$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7a19c355-b852-3b4c-a5c8-e814f196e80e.roa File: 7a19c355-b852-3b4c-a5c8-e814f196e80e.roa (raw, json) Hash identifier: sBWztOTW+wOZlqUtvJlNaF5bfxCnvUn/gLgJqnQw13A= Subject key identifier: 10:4B:3C:6A:2A:86:01:EB:34:33:0D:01:9D:C2:D3:9D:79:27:02:11 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584AC2E11C699DFB6616B0DFB580 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7a19c355-b852-3b4c-a5c8-e814f196e80e.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 30036 IP address blocks: 108.166.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:1c:69:9d:fb:66:16:b0:df:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=62958a69-3c13-4068-aa64-ab94a4c44226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b8:c1:e8:37:ef:e3:64:49:98:4d:fc:8a:34: c9:8d:64:db:c3:9b:52:8a:b3:c7:70:3f:7b:97:79: 5b:33:20:3a:f1:b3:7e:ea:7f:78:07:50:3f:ee:89: 8c:22:0c:17:79:18:a9:96:38:71:d7:38:7a:c7:76: 8a:44:55:7b:d7:35:61:bf:41:9f:09:aa:48:35:59: 2f:61:b1:0f:5a:64:aa:47:de:19:14:79:d6:b1:57: 65:b6:ce:9d:7f:93:cd:30:b7:4f:02:bb:69:70:7e: de:eb:76:93:2a:3c:e5:1b:45:70:bd:bc:c6:95:72: 50:38:54:ab:b5:db:17:ee:29:0b:9a:96:ad:58:56: 22:89:6b:fa:34:a3:7b:00:da:dc:9b:7d:fc:ba:e7: 36:9e:c3:5a:65:ca:7f:76:c2:26:e8:22:7d:c4:8f: f2:9f:72:fa:09:e8:d7:27:ba:62:27:50:82:50:b8: 4f:1b:ba:4d:34:42:00:30:d5:cf:e0:4d:10:97:1a: 5e:89:88:f4:fc:b8:ff:71:28:55:9d:1b:c2:6e:8d: 36:db:28:a5:8c:cc:ac:b3:ab:f7:1c:c4:33:60:31: 88:de:f2:e4:7b:8d:84:a7:6a:07:8f:71:66:94:cd: 8d:7b:2d:80:a9:59:6e:e8:52:a1:ba:3a:b2:0a:00: 20:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:4B:3C:6A:2A:86:01:EB:34:33:0D:01:9D:C2:D3:9D:79:27:02:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7a19c355-b852-3b4c-a5c8-e814f196e80e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:bb:97:03:0a:2a:d0:95:6b:7c:b4:79:46:9b:5c:0c:ec:c7: f8:1f:7a:30:c9:dd:b7:49:f2:f4:3b:6d:d9:16:3a:e6:be:f6: 16:fd:28:4f:fb:64:3d:db:fa:b9:3b:7d:48:d0:ab:d2:dc:42: dc:39:29:88:0c:6f:ce:bd:7f:b3:2f:f3:72:8e:c4:4d:4c:57: ea:d5:a1:1b:fc:e6:45:93:18:a7:87:38:15:78:ef:fd:af:cb: f4:0b:17:c7:80:00:18:77:14:cd:db:bc:fb:a8:ea:cb:4b:2a: 00:d3:97:fd:15:2e:15:2d:ae:11:28:29:92:bf:a0:7d:c1:79: 06:ed:c9:92:80:90:2c:1f:6f:40:f5:a3:34:83:c6:5b:21:e8: 61:77:b7:b6:e4:ec:89:9e:71:0c:40:b9:75:d6:9a:20:d0:ca: b2:6a:b3:b0:bb:70:55:e8:10:c3:29:65:6b:92:2f:17:b4:13: 79:d4:f2:a8:9f:8e:7f:ca:89:d0:6e:af:06:05:7f:81:89:c4: 92:1b:09:50:ae:fe:26:47:fa:44:9e:79:37:02:87:3b:28:c9: 0c:64:91:3b:d9:46:71:4e:1f:b4:a8:13:00:d2:86:6a:c3:1a: 07:90:ee:62:47:73:bd:56:d1:36:1c:e8:76:99:ce:36:7f:f4: 8f:19:05:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4RxpnftmFrDftYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NjI5NThhNjktM2MxMy00MDY4LWFhNjQtYWI5NGE0YzQ0MjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7jB6Dfv42RJmE38ijTJjWTbw5tSirPHcD97 l3lbMyA68bN+6n94B1A/7omMIgwXeRipljhx1zh6x3aKRFV71zVhv0GfCapINVkv YbEPWmSqR94ZFHnWsVdlts6df5PNMLdPArtpcH7e63aTKjzlG0VwvbzGlXJQOFSr tdsX7ikLmpatWFYiiWv6NKN7ANrcm338uuc2nsNaZcp/dsIm6CJ9xI/yn3L6CejX J7piJ1CCULhPG7pNNEIAMNXP4E0QlxpeiYj0/Lj/cShVnRvCbo022yiljMyss6v3 HMQzYDGI3vLke42Ep2oHj3FmlM2Ney2AqVlu6FKhujqyCgAgkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBLPGoqhgHrNDMNAZ3C0515JwIRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvN2ExOWMzNTUtYjg1Mi0z YjRjLWE1YzgtZTgxNGYxOTZlODBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADe7lwMKKtCVa3y0eUabXAzsx/gfejDJ3bdJ8vQ7bdkWOua+9hb9KE/7 ZD3b+rk7fUjQq9LcQtw5KYgMb869f7Mv83KOxE1MV+rVoRv85kWTGKeHOBV47/2v y/QLF8eAABh3FM3bvPuo6stLKgDTl/0VLhUtrhEoKZK/oH3BeQbtyZKAkCwfb0D1 ozSDxlsh6GF3t7bk7ImecQxAuXXWmiDQyrJqs7C7cFXoEMMpZWuSLxe0E3nU8qif jn/KidBurwYFf4GJxJIbCVCu/iZH+kSeeTcChzsoyQxkkTvZRnFOH7SoEwDShmrD GgeQ7mJHc71W0TYc6HaZzjZ/9I8ZBe4= -----END CERTIFICATE-----Generated at Thu Aug 7 11:13:21 2025 by rpki-client