$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/58c3f291-5363-3855-b3c5-3f69313bfec0.roa File: 58c3f291-5363-3855-b3c5-3f69313bfec0.roa (raw, json) Hash identifier: +3uVWjYmzE6hafFEXp/2GJ2g2bBV8luhFPZsvrXOvWw= Subject key identifier: A2:6E:25:9C:91:0D:02:D5:B4:35:BB:6F:52:EF:0F:03:F6:C8:9B:2F Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584AC2E11B822AD9CA22CBA26900 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/58c3f291-5363-3855-b3c5-3f69313bfec0.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 30036 IP address blocks: 108.166.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:1b:82:2a:d9:ca:22:cb:a2:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=986d9232-1ea1-4236-98b1-e5b19eb594ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4b:2c:5d:09:be:c1:1c:5e:50:d6:68:d4:a3: c5:dc:02:fb:03:b3:6e:0c:23:18:c7:f6:65:4a:42: 5b:3e:8a:3f:b0:4e:f0:d6:fd:bd:e1:5e:4b:9d:0a: b7:bc:3f:94:be:45:b9:52:c1:9a:dc:33:6b:4d:6d: f3:4f:38:a9:2c:3e:de:d1:76:b3:75:81:f2:b9:ab: 69:d7:3c:28:05:86:60:7e:5f:88:21:c8:8a:6c:2f: f9:e2:95:6d:09:06:88:e3:3b:5c:6d:a0:f2:b2:86: c4:e7:d6:85:22:4f:41:91:f0:8b:40:29:6f:42:f1: cc:6d:f1:22:9b:18:4c:0c:90:31:10:de:b2:d0:e3: 3b:12:5d:01:60:f9:ae:ae:66:da:d0:ff:11:84:ae: af:a3:d0:54:3e:e6:60:bd:7f:da:9f:5d:25:a5:59: e3:a6:66:8a:4e:b5:2b:b7:53:e9:4e:c3:10:6e:76: ba:43:dd:8f:45:ac:81:cf:ec:81:a0:af:99:9f:54: 40:3c:6a:61:82:37:26:c0:1b:92:85:b7:98:95:5e: b3:1b:f5:a0:ae:ca:dc:0f:e7:09:c0:03:6b:bd:b9: 79:5a:0a:30:3e:d5:41:3d:4a:41:05:ec:7c:91:52: c4:f0:e5:9d:61:2d:a1:1a:a9:60:e3:16:f1:1b:0d: 69:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:6E:25:9C:91:0D:02:D5:B4:35:BB:6F:52:EF:0F:03:F6:C8:9B:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/58c3f291-5363-3855-b3c5-3f69313bfec0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:7e:d6:bb:19:39:8f:c7:1c:12:ec:b0:64:91:28:38:84:cb: af:d3:85:cd:a5:04:a2:ca:31:d5:16:25:2a:14:ee:c1:57:2e: bb:d0:32:56:b6:88:12:12:09:99:ff:87:37:e6:c3:9c:ac:97: a4:6b:74:a8:24:9c:7e:52:bd:b4:1f:09:ad:1b:32:5b:8c:45: 42:53:79:fb:e7:59:d1:90:b1:41:da:9e:1f:cc:a1:ce:47:d8: 6d:45:bc:ab:64:63:e8:f2:90:18:4c:f7:6f:0d:fd:32:62:e3: ce:b6:5d:8c:ff:58:c1:62:e3:44:61:39:b6:79:06:46:95:f1: ee:a5:08:08:f0:98:db:15:d1:c6:d4:82:47:4f:8e:fc:00:e4: 6e:65:03:5c:29:46:8b:ad:1f:68:a1:b8:e5:6a:4b:3d:53:31: 90:4f:ff:1a:c4:8e:ed:2b:2a:c1:69:23:10:bd:99:83:c8:38: a8:9b:0a:f9:07:26:20:f2:67:ad:39:27:c7:b7:2f:fb:e0:e6: 86:59:a5:40:81:ad:79:54:ce:04:20:e0:f5:8f:7d:4d:c7:e1: 12:32:06:f0:5c:70:1e:15:21:df:10:ed:f9:2a:f6:a0:f4:bb: d4:92:00:25:eb:f3:00:85:00:3e:3f:47:c8:77:a9:58:90:9c: 27:51:8e:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4RuCKtnKIsuiaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk OTg2ZDkyMzItMWVhMS00MjM2LTk4YjEtZTViMTllYjU5NGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0ssXQm+wRxeUNZo1KPF3AL7A7NuDCMYx/Zl SkJbPoo/sE7w1v294V5LnQq3vD+UvkW5UsGa3DNrTW3zTzipLD7e0XazdYHyuatp 1zwoBYZgfl+IIciKbC/54pVtCQaI4ztcbaDysobE59aFIk9BkfCLQClvQvHMbfEi mxhMDJAxEN6y0OM7El0BYPmurmba0P8RhK6vo9BUPuZgvX/an10lpVnjpmaKTrUr t1PpTsMQbna6Q92PRayBz+yBoK+Zn1RAPGphgjcmwBuShbeYlV6zG/WgrsrcD+cJ wANrvbl5WgowPtVBPUpBBex8kVLE8OWdYS2hGqlg4xbxGw1paQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJuJZyRDQLVtDW7b1LvDwP2yJsvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNThjM2YyOTEtNTM2My0z ODU1LWIzYzUtM2Y2OTMxM2JmZWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9+1rsZOY/HHBLssGSRKDiEy6/Thc2lBKLKMdUWJSoU7sFXLrvQMla2 iBISCZn/hzfmw5ysl6RrdKgknH5SvbQfCa0bMluMRUJTefvnWdGQsUHanh/Moc5H 2G1FvKtkY+jykBhM928N/TJi4862XYz/WMFi40RhObZ5BkaV8e6lCAjwmNsV0cbU gkdPjvwA5G5lA1wpRoutH2ihuOVqSz1TMZBP/xrEju0rKsFpIxC9mYPIOKibCvkH JiDyZ605J8e3L/vg5oZZpUCBrXlUzgQg4PWPfU3H4RIyBvBccB4VId8Q7fkq9qD0 u9SSACXr8wCFAD4/R8h3qViQnCdRji8= -----END CERTIFICATE-----Generated at Sat Aug 9 01:07:40 2025 by rpki-client