7:a1:de:de:5c:d2:37:10:60: 9b:6e:25:15:34:b9:48:e7:76:bb:69:17:fc:c0:c1: 53:21:22:51:90:8f:3b:2f:85:46:fe:4d:29:93:fb: b1:ef:bd:33:83:41:c7:f0:9d:e9:ed:f6:9a:ae:12: 59:8a:e5:1f:62:ab:eb:47:18:63:13:0d:64:22:47: 17:8c:4a:73:9e:dc:7f:ce:88:9c:7c:9d:d0:12:e1: e4:85:23:30:6c:f5:e1:a3:2c:e5:3f:64:52:8a:00: 19:47:19:ab:8c:ff:4b:0d:ab:72:fa:a0:a9:17:1d: 1c:71:d1:ac:82:29:08:f6:1a:a3:77:16:42:92:04: f2:fc:9a:5c:ff:6a:9f:86:12:93:74:be:a8:76:de: 83:f5:c8:e1:f3:6a:80:ee:fe:6a:df:10:ee:d8:be: 37:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:EA:5B:46:E2:BA:D3:5E:C8:EB:7E:25:98:3C:45:2A:05:B1:22:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0a48d047-020d-3a7d-a62c-e9fb60d6e703.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:19:dc:bd:4d:dc:b3:5c:3a:c8:f7:10:59:52:01:30:52:e9: bd:87:d0:f7:3c:48:39:2a:c8:81:20:73:35:1c:2b:2b:ae:39: b2:ac:73:78:c6:57:11:b7:c9:51:89:e5:0d:cf:69:8a:3c:72: 2e:11:e7:55:e5:58:a5:93:39:23:d8:b5:ba:ba:02:d8:08:12: f6:2d:14:98:a2:22:a5:e6:bd:f1:f3:72:ed:0c:b3:e2:04:42: df:10:3c:81:57:15:4b:49:1f:1e:19:ac:25:b7:6c:90:56:13: e4:da:4f:56:6a:09:00:13:9f:c4:c2:3f:44:72:98:04:1f:0e: 98:3b:9e:8a:3b:20:07:a6:9f:c8:c7:d2:f6:d7:5a:f1:ab:3b: 8b:9d:68:59:ff:d1:c4:b3:3d:cb:1e:c7:e8:06:d8:da:d0:37: 05:38:27:91:c2:c2:25:e1:4c:aa:1c:f1:b0:02:e9:e6:a5:e0: 7d:6e:4f:44:f9:0e:22:90:9c:54:c8:42:7a:6a:4b:35:da:53: 6a:99:2d:bd:4f:2f:f8:9a:ff:9a:47:f4:43:6c:c0:62:44:30: d2:f0:97:33:2f:54:9a:9b:91:e3:25:9b:0e:2b:68:3c:28:fa: a0:01:8f:09:60:ea:bf:c1:00:57:30:3d:5f:0a:e7:03:3c:88: cb:d5:ef:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4NJfFjjxMMtIeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZWY1MjYzNGEtOGQyMS00Nzc5LWIxNmEtZDg1MDgwYWNiZTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMyxKiQw3dNrRkP/j+rqSy5isP38nwGCXzOg WUg6I1/njCGi+UtG21UgxMwFVY7H2LV4qBxqx0EkEQhg1u2rePUYmHfcS7RUVCtL eonFhxaDGquHNw6WQ2cKiOjUlDLXod7eXNI3EGCbbiUVNLlI53a7aRf8wMFTISJR kI87L4VG/k0pk/ux770zg0HH8J3p7faarhJZiuUfYqvrRxhjEw1kIkcXjEpzntx/ zoicfJ3QEuHkhSMwbPXhoyzlP2RSigAZRxmrjP9LDaty+qCpFx0ccdGsgikI9hqj dxZCkgTy/Jpc/2qfhhKTdL6odt6D9cjh82qA7v5q3xDu2L43oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXqW0biutNeyOt+JZg8RSoFsSJSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMGE0OGQwNDctMDIwZC0z YTdkLWE2MmMtZTlmYjYwZDZlNzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4Z3L1N3LNcOsj3EFlSATBS6b2H0Pc8SDkqyIEgczUcKyuuObKsc3jG VxG3yVGJ5Q3PaYo8ci4R51XlWKWTOSPYtbq6AtgIEvYtFJiiIqXmvfHzcu0Ms+IE Qt8QPIFXFUtJHx4ZrCW3bJBWE+TaT1ZqCQATn8TCP0RymAQfDpg7noo7IAemn8jH 0vbXWvGrO4udaFn/0cSzPcsex+gG2NrQNwU4J5HCwiXhTKoc8bAC6eal4H1uT0T5 DiKQnFTIQnpqSzXaU2qZLb1PL/ia/5pH9ENswGJEMNLwlzMvVJqbkeMlmw4raDwo +qABjwlg6r/BAFcwPV8K5wM8iMvV75Q= -----END CERTIFICATE-----Generated at Thu Aug 7 05:00:07 2025 by rpki-client