$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3c5e420-4acc-338e-851f-64549b2af3d4.roa File: a3c5e420-4acc-338e-851f-64549b2af3d4.roa (raw, json) Hash identifier: gPfNW0HVM225u9Iy5KghxwGfnvXk2lkiRHxUcblQy6w= Subject key identifier: 90:D4:83:4F:47:86:02:BF:30:C6:BF:17:08:09:48:B7:46:43:C6:58 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584AC2E11D5829CF00E593DC0400 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3c5e420-4acc-338e-851f-64549b2af3d4.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 30036 IP address blocks: 108.166.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:1d:58:29:cf:00:e5:93:dc:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=9744a2f1-e180-4dba-bd3a-21061e4c6d9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9d:b5:6f:40:c4:72:1f:d8:dc:0c:b9:ff:8b: a9:de:d7:c0:53:21:16:d7:07:48:3d:91:d0:6c:fd: 0f:05:f6:07:ca:53:6a:45:4e:dd:d5:2c:4c:d2:5b: 4e:02:fb:c7:71:a7:4f:94:da:f4:de:61:01:a9:bb: be:71:1f:95:fb:75:18:64:0b:d3:f0:34:50:84:8a: b2:d2:1a:11:67:70:d1:f3:76:66:07:d2:f2:b8:fd: c0:5b:51:35:89:ae:95:0d:b1:69:24:24:5e:c5:6a: 28:ec:cd:c0:e3:93:32:e9:3c:62:82:e4:78:b2:bd: 13:9c:c3:0c:fb:d0:58:25:88:33:34:54:9b:15:5a: c8:11:05:52:15:7e:80:ba:54:e3:f7:81:2c:30:d3: 38:ee:dc:cc:1f:df:01:f2:c4:4f:28:91:da:16:19: d4:bd:6b:09:59:b3:38:87:92:ac:b0:c1:4a:c0:30: 8e:8d:2b:84:b7:45:0d:a4:9d:f6:cd:d8:39:6d:e0: 50:e3:45:78:c3:6f:c2:7e:68:ba:63:d9:03:c2:73: ec:39:5d:af:e8:0e:a7:32:31:a1:37:4b:ca:c0:69: 96:81:ed:c1:ac:61:fd:05:99:4c:be:21:d5:3a:25: 1d:0e:0c:d0:fa:39:f9:83:60:df:a2:36:1d:d2:17: 29:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D4:83:4F:47:86:02:BF:30:C6:BF:17:08:09:48:B7:46:43:C6:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3c5e420-4acc-338e-851f-64549b2af3d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:73:a4:66:84:46:58:86:ac:c5:94:62:cd:d7:1c:7a:40:83: 59:33:cb:8b:81:5e:b2:e8:1b:04:a2:3c:43:d8:a5:1e:e7:c2: f4:fb:1d:00:ce:1c:33:b0:63:91:87:cd:29:11:69:c8:16:56: cf:f9:7a:5f:23:eb:d0:b8:14:49:61:c2:67:e5:89:bd:ae:4f: 07:71:d2:a3:cd:75:4c:53:0c:63:4f:66:34:97:35:3a:34:17: 82:15:77:a3:54:42:b8:35:df:05:40:85:0e:ed:b6:d1:12:6f: c9:d7:e9:15:13:07:4d:fb:ff:7c:09:4d:8d:c6:aa:59:a0:30: 7f:35:63:18:40:bb:87:e2:c0:3b:26:77:fb:0c:6f:3a:8c:fb: e6:86:1d:0f:2a:fa:49:ef:90:af:fe:bd:55:a8:27:c4:eb:f2: a4:da:be:8a:db:b2:a9:1f:24:15:db:3e:b1:ed:ad:97:c8:e7: 7a:41:5b:f7:d6:3e:63:06:9d:fe:94:f9:f9:66:b9:fb:09:d2: 10:95:a2:4d:71:da:37:08:5e:97:d9:5c:1f:36:d5:d0:0c:77: a3:cc:7e:d1:5f:25:6c:6e:7b:66:09:1e:63:cd:cc:e7:b9:09: 90:7d:0f:e1:34:b4:ff:8a:52:cf:0d:cc:5f:f8:bf:f7:ce:4a: 09:b4:75:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4R1YKc8A5ZPcBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk OTc0NGEyZjEtZTE4MC00ZGJhLWJkM2EtMjEwNjFlNGM2ZDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ21b0DEch/Y3Ay5/4up3tfAUyEW1wdIPZHQ bP0PBfYHylNqRU7d1SxM0ltOAvvHcadPlNr03mEBqbu+cR+V+3UYZAvT8DRQhIqy 0hoRZ3DR83ZmB9LyuP3AW1E1ia6VDbFpJCRexWoo7M3A45My6TxiguR4sr0TnMMM +9BYJYgzNFSbFVrIEQVSFX6AulTj94EsMNM47tzMH98B8sRPKJHaFhnUvWsJWbM4 h5KssMFKwDCOjSuEt0UNpJ32zdg5beBQ40V4w2/Cfmi6Y9kDwnPsOV2v6A6nMjGh N0vKwGmWge3BrGH9BZlMviHVOiUdDgzQ+jn5g2DfojYd0hcpVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDUg09HhgK/MMa/FwgJSLdGQ8ZYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTNjNWU0MjAtNGFjYy0z MzhlLTg1MWYtNjQ1NDliMmFmM2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlzpGaERliGrMWUYs3XHHpAg1kzy4uBXrLoGwSiPEPYpR7nwvT7HQDO HDOwY5GHzSkRacgWVs/5el8j69C4FElhwmflib2uTwdx0qPNdUxTDGNPZjSXNTo0 F4IVd6NUQrg13wVAhQ7tttESb8nX6RUTB037/3wJTY3GqlmgMH81YxhAu4fiwDsm d/sMbzqM++aGHQ8q+knvkK/+vVWoJ8Tr8qTavorbsqkfJBXbPrHtrZfI53pBW/fW PmMGnf6U+flmufsJ0hCVok1x2jcIXpfZXB821dAMd6PMftFfJWxue2YJHmPNzOe5 CZB9D+E0tP+KUs8NzF/4v/fOSgm0das= -----END CERTIFICATE-----Generated at Fri Aug 8 00:45:22 2025 by rpki-client