$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f58b66f3-fef4-3c13-af81-acd886f6f6a4.roa File: f58b66f3-fef4-3c13-af81-acd886f6f6a4.roa (raw, json) Hash identifier: JVEb8Y4ONaFZA8ewZl/XVPXFU6i2pPBIMxN8nKM56SY= Subject key identifier: 2A:47:56:DA:CB:9D:27:D0:63:EC:02:5C:6D:29:F3:03:F9:6C:41:52 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584AC2E11DEFF7F53EFAF88D6F80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f58b66f3-fef4-3c13-af81-acd886f6f6a4.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 30036 IP address blocks: 108.166.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:1d:ef:f7:f5:3e:fa:f8:8d:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=225f777c-7916-4d41-82ec-2ef3ac7461da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3a:31:bc:c8:d1:d0:5c:55:33:5a:de:da:d6: 22:c2:ba:3e:47:41:70:9a:f5:c1:1b:c7:a4:35:ea: f2:75:c6:6b:b5:6e:f1:c4:fc:9e:71:4c:8d:5b:a8: c9:64:16:46:e6:d9:82:da:70:6f:1b:02:4b:62:1b: 42:7b:75:2c:88:80:c5:07:86:e9:5a:1d:d8:f9:d2: c5:34:8c:a1:c7:7d:81:a8:dc:49:f5:20:fd:3f:62: 1d:b7:22:f8:25:69:57:b5:e2:58:af:5e:49:f7:4f: c3:6f:0f:be:cc:89:13:d1:cb:4e:63:7e:55:d8:f3: 64:0b:8b:09:b8:4e:ba:57:2f:d2:06:36:01:58:b3: e0:1a:b9:1d:a4:1f:eb:06:80:b3:c3:3d:dc:43:24: 46:ff:f3:32:14:b2:8f:ad:6d:33:a5:5b:41:a1:73: 5c:7b:b0:3b:de:5f:2d:77:d1:b7:69:ed:ba:98:9a: 5c:88:b7:fc:2f:f7:a5:41:e6:04:06:fb:ae:b3:09: 93:4a:17:12:e2:93:da:6a:1f:01:e3:be:10:31:3b: 9e:7f:d6:8d:9b:c8:64:b8:2b:97:2a:e4:21:20:04: 90:30:de:8b:b5:8d:9f:fb:3a:06:3d:3d:3c:3a:ff: 8d:92:cf:4a:af:8a:b3:54:45:6e:cd:87:ba:be:fa: 39:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:47:56:DA:CB:9D:27:D0:63:EC:02:5C:6D:29:F3:03:F9:6C:41:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f58b66f3-fef4-3c13-af81-acd886f6f6a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.166.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:90:79:db:a1:42:84:1a:dd:c6:da:de:62:d3:5b:7d:ea:0d: a2:26:e7:a2:ed:11:70:83:a8:79:2f:a8:8f:39:c5:1e:f0:c6: 25:ce:0a:91:af:73:46:db:a7:58:ef:7e:08:f4:3c:e4:3b:5d: 58:e6:59:c2:e3:7f:0d:7e:0a:73:9a:7b:e0:2e:73:16:36:d4: 40:6d:f6:e5:ac:d6:d9:bc:79:ef:6c:ec:7b:b2:97:65:e3:95: b0:c1:1e:65:f4:2c:40:33:2b:ea:e7:50:94:c2:0e:03:01:15: 9c:6b:a3:02:4c:11:f4:da:a8:7a:c4:c1:5e:6c:cd:df:71:82: 07:39:06:cd:dd:f8:02:a3:c8:cb:93:06:78:e7:6f:8a:87:2f: b0:2d:a7:d0:df:9c:e0:4f:ac:4a:1c:42:03:a7:11:68:61:dd: 84:a6:87:74:9c:f0:82:aa:18:bf:54:5c:d0:dc:ad:6d:bc:94: 2d:ca:63:cf:a6:5e:62:d7:c9:2d:9d:97:ea:6f:8b:cd:b4:5f: 0f:48:67:1d:33:4d:0c:2b:e9:0b:30:36:16:e8:47:c7:19:27: 72:7e:41:4f:c5:a6:a0:63:8b:5f:24:43:22:39:81:57:b6:bf: d4:dd:a5:5d:36:13:1d:c6:ff:6d:ab:90:d9:50:68:ca:04:a7: b9:5d:84:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4R3v9/U++viNb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MjI1Zjc3N2MtNzkxNi00ZDQxLTgyZWMtMmVmM2FjNzQ2MWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDoxvMjR0FxVM1re2tYiwro+R0FwmvXBG8ek NerydcZrtW7xxPyecUyNW6jJZBZG5tmC2nBvGwJLYhtCe3UsiIDFB4bpWh3Y+dLF NIyhx32BqNxJ9SD9P2IdtyL4JWlXteJYr15J90/Dbw++zIkT0ctOY35V2PNkC4sJ uE66Vy/SBjYBWLPgGrkdpB/rBoCzwz3cQyRG//MyFLKPrW0zpVtBoXNce7A73l8t d9G3ae26mJpciLf8L/elQeYEBvuuswmTShcS4pPaah8B474QMTuef9aNm8hkuCuX KuQhIASQMN6LtY2f+zoGPT08Ov+Nks9Kr4qzVEVuzYe6vvo5BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpHVtrLnSfQY+wCXG0p8wP5bEFSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZjU4YjY2ZjMtZmVmNC0z YzEzLWFmODEtYWNkODg2ZjZmNmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKaZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyQeduhQoQa3cba3mLTW33qDaIm56LtEXCDqHkvqI85xR7wxiXOCpGv c0bbp1jvfgj0POQ7XVjmWcLjfw1+CnOae+AucxY21EBt9uWs1tm8ee9s7Huyl2Xj lbDBHmX0LEAzK+rnUJTCDgMBFZxrowJMEfTaqHrEwV5szd9xggc5Bs3d+AKjyMuT Bnjnb4qHL7Atp9DfnOBPrEocQgOnEWhh3YSmh3Sc8IKqGL9UXNDcrW28lC3KY8+m XmLXyS2dl+pvi820Xw9IZx0zTQwr6QswNhboR8cZJ3J+QU/FpqBji18kQyI5gVe2 v9TdpV02Ex3G/22rkNlQaMoEp7ldhHg= -----END CERTIFICATE-----Generated at Thu Aug 7 00:46:49 2025 by rpki-client