$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d5898752-7c76-3ed0-8e1e-f6d5d9a90169.roa File: d5898752-7c76-3ed0-8e1e-f6d5d9a90169.roa (raw, json) Hash identifier: /cshOd+2X/9BeZ6u37ooXPjjz+sX9xO7o0xzEecDof8= Subject key identifier: 6C:70:3C:15:2E:3A:ED:52:09:57:AB:90:68:7D:77:54:49:5B:3A:11 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584AC2E11D8FFBE0B13044F904C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d5898752-7c76-3ed0-8e1e-f6d5d9a90169.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 30036 IP address blocks: 108.166.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:1d:8f:fb:e0:b1:30:44:f9:04:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=f1a91543-8a4b-49c0-8fc0-b8c59b5cb43a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1e:df:fd:c2:dc:c4:7c:56:af:96:3f:58:f4: f1:08:aa:5e:0f:fc:de:a6:1a:ca:d5:67:0c:8e:88: e0:bf:0f:7f:33:a0:10:54:87:f9:c6:f9:2f:77:84: b8:7e:6c:17:d6:e5:0c:3a:73:c1:a8:68:9f:0e:dd: 28:27:7d:fc:9e:95:56:46:fd:fc:95:9c:14:33:60: 63:2d:78:f0:35:4f:d0:86:da:02:51:ba:11:d4:7f: ab:4a:82:4a:b5:80:16:60:b4:44:80:2e:87:e4:53: 58:0c:4a:c3:bf:07:03:b1:2d:3b:45:27:3b:3b:ac: ab:ab:56:78:46:ad:c0:27:cb:73:1e:ce:27:86:e5: 7f:45:5a:f6:0f:a8:62:76:0c:bc:e9:b3:6d:43:82: 5a:55:95:eb:49:40:98:77:39:97:76:a1:35:6b:8a: 12:c1:46:50:71:c2:d4:13:6d:ec:a8:7e:ad:53:0b: e6:82:c1:7e:82:2b:22:b7:20:84:a7:b6:d9:c3:b7: 6b:d0:57:14:cb:6d:b7:09:3c:fd:e6:b7:2a:00:23: bd:8f:62:a0:af:03:a4:83:e2:62:95:a2:a0:3c:fb: 9d:a7:fd:a6:27:74:a5:1a:7f:c0:07:d9:b5:ea:75: c4:9d:aa:70:87:41:66:dc:95:61:8e:cd:49:b8:56: 77:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:70:3C:15:2E:3A:ED:52:09:57:AB:90:68:7D:77:54:49:5B:3A:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d5898752-7c76-3ed0-8e1e-f6d5d9a90169.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:01:01:53:e9:27:6f:13:05:9a:9d:44:0c:a2:54:12:2d:9e: 5f:c3:1c:2f:0f:87:30:3f:10:31:08:4f:0b:eb:69:1d:11:ec: de:89:78:68:ee:63:60:25:be:d9:29:18:94:51:23:70:0b:8c: bf:c3:6a:81:fe:65:57:18:a0:30:bc:32:66:32:5a:53:0f:db: c7:75:16:93:31:65:e0:6b:11:31:f0:9f:cc:f6:ce:4f:c6:b3: 05:76:8a:80:3d:fd:1e:70:83:b8:cc:ec:23:e6:d0:f2:77:55: 70:45:47:a0:0d:98:d8:49:41:50:53:41:2a:67:ef:f9:95:4e: 66:8a:02:da:8a:69:6b:dc:81:d5:c1:0c:8e:b9:17:d9:8b:a5: 22:bd:a7:5a:d5:01:57:bc:7b:2d:6f:b0:87:fb:c2:0b:03:46: dd:f0:07:d9:2e:9b:f2:a3:40:e2:02:b5:fc:56:44:b8:e0:d1: 87:9c:e8:d2:d7:6a:43:26:2b:4e:fc:04:b3:3f:8d:fa:97:89: 14:48:af:ac:f9:fb:64:ba:2e:94:43:c7:67:0e:dc:97:83:c5: 41:ec:85:89:31:d2:7c:6d:4f:af:4b:aa:5e:eb:8a:9d:8d:a6: 4d:5a:6f:7b:72:79:c7:ec:ad:c7:bb:85:cb:f7:33:11:cb:30: de:0d:cf:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4R2P++CxMET5BMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZjFhOTE1NDMtOGE0Yi00OWMwLThmYzAtYjhjNTliNWNiNDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgB7f/cLcxHxWr5Y/WPTxCKpeD/zephrK1WcM jojgvw9/M6AQVIf5xvkvd4S4fmwX1uUMOnPBqGifDt0oJ338npVWRv38lZwUM2Bj LXjwNU/QhtoCUboR1H+rSoJKtYAWYLREgC6H5FNYDErDvwcDsS07RSc7O6yrq1Z4 Rq3AJ8tzHs4nhuV/RVr2D6hidgy86bNtQ4JaVZXrSUCYdzmXdqE1a4oSwUZQccLU E23sqH6tUwvmgsF+gisityCEp7bZw7dr0FcUy223CTz95rcqACO9j2KgrwOkg+Ji laKgPPudp/2mJ3SlGn/AB9m16nXEnapwh0Fm3JVhjs1JuFZ36QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxwPBUuOu1SCVerkGh9d1RJWzoRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDU4OTg3NTItN2M3Ni0z ZWQwLThlMWUtZjZkNWQ5YTkwMTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ4BAVPpJ28TBZqdRAyiVBItnl/DHC8PhzA/EDEITwvraR0R7N6JeGju Y2AlvtkpGJRRI3ALjL/DaoH+ZVcYoDC8MmYyWlMP28d1FpMxZeBrETHwn8z2zk/G swV2ioA9/R5wg7jM7CPm0PJ3VXBFR6ANmNhJQVBTQSpn7/mVTmaKAtqKaWvcgdXB DI65F9mLpSK9p1rVAVe8ey1vsIf7wgsDRt3wB9kum/KjQOICtfxWRLjg0Yec6NLX akMmK078BLM/jfqXiRRIr6z5+2S6LpRDx2cO3JeDxUHshYkx0nxtT69Lql7rip2N pk1ab3tyecfsrce7hcv3MxHLMN4Nz4Q= -----END CERTIFICATE-----Generated at Thu Aug 7 03:58:15 2025 by rpki-client