$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a5b4829-2d99-3de8-8efe-3261710e92cb.roa File: 4a5b4829-2d99-3de8-8efe-3261710e92cb.roa (raw, json) Hash identifier: 7Pn3Z0Dytzvj7qhUqt6YCzhdUc7eWCtxrKgyMby/8Oc= Subject key identifier: 22:F0:66:D5:8A:85:CE:42:1E:F7:D7:7F:17:44:6C:91:66:30:2E:64 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BB19285EADD11000E7FFBA080 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a5b4829-2d99-3de8-8efe-3261710e92cb.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 108.178.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:85:ea:dd:11:00:0e:7f:fb:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=aa455566-c22c-4268-bc15-02d48954a2b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:dd:03:18:34:27:b9:e9:f3:f3:d9:69:a6:60: d4:b9:4b:92:69:f9:3e:7d:3d:31:80:bf:11:e0:b8: ee:e6:5f:68:d7:e4:05:33:9e:a9:5e:77:15:cd:fd: 76:c0:9d:67:a8:d1:57:52:4f:4b:94:a7:b9:94:c4: 6a:c3:b9:79:76:a2:68:a0:fe:fc:c3:a5:bf:dc:6e: 19:55:c3:18:8b:ab:10:0c:6e:57:8b:33:5b:f7:8c: bb:39:7d:41:ca:a2:d1:b8:94:a5:37:57:bd:68:50: f9:d7:6b:8a:b7:9e:ac:ce:b6:57:35:4b:45:8a:7a: d5:51:11:d1:e3:21:f1:fc:0a:66:0a:f7:1a:57:b3: d5:b6:87:54:2f:fb:ca:41:ef:44:4e:40:e5:46:a2: 07:a8:8b:bf:bf:27:d3:e3:aa:34:49:0d:4d:8b:a1: 5a:f6:f0:53:5f:57:2e:f5:91:09:5a:e4:4e:6d:f2: 2f:fd:4b:dd:4c:3c:4c:df:62:e1:91:83:21:05:d3: 71:c7:34:9d:b6:fe:27:a3:01:c6:31:aa:53:4e:b0: 9d:5f:4a:68:eb:13:e1:aa:80:b1:86:61:1f:88:c3: 93:cd:59:dc:34:b7:4c:78:01:c8:cc:4a:37:69:7e: 96:8b:ca:92:5a:65:31:ad:b7:93:4d:cf:b9:27:0e: a0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F0:66:D5:8A:85:CE:42:1E:F7:D7:7F:17:44:6C:91:66:30:2E:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a5b4829-2d99-3de8-8efe-3261710e92cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.178.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:d0:10:40:b5:7d:1c:4c:ed:f4:2c:81:1a:a7:3a:67:36:db: 58:3a:46:25:66:b2:df:44:c2:28:dd:7f:f3:4b:7d:e2:49:b1: 91:b4:88:0c:ac:dc:4f:85:0c:9e:70:34:7e:0d:5b:1a:69:fb: 3b:a6:e9:60:50:9c:f9:14:79:51:61:80:26:e0:ad:97:48:8b: 10:38:1a:4a:c4:fa:ef:1d:11:93:bf:d8:80:6e:4b:37:06:a3: b6:59:3c:69:1d:62:81:63:57:e3:05:e0:fd:b3:31:b8:af:b5: 89:ca:7b:fe:65:95:94:38:d2:6a:55:aa:29:21:8d:0f:ef:4c: 2d:61:22:b3:fc:4a:f6:10:a5:2c:af:dd:be:c1:86:3b:1b:21: 76:02:2f:49:bc:59:87:ab:4b:a7:39:8f:57:fa:0e:8e:53:35: 69:9e:05:6d:02:7d:d8:c9:14:44:b3:9e:59:d9:47:e0:06:cd: 6b:dc:22:57:70:19:d1:32:80:9c:f8:c4:79:e3:64:97:33:1d: 8a:d7:09:be:c5:e0:41:4e:c3:5e:ac:ba:50:82:51:79:ff:47: a6:67:4b:a6:5b:87:a2:83:32:41:86:1c:7b:74:35:a8:b2:9e: 9d:f1:8e:38:9e:e6:a3:68:30:be:bf:67:01:4b:c4:2f:84:32: 5a:5c:a9:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkoXq3READn/7oIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk YWE0NTU1NjYtYzIyYy00MjY4LWJjMTUtMDJkNDg5NTRhMmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqd0DGDQnuenz89lppmDUuUuSafk+fT0xgL8R 4Lju5l9o1+QFM56pXncVzf12wJ1nqNFXUk9LlKe5lMRqw7l5dqJooP78w6W/3G4Z VcMYi6sQDG5XizNb94y7OX1ByqLRuJSlN1e9aFD512uKt56szrZXNUtFinrVURHR 4yHx/ApmCvcaV7PVtodUL/vKQe9ETkDlRqIHqIu/vyfT46o0SQ1Ni6Fa9vBTX1cu 9ZEJWuRObfIv/UvdTDxM32LhkYMhBdNxxzSdtv4nowHGMapTTrCdX0po6xPhqoCx hmEfiMOTzVncNLdMeAHIzEo3aX6Wi8qSWmUxrbeTTc+5Jw6gsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLwZtWKhc5CHvfXfxdEbJFmMC5kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNGE1YjQ4MjktMmQ5OS0z ZGU4LThlZmUtMzI2MTcxMGU5MmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLLbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTQEEC1fRxM7fQsgRqnOmc221g6RiVmst9Ewijdf/NLfeJJsZG0iAys 3E+FDJ5wNH4NWxpp+zum6WBQnPkUeVFhgCbgrZdIixA4GkrE+u8dEZO/2IBuSzcG o7ZZPGkdYoFjV+MF4P2zMbivtYnKe/5llZQ40mpVqikhjQ/vTC1hIrP8SvYQpSyv 3b7BhjsbIXYCL0m8WYerS6c5j1f6Do5TNWmeBW0CfdjJFESznlnZR+AGzWvcIldw GdEygJz4xHnjZJczHYrXCb7F4EFOw16sulCCUXn/R6ZnS6Zbh6KDMkGGHHt0Naiy np3xjjie5qNoML6/ZwFLxC+EMlpcqd0= -----END CERTIFICATE-----Generated at Wed Nov 5 11:12:04 2025 by rpki-client