$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/36f3ae61-d72c-3948-b50f-508c610e5e75.roa File: 36f3ae61-d72c-3948-b50f-508c610e5e75.roa (raw, json) Hash identifier: 8NQVvUOdJQUEf8JP2tq2Ep5Kw0Oq8pKmISbc0T8aOHc= Subject key identifier: 37:71:27:72:36:C0:98:45:33:F3:63:F1:28:02:04:A5:23:D8:FB:82 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584AC2E0D5711F72F1E3ED009480 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/36f3ae61-d72c-3948-b50f-508c610e5e75.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 30036 IP address blocks: 108.166.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:d5:71:1f:72:f1:e3:ed:00:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=4aab3c28-717d-43a9-9e3e-3ee9d9981725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7f:cb:f4:b2:0b:96:0f:cf:ac:d0:8f:57:6f: 4b:99:50:6d:79:77:0b:7e:d7:95:0f:43:c9:bc:62: 94:ee:b9:46:59:dc:6e:e7:42:a1:41:1d:9d:4d:7e: e6:00:37:d4:04:cd:53:1d:9f:c2:4a:bd:83:c9:3f: a9:63:14:c8:0a:5b:5f:97:9f:d9:51:da:8a:c9:28: af:9a:b7:68:fa:8a:21:08:81:9a:63:a3:dc:32:b2: a4:31:01:10:23:b3:75:60:64:5b:a2:de:4e:19:48: e3:dc:5b:1f:e2:34:e9:66:d2:18:8f:f3:26:b9:42: 5c:83:01:f3:9f:1c:e8:70:c7:22:b0:4c:ef:45:33: 92:54:59:a6:c8:14:c1:0d:49:6a:12:26:68:b4:6b: 82:8d:11:05:39:ba:e6:c2:99:b8:7f:ee:1f:65:53: 3e:a0:98:21:c7:8e:f4:f8:df:d8:68:ec:50:8a:58: db:b6:21:37:ba:f4:d8:1d:b2:d7:e2:02:d7:9a:29: e1:69:df:77:3a:02:a8:bd:5a:e3:e0:fa:f4:e3:d5: 7f:23:39:3c:a2:e3:9b:67:d0:43:a3:2b:5f:25:d7: b5:5e:60:ab:52:0e:63:3a:7f:c5:fa:46:a0:45:3a: 72:10:21:7c:fb:81:4a:b9:a0:3e:06:e3:1b:b4:4d: 88:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:71:27:72:36:C0:98:45:33:F3:63:F1:28:02:04:A5:23:D8:FB:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/36f3ae61-d72c-3948-b50f-508c610e5e75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:c9:c4:06:86:f9:be:75:d8:4e:d7:3a:b0:c3:fe:94:de:64: 87:7b:4f:ac:84:82:b9:be:f9:eb:3f:9d:9b:25:8b:08:c6:52: 77:56:f1:7d:52:3d:16:79:cf:6d:8a:fc:5c:07:ed:b7:5d:87: ad:35:91:b8:91:c7:55:3c:ea:42:b7:c2:71:84:9d:41:b2:24: bb:0c:5f:4f:97:fe:4a:ab:58:9d:c1:fa:40:13:15:64:75:11: d7:ee:47:4d:ac:24:47:e6:78:c0:d6:38:47:58:32:e8:a2:b1: cc:5b:fa:0b:84:4e:a7:47:7f:c7:f1:80:5e:ec:3f:44:19:9d: d7:5a:90:42:a6:65:55:77:89:dc:0e:66:36:63:b5:ae:ee:ab: fa:f8:3d:01:61:3d:5c:a3:10:48:4e:c5:3d:1f:3a:54:ee:f3: 3f:4e:16:2d:44:3c:45:27:27:e1:0c:32:15:4f:ab:1c:1e:a5: ad:92:b9:68:3a:b5:e0:35:e7:2b:2b:12:71:ca:40:98:a8:5b: be:4d:08:fd:88:78:89:51:5f:d7:aa:d3:21:bf:20:7a:16:cc: be:5c:d3:10:0e:0a:4e:bb:71:a6:79:2c:9c:33:5e:6e:b8:ad: 19:15:54:fa:6a:ea:23:45:28:8b:1d:69:79:cb:f0:24:58:f1: e7:1d:df:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4NVxH3Lx4+0AlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NGFhYjNjMjgtNzE3ZC00M2E5LTllM2UtM2VlOWQ5OTgxNzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX/L9LILlg/PrNCPV29LmVBteXcLfteVD0PJ vGKU7rlGWdxu50KhQR2dTX7mADfUBM1THZ/CSr2DyT+pYxTICltfl5/ZUdqKySiv mrdo+oohCIGaY6PcMrKkMQEQI7N1YGRbot5OGUjj3Fsf4jTpZtIYj/MmuUJcgwHz nxzocMcisEzvRTOSVFmmyBTBDUlqEiZotGuCjREFObrmwpm4f+4fZVM+oJghx470 +N/YaOxQiljbtiE3uvTYHbLX4gLXminhad93OgKovVrj4Pr049V/Izk8ouObZ9BD oytfJde1XmCrUg5jOn/F+kagRTpyECF8+4FKuaA+BuMbtE2ILQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdxJ3I2wJhFM/Nj8SgCBKUj2PuCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzZmM2FlNjEtZDcyYy0z OTQ4LWI1MGYtNTA4YzYxMGU1ZTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzJxAaG+b512E7XOrDD/pTeZId7T6yEgrm++es/nZsliwjGUndW8X1S PRZ5z22K/FwH7bddh601kbiRx1U86kK3wnGEnUGyJLsMX0+X/kqrWJ3B+kATFWR1 EdfuR02sJEfmeMDWOEdYMuiiscxb+guETqdHf8fxgF7sP0QZnddakEKmZVV3idwO ZjZjta7uq/r4PQFhPVyjEEhOxT0fOlTu8z9OFi1EPEUnJ+EMMhVPqxwepa2SuWg6 teA15ysrEnHKQJioW75NCP2IeIlRX9eq0yG/IHoWzL5c0xAOCk67caZ5LJwzXm64 rRkVVPpq6iNFKIsdaXnL8CRY8ecd31k= -----END CERTIFICATE-----Generated at Thu Aug 7 13:05:08 2025 by rpki-client