$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f883232c-a497-37af-9797-185eac4ebc21.roa File: f883232c-a497-37af-9797-185eac4ebc21.roa (raw, json) Hash identifier: 9P/qmRuddy6WT4WDRIO9ggP8K5jpHdaG1YQAHv44bSk= Subject key identifier: 89:DB:E4:0F:F2:B4:49:89:B2:32:9C:53:F5:12:2F:7C:A7:19:AF:20 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BB192855F002A47041B136140 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f883232c-a497-37af-9797-185eac4ebc21.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 108.178.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:85:5f:00:2a:47:04:1b:13:61:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=f96df9c1-d6d6-4d12-9a6a-75043a8f7291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d5:c3:67:67:d7:2e:bd:66:5c:aa:3b:08:e5: 35:fd:bb:de:f5:35:91:c9:1e:98:16:92:95:89:15: 63:25:30:18:c1:04:cf:d5:7c:6b:09:b6:ab:fa:79: e1:4a:ec:0a:b2:1f:8b:c6:08:63:d4:ee:ab:97:1f: b5:0c:03:32:aa:15:89:5d:af:25:a5:30:bb:9a:78: 60:11:60:8b:c8:fe:7d:7b:ac:8d:dd:cd:52:dd:8f: 07:f3:73:94:7d:36:80:66:1d:96:cb:b0:98:90:38: af:0b:5e:aa:cb:7f:d1:36:ae:1c:ee:f3:f5:c5:8e: f9:fe:df:98:79:5b:35:e3:86:c9:6f:d1:03:32:3d: e7:02:57:f5:7b:a2:1a:d5:ba:ae:0c:27:f2:89:cd: a7:3a:2d:2c:be:b0:5f:6f:30:14:19:b8:ac:89:bd: b8:5c:2f:91:8e:1f:62:2f:fc:16:54:ef:fc:31:5f: 4d:aa:5f:36:1b:19:b6:44:ea:ee:f2:e2:e6:a6:e5: 9c:f7:2f:27:a7:14:06:b0:e1:e9:ea:4b:40:13:52: 92:68:b7:86:82:c3:4f:b2:2d:28:5a:84:b3:4d:83: 05:22:62:b6:a3:b7:30:33:6f:55:13:42:b8:56:cb: 95:eb:60:2d:15:6a:39:61:07:73:42:59:2d:73:fc: ff:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:DB:E4:0F:F2:B4:49:89:B2:32:9C:53:F5:12:2F:7C:A7:19:AF:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f883232c-a497-37af-9797-185eac4ebc21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.178.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:d0:8a:ba:6e:91:78:b9:a0:1a:4b:d5:d9:25:c8:d8:e8:33: 2d:7b:81:cc:d7:81:bc:79:d0:8b:66:e1:e5:17:b0:46:27:0e: 14:43:5c:d8:91:16:11:6d:ec:6c:1a:75:49:de:10:65:9c:7a: 95:6b:0f:ce:6b:a1:9c:a3:d9:8c:a4:e7:b5:9c:6f:01:52:13: b0:5e:e4:b5:fe:24:d2:e4:c2:7e:51:54:ab:fa:70:12:61:89: e5:13:53:4e:bc:6f:83:d6:42:ea:b8:b8:3d:3a:72:e4:62:48: 89:7c:a6:28:f7:83:6d:ea:18:37:fd:28:e2:37:46:c7:47:56: 04:aa:cc:52:45:e4:73:77:6d:52:11:9c:d6:6c:fb:95:39:f6: de:e5:bf:27:38:06:90:b6:51:c6:c4:c2:d0:48:ec:a8:21:00: 47:20:00:1d:a3:20:a2:31:af:b7:19:83:0d:67:7d:66:9d:a1: 70:e7:21:4a:8d:f2:1a:cf:2d:92:03:ff:bb:8b:74:ae:70:c9: e2:ad:c2:2f:89:81:2d:2a:9d:f2:4b:3a:f5:7a:f6:91:70:85: ab:64:e5:9f:f6:c4:4b:0c:52:53:68:dc:8d:96:11:88:50:d3: d4:90:1d:ed:c8:36:52:68:83:1f:e2:b1:1d:e7:3c:97:ab:63: 45:82:e2:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkoVfACpHBBsTYUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk Zjk2ZGY5YzEtZDZkNi00ZDEyLTlhNmEtNzUwNDNhOGY3MjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstXDZ2fXLr1mXKo7COU1/bve9TWRyR6YFpKV iRVjJTAYwQTP1XxrCbar+nnhSuwKsh+Lxghj1O6rlx+1DAMyqhWJXa8lpTC7mnhg EWCLyP59e6yN3c1S3Y8H83OUfTaAZh2Wy7CYkDivC16qy3/RNq4c7vP1xY75/t+Y eVs144bJb9EDMj3nAlf1e6Ia1bquDCfyic2nOi0svrBfbzAUGbisib24XC+Rjh9i L/wWVO/8MV9Nql82Gxm2ROru8uLmpuWc9y8npxQGsOHp6ktAE1KSaLeGgsNPsi0o WoSzTYMFImK2o7cwM29VE0K4VsuV62AtFWo5YQdzQlktc/z/TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInb5A/ytEmJsjKcU/USL3ynGa8gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZjg4MzIzMmMtYTQ5Ny0z N2FmLTk3OTctMTg1ZWFjNGViYzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLLZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDQirpukXi5oBpL1dklyNjoMy17gczXgbx50Itm4eUXsEYnDhRDXNiR FhFt7GwadUneEGWcepVrD85roZyj2Yyk57WcbwFSE7Be5LX+JNLkwn5RVKv6cBJh ieUTU068b4PWQuq4uD06cuRiSIl8pij3g23qGDf9KOI3RsdHVgSqzFJF5HN3bVIR nNZs+5U59t7lvyc4BpC2UcbEwtBI7KghAEcgAB2jIKIxr7cZgw1nfWadoXDnIUqN 8hrPLZID/7uLdK5wyeKtwi+JgS0qnfJLOvV69pFwhatk5Z/2xEsMUlNo3I2WEYhQ 09SQHe3INlJogx/isR3nPJerY0WC4sg= -----END CERTIFICATE-----Generated at Wed Nov 5 03:18:26 2025 by rpki-client