$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2a71dd8c-fc36-3328-8d2b-dc1f117aec9e.roa File: 2a71dd8c-fc36-3328-8d2b-dc1f117aec9e.roa (raw, json) Hash identifier: IEa+qdU44z3L8/DeMxlfqZ+Itv+f35PcnfD8PxtwYVU= Subject key identifier: 96:72:D3:38:7A:13:86:F3:86:C7:B4:FA:7E:C5:1C:E7:50:AD:BE:B1 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584AC2E11C7C09D33938A81BFF50 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2a71dd8c-fc36-3328-8d2b-dc1f117aec9e.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 30036 IP address blocks: 108.166.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:1c:7c:09:d3:39:38:a8:1b:ff:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=540ff8f4-1394-47da-b097-230ba6967910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:36:76:74:ff:0e:ea:6b:5e:d8:e5:e0:81:a9: b6:bf:89:50:ba:39:84:a2:c8:6d:e8:4d:d1:78:95: 33:5c:88:1e:40:7f:ca:a5:de:40:e3:a8:82:ee:06: 4d:3c:34:62:8f:7b:5d:52:e0:40:98:7e:42:a2:42: ed:82:88:b4:45:e0:35:b8:58:42:c8:72:42:c1:9d: cb:4b:e2:42:7e:e0:8c:e0:ae:a9:d7:32:71:94:f0: 48:d2:bc:fb:3c:d7:58:9b:64:5d:5a:a5:20:0f:f4: ed:be:de:33:81:15:1f:c5:36:3b:0a:a3:66:ff:fc: d6:d9:f9:80:8d:3a:2c:cc:9c:7f:ce:78:90:4a:5d: 00:98:41:fc:ad:16:3b:12:4c:c1:12:fe:d2:c4:95: fa:44:1f:6a:a3:0a:84:50:49:e2:29:33:4e:c7:c4: 2b:55:d9:16:0d:60:be:9a:e5:4e:0a:8d:62:d4:d5: f7:e4:5f:ac:fc:75:0d:8d:37:c9:77:0a:6e:26:f6: 7c:cd:56:d7:f1:99:fd:54:a8:96:fb:11:6d:29:6b: ef:7d:e2:b7:bd:aa:7a:ba:ce:3b:a8:26:d6:54:1c: 2a:63:20:5a:b7:6e:fc:14:58:01:46:98:d3:e8:ea: 74:7f:f3:ee:ff:0b:ab:6c:b3:b7:d7:ab:81:a7:7b: 01:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:72:D3:38:7A:13:86:F3:86:C7:B4:FA:7E:C5:1C:E7:50:AD:BE:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2a71dd8c-fc36-3328-8d2b-dc1f117aec9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:91:c3:55:8d:f1:22:ec:4f:85:67:86:4a:92:49:b4:a8:f6: 08:7b:31:43:ef:6f:39:cc:24:8a:a7:57:51:0f:6f:ca:88:26: 74:ce:a2:1c:b5:6f:93:7b:62:8b:44:68:28:42:49:f8:49:90: 05:c3:e0:7d:52:82:f0:65:0a:e1:c4:19:04:82:67:f9:7a:c6: 19:0e:94:da:74:e1:f9:4b:fb:5d:12:4a:58:98:50:0f:d0:1b: 98:60:b8:bc:69:40:97:74:5b:22:57:de:7a:45:db:d2:10:3a: b8:1e:e2:f7:b2:a0:3c:bd:3f:83:f9:1c:7e:fe:65:f8:2c:40: b9:55:ed:f0:fc:31:4c:45:df:3d:76:40:66:4a:25:b8:e8:66: 61:e1:0a:e6:f0:9b:24:9e:e2:00:ac:21:51:21:e8:0d:9d:e6: 1e:99:c3:8e:c9:e2:41:3f:bb:91:22:cf:b8:d9:d7:55:92:bb: 1b:65:86:ec:68:87:01:70:d2:c2:8c:8c:7f:ab:ec:38:5a:33: b4:3a:49:c0:cb:d5:68:0f:46:f7:61:0d:cd:c7:df:f7:d3:01: 38:f6:0f:ff:e7:ad:62:bd:82:7d:0e:8c:07:20:69:66:9d:45: 94:3c:1b:07:e7:81:b4:20:d5:12:93:73:45:47:d6:6c:57:c5: 79:bc:40:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4Rx8CdM5OKgb/1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NTQwZmY4ZjQtMTM5NC00N2RhLWIwOTctMjMwYmE2OTY3OTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzZ2dP8O6mte2OXggam2v4lQujmEosht6E3R eJUzXIgeQH/Kpd5A46iC7gZNPDRij3tdUuBAmH5CokLtgoi0ReA1uFhCyHJCwZ3L S+JCfuCM4K6p1zJxlPBI0rz7PNdYm2RdWqUgD/Ttvt4zgRUfxTY7CqNm//zW2fmA jToszJx/zniQSl0AmEH8rRY7EkzBEv7SxJX6RB9qowqEUEniKTNOx8QrVdkWDWC+ muVOCo1i1NX35F+s/HUNjTfJdwpuJvZ8zVbX8Zn9VKiW+xFtKWvvfeK3vap6us47 qCbWVBwqYyBat278FFgBRpjT6Op0f/Pu/wurbLO316uBp3sBewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZy0zh6E4bzhse0+n7FHOdQrb6xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMmE3MWRkOGMtZmMzNi0z MzI4LThkMmItZGMxZjExN2FlYzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCRw1WN8SLsT4VnhkqSSbSo9gh7MUPvbznMJIqnV1EPb8qIJnTOohy1 b5N7YotEaChCSfhJkAXD4H1SgvBlCuHEGQSCZ/l6xhkOlNp04flL+10SSliYUA/Q G5hguLxpQJd0WyJX3npF29IQOrge4veyoDy9P4P5HH7+ZfgsQLlV7fD8MUxF3z12 QGZKJbjoZmHhCubwmySe4gCsIVEh6A2d5h6Zw47J4kE/u5Eiz7jZ11WSuxtlhuxo hwFw0sKMjH+r7DhaM7Q6ScDL1WgPRvdhDc3H3/fTATj2D//nrWK9gn0OjAcgaWad RZQ8GwfngbQg1RKTc0VH1mxXxXm8QJA= -----END CERTIFICATE-----Generated at Thu Aug 7 05:10:39 2025 by rpki-client