$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2b90e51c-f61d-3b73-b58e-1e41a3569a63.roa File: 2b90e51c-f61d-3b73-b58e-1e41a3569a63.roa (raw, json) Hash identifier: u9s98IHZEHfEueLjDAs2Qfq39ZU1O2ARwPMcl7EaYVE= Subject key identifier: 6C:C8:DA:B4:4D:E0:DF:6C:1C:21:ED:4A:6B:E8:5B:07:F3:D3:D4:F1 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584AC2E0F87CE5D5CB1F63CACF80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2b90e51c-f61d-3b73-b58e-1e41a3569a63.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 30036 IP address blocks: 108.166.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:f8:7c:e5:d5:cb:1f:63:ca:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=7b85c8d5-3feb-4bc5-9cb8-01fe7ef02fde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:36:66:55:95:5e:e5:8d:34:8c:88:14:b4:cd: 30:51:24:45:e5:d2:75:51:f4:4e:c8:5d:6e:c4:55: fd:94:f8:eb:04:4d:d3:e6:51:7d:a0:3e:c0:9c:7b: 5d:9c:5e:0d:18:d2:ad:0d:98:da:28:81:5b:41:9e: ad:ce:3a:95:6b:66:c7:de:e2:88:42:01:0a:71:61: 42:07:59:1e:65:29:e4:6a:4a:eb:59:2f:17:23:69: 4d:46:a0:cd:39:45:e9:e7:ed:73:c4:86:7a:be:ff: 14:ab:5a:64:23:0e:aa:1f:8a:47:25:91:e4:4f:11: ef:57:00:d9:59:a2:d6:70:04:d4:ed:8a:d4:51:68: 79:82:97:65:a6:cd:59:08:93:5b:24:45:3e:8b:fb: 16:d7:b3:20:a9:60:6c:b1:3b:30:ce:4b:41:4f:9a: 45:77:4f:41:6a:9e:a5:4f:a2:73:f6:8d:49:e5:c2: ff:d9:14:e6:ec:2e:43:a7:e6:29:a1:3b:a6:a7:4c: 2b:5b:0b:0d:04:25:97:f8:13:72:85:dc:36:6c:b3: 82:2c:71:5f:f5:bb:bc:fb:45:11:fd:ba:8a:04:dd: e9:51:11:80:c5:18:cd:00:84:5d:0e:89:17:1a:e7: bb:bf:87:b8:7c:92:80:72:6e:15:b8:b5:e6:67:e0: 48:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C8:DA:B4:4D:E0:DF:6C:1C:21:ED:4A:6B:E8:5B:07:F3:D3:D4:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2b90e51c-f61d-3b73-b58e-1e41a3569a63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:d6:54:30:cc:38:e7:c2:ce:9b:ce:3d:9b:04:b1:6b:41:d3: 57:eb:1d:0e:65:2d:c3:d8:e1:88:c4:fc:ed:7f:b2:d0:f6:92: f7:32:ce:08:4f:84:a5:12:bc:eb:e2:51:c6:f8:ae:2d:c4:08: 4d:0b:06:cc:1e:94:75:cd:f6:55:10:57:b7:a4:fe:87:bf:37: 4e:75:13:0f:ec:b4:29:64:f0:a7:13:6c:23:92:6a:45:cf:8f: 74:fb:0f:07:2e:4e:d5:2e:b0:9b:06:40:d0:b2:bb:df:b3:61: b8:e3:ea:1f:98:59:60:83:1a:15:4a:0a:36:e0:92:e0:49:c5: 81:f0:a9:18:d9:40:65:4f:87:fe:c4:c0:89:a3:db:e6:43:41: ef:a4:82:eb:2d:41:a2:44:67:bf:aa:53:b9:b2:5d:ed:a0:c0: 1b:cc:fa:7a:7c:3c:47:e3:13:cb:41:d8:ce:4b:1c:cd:96:46: b3:23:68:89:0a:ea:fd:79:d6:77:23:3d:9f:9a:bf:a9:d2:fb: 4e:f2:b0:79:82:fb:b7:a5:b2:d0:b7:27:19:de:e7:bb:7a:20: 3b:da:27:b5:0b:47:b3:77:1f:89:9b:73:f5:9d:da:a0:ee:78: 35:b9:d4:53:ee:7c:d0:f5:50:78:c6:80:02:66:de:74:9a:41: 14:40:26:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4Ph85dXLH2PKz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk N2I4NWM4ZDUtM2ZlYi00YmM1LTljYjgtMDFmZTdlZjAyZmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjZmVZVe5Y00jIgUtM0wUSRF5dJ1UfROyF1u xFX9lPjrBE3T5lF9oD7AnHtdnF4NGNKtDZjaKIFbQZ6tzjqVa2bH3uKIQgEKcWFC B1keZSnkakrrWS8XI2lNRqDNOUXp5+1zxIZ6vv8Uq1pkIw6qH4pHJZHkTxHvVwDZ WaLWcATU7YrUUWh5gpdlps1ZCJNbJEU+i/sW17MgqWBssTswzktBT5pFd09Bap6l T6Jz9o1J5cL/2RTm7C5Dp+YpoTump0wrWwsNBCWX+BNyhdw2bLOCLHFf9bu8+0UR /bqKBN3pURGAxRjNAIRdDokXGue7v4e4fJKAcm4VuLXmZ+BI1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzI2rRN4N9sHCHtSmvoWwfz09TxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMmI5MGU1MWMtZjYxZC0z YjczLWI1OGUtMWU0MWEzNTY5YTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKafMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvWVDDMOOfCzpvOPZsEsWtB01frHQ5lLcPY4YjE/O1/stD2kvcyzghP hKUSvOviUcb4ri3ECE0LBswelHXN9lUQV7ek/oe/N051Ew/stClk8KcTbCOSakXP j3T7DwcuTtUusJsGQNCyu9+zYbjj6h+YWWCDGhVKCjbgkuBJxYHwqRjZQGVPh/7E wImj2+ZDQe+kgustQaJEZ7+qU7myXe2gwBvM+np8PEfjE8tB2M5LHM2WRrMjaIkK 6v151ncjPZ+av6nS+07ysHmC+7elstC3Jxne57t6IDvaJ7ULR7N3H4mbc/Wd2qDu eDW51FPufND1UHjGgAJm3nSaQRRAJjs= -----END CERTIFICATE-----Generated at Thu Aug 7 00:35:55 2025 by rpki-client