$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b2d7b8a2-86ba-35aa-9b75-12dc82a2ca98.roa File: b2d7b8a2-86ba-35aa-9b75-12dc82a2ca98.roa (raw, json) Hash identifier: 0sB9cIOAixEFrhxBwjn61dHz2aKAKcWHxPuptQPi0g8= Subject key identifier: B6:B8:A9:A1:D5:69:81:C4:FE:6C:62:DE:20:15:91:FA:D7:56:17:2E Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584AC2E0FA1371A47E7D5F867380 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b2d7b8a2-86ba-35aa-9b75-12dc82a2ca98.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 30036 IP address blocks: 108.166.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:fa:13:71:a4:7e:7d:5f:86:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=d8c6e16a-0a19-4f2b-880d-b0c98ec13a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8d:6c:16:6c:6d:96:c7:ed:83:a1:d6:4f:8b: b5:10:59:9a:94:4f:a7:bd:a8:de:e3:00:07:0b:44: ce:55:3c:f1:0b:28:28:91:8e:c4:ac:ec:3b:1f:ba: 9c:5b:01:e2:42:07:79:e9:f8:57:48:68:c2:c0:b0: a9:1b:37:6d:e6:d9:16:d5:2a:80:f8:a4:0e:b7:93: 4b:bd:3f:89:b2:a6:40:59:f3:fc:fa:2b:ea:03:c4: b9:78:db:3f:9a:84:12:1c:40:78:9f:da:1e:ad:e1: 86:60:1a:98:6a:75:4e:46:7f:f9:ac:7f:34:67:e2: 70:d7:60:c9:28:ba:80:22:b5:5c:0f:60:00:ef:76: 06:5f:e6:25:54:9f:e6:0f:0d:51:1b:ca:4b:80:5b: 55:a8:94:88:02:69:3b:26:35:f4:ce:a0:22:9e:93: c0:aa:53:a1:0e:b0:e8:e0:34:91:7d:6c:5f:4d:b2: 12:8a:bf:43:9f:5b:69:8c:4c:21:08:de:00:cf:c1: 60:31:ad:86:bd:fb:9a:40:03:4e:13:c3:4c:29:0d: 98:52:d5:d0:f8:7d:dd:33:65:bd:5b:59:51:10:97: 3f:c3:12:cc:34:53:3c:34:cf:c6:2c:70:57:0b:f0: f3:c9:6f:60:82:45:8e:b3:c9:89:75:8d:7e:2d:9f: 5e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B8:A9:A1:D5:69:81:C4:FE:6C:62:DE:20:15:91:FA:D7:56:17:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b2d7b8a2-86ba-35aa-9b75-12dc82a2ca98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:da:7f:16:a8:5e:a6:58:9a:bc:8f:09:32:7b:9e:de:b8:ca: 81:a6:19:96:eb:b2:9a:b4:a9:67:f9:ae:6a:7b:1b:42:61:05: b7:04:64:9b:28:0e:c0:4c:71:19:a7:95:88:f7:ec:9d:06:58: 0b:43:9f:92:07:8e:98:0a:b2:b5:09:9c:c1:cc:73:69:6b:e5: af:c1:fd:af:60:99:75:6c:a4:ff:f3:c6:48:97:66:dc:68:d4: ae:f4:d0:09:68:9a:11:b8:3b:d1:ef:b4:0b:03:12:15:99:82: d1:a3:97:b3:23:3a:d6:5b:38:c7:bf:f9:4e:b1:18:13:1e:74: 6c:6d:05:eb:e1:f7:ce:f4:0a:16:c2:a5:81:30:50:b0:13:d7: 32:1d:2c:ed:16:a2:77:3f:4a:be:01:e7:aa:8f:41:fd:74:b3: f9:26:c0:c9:84:db:e6:3d:2c:c7:6a:5c:c8:a6:4d:2a:a9:a7: 05:18:e1:2e:7a:09:a1:27:dd:60:11:a1:af:d2:50:66:55:57: c2:62:9a:63:42:b8:20:38:14:fe:d1:64:78:e9:34:ea:cd:5e: 57:81:05:ce:fc:c8:cc:aa:bd:b8:74:52:09:1a:da:55:af:a6: 98:ca:71:d5:ed:0b:f7:4f:55:b3:60:d3:f5:57:a5:a3:59:79: 25:5e:60:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4PoTcaR+fV+Gc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZDhjNmUxNmEtMGExOS00ZjJiLTg4MGQtYjBjOThlYzEzYTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY1sFmxtlsftg6HWT4u1EFmalE+nvaje4wAH C0TOVTzxCygokY7ErOw7H7qcWwHiQgd56fhXSGjCwLCpGzdt5tkW1SqA+KQOt5NL vT+JsqZAWfP8+ivqA8S5eNs/moQSHEB4n9oereGGYBqYanVORn/5rH80Z+Jw12DJ KLqAIrVcD2AA73YGX+YlVJ/mDw1RG8pLgFtVqJSIAmk7JjX0zqAinpPAqlOhDrDo 4DSRfWxfTbISir9Dn1tpjEwhCN4Az8FgMa2GvfuaQANOE8NMKQ2YUtXQ+H3dM2W9 W1lREJc/wxLMNFM8NM/GLHBXC/DzyW9ggkWOs8mJdY1+LZ9e+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLa4qaHVaYHE/mxi3iAVkfrXVhcuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjJkN2I4YTItODZiYS0z NWFhLTliNzUtMTJkYzgyYTJjYTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLafxaoXqZYmryPCTJ7nt64yoGmGZbrspq0qWf5rmp7G0JhBbcEZJso DsBMcRmnlYj37J0GWAtDn5IHjpgKsrUJnMHMc2lr5a/B/a9gmXVspP/zxkiXZtxo 1K700AlomhG4O9HvtAsDEhWZgtGjl7MjOtZbOMe/+U6xGBMedGxtBevh9870ChbC pYEwULAT1zIdLO0Wonc/Sr4B56qPQf10s/kmwMmE2+Y9LMdqXMimTSqppwUY4S56 CaEn3WARoa/SUGZVV8JimmNCuCA4FP7RZHjpNOrNXleBBc78yMyqvbh0Ugka2lWv ppjKcdXtC/dPVbNg0/VXpaNZeSVeYNs= -----END CERTIFICATE-----Generated at Fri Aug 8 10:17:03 2025 by rpki-client