$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3e6bb70-6611-3530-9b98-130f2ec6d3af.roa File: a3e6bb70-6611-3530-9b98-130f2ec6d3af.roa (raw, json) Hash identifier: WUYIWVOxeDDD3qQGYopAF0SUmK5NJK3pOzFjJJl5rSw= Subject key identifier: 97:C8:7A:40:D4:00:34:A5:CA:22:3D:8E:DE:DA:2F:4E:1C:CB:E5:7E Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584AC2E11FAA47317D282B050D60 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3e6bb70-6611-3530-9b98-130f2ec6d3af.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 30036 IP address blocks: 104.201.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:1f:aa:47:31:7d:28:2b:05:0d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=09e0c7c8-4f16-4ee0-9fb7-e60eab523984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:34:a0:7d:3f:87:32:d3:55:15:ff:02:f5:50: 9c:32:f6:04:85:35:ab:af:60:ea:2e:e7:b2:22:b2: d5:c8:43:b0:8b:6f:4b:47:ad:a5:63:e6:5e:60:cc: f7:2d:a1:56:b3:1e:ff:78:eb:79:ce:f0:3d:c5:fd: a4:7a:7e:85:26:db:db:f4:ab:e6:6b:fc:b6:13:e0: 9c:c8:4c:d9:9e:51:f1:c2:ec:df:83:a4:94:bf:aa: e5:06:0e:20:a7:ec:ab:74:95:9b:dd:5c:7a:1f:06: cb:96:d0:5c:25:6a:c4:e4:61:cc:05:2b:ac:df:5f: 78:33:0f:92:78:82:4a:74:f4:3b:98:54:8a:7f:a9: af:4e:d5:30:ce:20:36:08:ff:90:2c:83:38:5e:70: 72:64:34:39:6b:0e:af:c4:fe:01:cb:9b:cc:5d:df: 5d:ba:bc:31:29:44:50:49:52:e0:46:3a:21:02:d6: b0:0c:c8:63:16:d7:d8:6f:53:12:03:a1:2d:56:20: 61:0e:ca:26:a0:90:3e:71:ca:d3:2a:d2:49:ab:9b: 3d:44:34:b6:e5:e4:e6:b2:97:75:1e:5e:11:eb:f2: c1:65:e6:55:1d:15:a2:80:b6:1d:8e:d1:58:15:af: ec:2f:8c:d4:c5:46:ea:56:46:90:28:2f:1b:02:e7: 7d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C8:7A:40:D4:00:34:A5:CA:22:3D:8E:DE:DA:2F:4E:1C:CB:E5:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3e6bb70-6611-3530-9b98-130f2ec6d3af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 104.201.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:a6:b0:fb:b6:3b:72:03:e6:0e:f0:e6:b7:cf:a4:3f:e6:95: ba:c7:c9:1c:45:e5:bf:0a:78:bc:6f:7f:b4:c0:b0:f7:83:24: 16:c0:e9:c4:fe:7d:38:34:c2:f7:57:c4:7e:8f:41:c7:a8:49: d6:e8:17:e5:db:6e:71:99:b9:29:8d:2a:c6:38:63:60:cc:05: e7:dd:1c:9e:db:b1:2f:c0:8f:8f:79:2d:28:3c:a4:ba:15:45: 6c:7f:35:7f:00:cf:d2:04:24:7f:5c:67:ad:bf:0d:2b:d1:6f: 3a:dd:ea:4c:07:5a:76:a5:6a:8c:46:0e:a8:be:9e:23:d7:ff: 96:68:29:ba:16:05:89:49:c9:9d:2a:66:4d:1e:c4:3f:e2:07: af:13:c0:b2:34:e6:8a:f3:b7:96:1f:02:b8:73:94:ca:79:f8: de:78:06:ae:65:ec:a7:df:b4:1d:42:3d:c1:6c:95:42:5a:40: 55:3d:14:bc:62:87:b3:27:e8:f1:b8:08:f4:7a:62:fd:81:20: 7b:6d:59:45:45:93:4b:17:05:d3:3d:70:fb:83:36:c2:aa:3f: b3:1f:82:3c:32:da:7e:95:95:31:dd:28:98:0b:1e:ec:10:ea: f6:83:f2:b2:87:c8:6f:8b:99:4b:8e:4d:0d:b6:bd:70:e5:94: f2:09:06:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4R+qRzF9KCsFDWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MDllMGM3YzgtNGYxNi00ZWUwLTlmYjctZTYwZWFiNTIzOTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljSgfT+HMtNVFf8C9VCcMvYEhTWrr2DqLuey IrLVyEOwi29LR62lY+ZeYMz3LaFWsx7/eOt5zvA9xf2ken6FJtvb9Kvma/y2E+Cc yEzZnlHxwuzfg6SUv6rlBg4gp+yrdJWb3Vx6HwbLltBcJWrE5GHMBSus3194Mw+S eIJKdPQ7mFSKf6mvTtUwziA2CP+QLIM4XnByZDQ5aw6vxP4By5vMXd9durwxKURQ SVLgRjohAtawDMhjFtfYb1MSA6EtViBhDsomoJA+ccrTKtJJq5s9RDS25eTmspd1 Hl4R6/LBZeZVHRWigLYdjtFYFa/sL4zUxUbqVkaQKC8bAud9QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfIekDUADSlyiI9jt7aL04cy+V+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTNlNmJiNzAtNjYxMS0z NTMwLTliOTgtMTMwZjJlYzZkM2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMlsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGmsPu2O3ID5g7w5rfPpD/mlbrHyRxF5b8KeLxvf7TAsPeDJBbA6cT+ fTg0wvdXxH6PQceoSdboF+XbbnGZuSmNKsY4Y2DMBefdHJ7bsS/Aj495LSg8pLoV RWx/NX8Az9IEJH9cZ62/DSvRbzrd6kwHWnalaoxGDqi+niPX/5ZoKboWBYlJyZ0q Zk0exD/iB68TwLI05orzt5YfArhzlMp5+N54Bq5l7KfftB1CPcFslUJaQFU9FLxi h7Mn6PG4CPR6Yv2BIHttWUVFk0sXBdM9cPuDNsKqP7Mfgjwy2n6VlTHdKJgLHuwQ 6vaD8rKHyG+LmUuOTQ22vXDllPIJBkY= -----END CERTIFICATE-----Generated at Thu Aug 7 03:51:52 2025 by rpki-client