$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3c5e420-4acc-338e-851f-64549b2af3d4.roa File: a3c5e420-4acc-338e-851f-64549b2af3d4.roa (raw, json) Hash identifier: FMJdhIZsFpb21hRxSDYBnuhnEzaske6T3DB7s7De+Hs= Subject key identifier: 47:06:71:3C:25:3A:25:B4:DA:C2:D5:C0:C7:2A:08:76:34:72:A7:70 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849E2250F31852E2814FAC9E380 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3c5e420-4acc-338e-851f-64549b2af3d4.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 30036 IP address blocks: 108.166.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:0f:31:85:2e:28:14:fa:c9:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=383bf389-7332-4f4f-a871-e2782b20ea40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:93:b4:f0:86:34:7c:fc:89:ec:6a:25:2c:9a: 3b:3c:29:01:f4:19:09:f4:80:d9:65:ad:0a:b6:8b: 2e:70:7c:6b:91:a1:4b:0a:12:fb:e8:8f:f9:ff:b6: b1:ba:12:81:ec:ec:47:e4:b5:69:7f:6e:d8:0c:61: 42:18:ab:c2:ef:b7:9a:bd:b5:bc:1e:18:49:0f:6b: 3c:da:66:65:cc:2b:88:50:c1:9e:79:70:11:1c:db: c2:1d:31:2a:22:83:0d:c1:8e:2d:10:5e:c7:3e:88: 1d:77:da:13:d0:c5:86:1d:55:09:f7:d8:29:78:1e: 49:e6:a3:63:02:11:e6:a4:37:6e:85:9e:42:e2:2e: d8:53:d5:e1:87:d5:dc:48:8c:92:c2:fa:76:14:dd: c6:89:a7:f5:14:b6:a7:66:46:59:66:54:59:e3:50: 9b:41:7d:cd:d5:ad:ac:8e:14:13:92:11:08:c4:f4: 83:23:de:b0:08:6a:17:a5:a3:fd:59:f6:b0:de:52: 48:43:ff:f8:af:00:a4:09:b7:bf:59:6d:9e:90:99: 0e:3b:32:2b:1a:0b:53:45:89:16:af:0c:4d:37:e0: 19:aa:6c:d5:c9:ae:c2:de:e0:ef:66:d7:7e:74:b0: 94:bc:48:03:48:f6:c2:82:6c:d6:9d:53:9a:fd:7e: e7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:06:71:3C:25:3A:25:B4:DA:C2:D5:C0:C7:2A:08:76:34:72:A7:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3c5e420-4acc-338e-851f-64549b2af3d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:4c:76:16:7f:4d:4a:04:e8:c5:f0:ed:a8:eb:e1:a6:c3:6e: bb:b0:bd:bb:4f:3b:57:1a:70:b2:12:87:a0:c3:d0:c7:13:6a: c3:b5:86:66:88:0e:08:dc:4c:cd:f8:2e:bd:7a:b3:d4:f2:71: 91:b0:c8:6b:94:91:11:a8:74:a6:94:44:e3:d1:26:9b:18:04: e7:91:01:a1:bd:6f:52:69:ff:70:4b:9e:0c:b4:e6:87:f9:8e: f9:87:f6:f8:ae:05:f2:af:f6:7e:26:f1:eb:30:d7:1e:33:18: 62:30:c3:7c:e8:85:ce:e0:67:50:15:fe:1e:0e:22:2c:e5:f2: 2e:fe:08:4e:e1:53:ae:81:8f:e0:b3:f2:6f:20:22:cd:d1:16: 58:9d:ce:ab:8a:dc:15:ef:f3:e0:00:1a:29:0c:db:c0:7f:77: ca:57:af:9d:ad:f6:ce:64:62:e0:50:f6:aa:20:36:50:bb:96: 5c:09:ee:82:0e:e5:94:20:8b:13:cb:88:41:86:13:45:a7:f6: a9:db:73:db:18:e8:4a:a2:67:78:aa:1f:0a:dd:e8:84:85:b3: 96:a1:f6:7b:59:41:2d:8d:76:28:57:16:95:68:bc:60:15:09: 02:a3:27:a2:0c:2a:14:32:d1:12:d6:67:cc:1e:a0:e3:46:20: a0:dd:8e:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJQ8xhS4oFPrJ44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk MzgzYmYzODktNzMzMi00ZjRmLWE4NzEtZTI3ODJiMjBlYTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZO08IY0fPyJ7GolLJo7PCkB9BkJ9IDZZa0K tosucHxrkaFLChL76I/5/7axuhKB7OxH5LVpf27YDGFCGKvC77eavbW8HhhJD2s8 2mZlzCuIUMGeeXARHNvCHTEqIoMNwY4tEF7HPogdd9oT0MWGHVUJ99gpeB5J5qNj AhHmpDduhZ5C4i7YU9Xhh9XcSIySwvp2FN3Giaf1FLanZkZZZlRZ41CbQX3N1a2s jhQTkhEIxPSDI96wCGoXpaP9Wfaw3lJIQ//4rwCkCbe/WW2ekJkOOzIrGgtTRYkW rwxNN+AZqmzVya7C3uDvZtd+dLCUvEgDSPbCgmzWnVOa/X7nSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcGcTwlOiW02sLVwMcqCHY0cqdwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTNjNWU0MjAtNGFjYy0z MzhlLTg1MWYtNjQ1NDliMmFmM2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxMdhZ/TUoE6MXw7ajr4abDbruwvbtPO1cacLISh6DD0McTasO1hmaI DgjcTM34Lr16s9TycZGwyGuUkRGodKaUROPRJpsYBOeRAaG9b1Jp/3BLngy05of5 jvmH9viuBfKv9n4m8esw1x4zGGIww3zohc7gZ1AV/h4OIizl8i7+CE7hU66Bj+Cz 8m8gIs3RFlidzquK3BXv8+AAGikM28B/d8pXr52t9s5kYuBQ9qogNlC7llwJ7oIO 5ZQgixPLiEGGE0Wn9qnbc9sY6EqiZ3iqHwrd6ISFs5ah9ntZQS2NdihXFpVovGAV CQKjJ6IMKhQy0RLWZ8weoONGIKDdjp8= -----END CERTIFICATE-----Generated at Mon Jun 16 15:58:30 2025 by rpki-client