$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2a71dd8c-fc36-3328-8d2b-dc1f117aec9e.roa File: 2a71dd8c-fc36-3328-8d2b-dc1f117aec9e.roa (raw, json) Hash identifier: dz12yX/2t6JF4buTfcLwLRG35TSqeZN5FFS+FVKQa7Y= Subject key identifier: D0:BA:55:9A:D5:44:C1:57:C8:16:1B:03:7A:FD:D3:04:88:BF:A6:A1 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849E2250EC6340B4CF64B4BC300 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2a71dd8c-fc36-3328-8d2b-dc1f117aec9e.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 30036 IP address blocks: 108.166.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:0e:c6:34:0b:4c:f6:4b:4b:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=658ece39-665f-4ad0-b085-132cceaa30da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:33:ca:5e:4e:e7:c1:31:2c:b2:f7:7c:d3:6b: 6e:69:96:d9:ee:ee:c6:f4:1d:be:d1:77:25:0c:45: cf:b5:d1:32:d8:3c:0a:6b:02:a5:55:04:b0:bc:47: 51:8c:7c:0e:c4:29:9e:95:a4:ff:30:98:8d:cc:34: db:a7:c6:4e:61:b2:21:e4:de:8f:e0:ac:74:90:1e: 1b:58:ec:5f:9a:52:b8:d4:77:34:a1:30:75:12:0e: e4:c4:a1:84:5a:8a:f8:4e:8c:16:21:de:5c:fc:c4: 11:7d:22:d4:d6:68:72:f7:f1:58:d9:fe:99:9a:29: a4:96:d2:c8:91:e6:6c:22:6e:09:19:15:15:88:2e: d3:e8:d5:ba:62:50:bc:1d:cf:1f:22:9f:eb:52:52: 7c:1c:ec:ac:1d:43:36:b8:6b:8c:49:22:e3:3b:1c: 8d:af:31:7c:1d:72:4f:2e:28:a1:0e:de:51:8f:7a: 7c:c6:e7:9a:7c:7c:7b:c4:1d:f7:fb:bc:1c:6c:75: 6e:92:a1:27:62:d0:b4:e3:5f:b9:7c:fc:57:da:52: 13:ac:2b:c1:1f:d1:31:d1:b8:99:bf:51:3f:bc:0f: 88:e6:d1:4c:61:31:22:bd:94:df:d2:87:b8:fa:ad: 31:e6:3b:00:12:0d:68:d9:b2:dc:1d:b5:91:0b:7d: 43:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:BA:55:9A:D5:44:C1:57:C8:16:1B:03:7A:FD:D3:04:88:BF:A6:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2a71dd8c-fc36-3328-8d2b-dc1f117aec9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:ff:8c:49:83:eb:5c:7f:63:f6:ab:8a:af:ea:50:cd:69:e9: 53:27:b2:98:f0:97:41:ff:67:b8:2b:22:b3:3f:fa:30:d8:70: 3c:47:f0:ab:cf:11:34:36:48:e5:a6:44:d9:69:9e:7d:a6:5f: 64:cb:0f:a9:ef:53:62:25:32:39:19:6b:f7:d1:e1:f5:27:b1: ea:ac:a9:81:e8:d0:08:ca:ee:cf:30:36:8c:18:b5:3f:ae:97: 31:71:40:4c:d9:9b:da:82:99:60:a7:75:6d:4e:f7:53:e2:62: 73:e7:67:ff:48:0d:2b:0a:0d:a0:be:3f:43:74:ec:06:70:ac: ec:11:b7:ce:17:5e:73:b0:86:47:93:0f:15:33:12:2a:cc:02: e7:2a:ef:6c:22:f8:c4:2b:80:10:3d:d5:52:56:44:10:90:9d: 55:5b:14:92:be:72:d5:b1:f9:1c:a8:49:b2:27:88:58:bc:e9: 25:57:5c:66:02:bf:3a:f6:ec:d6:4b:7f:b6:db:d0:cf:04:fb: f5:85:38:84:63:1d:1a:b4:ec:64:15:3d:a3:fb:92:48:20:71: ec:81:1f:e1:d4:c8:63:88:2d:ca:b4:8b:b7:a1:73:fe:e0:43: 07:85:b7:bc:bb:5a:be:a5:51:5f:5e:a1:d4:6a:02:b3:16:1c: bf:78:42:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJQ7GNAtM9ktLwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk NjU4ZWNlMzktNjY1Zi00YWQwLWIwODUtMTMyY2NlYWEzMGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DPKXk7nwTEssvd802tuaZbZ7u7G9B2+0Xcl DEXPtdEy2DwKawKlVQSwvEdRjHwOxCmelaT/MJiNzDTbp8ZOYbIh5N6P4Kx0kB4b WOxfmlK41Hc0oTB1Eg7kxKGEWor4TowWId5c/MQRfSLU1mhy9/FY2f6ZmimkltLI keZsIm4JGRUViC7T6NW6YlC8Hc8fIp/rUlJ8HOysHUM2uGuMSSLjOxyNrzF8HXJP LiihDt5Rj3p8xueafHx7xB33+7wcbHVukqEnYtC041+5fPxX2lITrCvBH9Ex0biZ v1E/vA+I5tFMYTEivZTf0oe4+q0x5jsAEg1o2bLcHbWRC31D1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNC6VZrVRMFXyBYbA3r90wSIv6ahMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMmE3MWRkOGMtZmMzNi0z MzI4LThkMmItZGMxZjExN2FlYzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGP/jEmD61x/Y/ariq/qUM1p6VMnspjwl0H/Z7grIrM/+jDYcDxH8KvP ETQ2SOWmRNlpnn2mX2TLD6nvU2IlMjkZa/fR4fUnseqsqYHo0AjK7s8wNowYtT+u lzFxQEzZm9qCmWCndW1O91PiYnPnZ/9IDSsKDaC+P0N07AZwrOwRt84XXnOwhkeT DxUzEirMAucq72wi+MQrgBA91VJWRBCQnVVbFJK+ctWx+RyoSbIniFi86SVXXGYC vzr27NZLf7bb0M8E+/WFOIRjHRq07GQVPaP7kkggceyBH+HUyGOILcq0i7ehc/7g QweFt7y7Wr6lUV9eodRqArMWHL94Qjo= -----END CERTIFICATE-----Generated at Mon Jun 16 10:33:26 2025 by rpki-client