$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e28dc1da-cf85-3290-ba33-6973d3a63483.roa File: e28dc1da-cf85-3290-ba33-6973d3a63483.roa (raw, json) Hash identifier: G+2p1Ab7NVZXhFA3al3/3BCkl6MFgM663RiyCKj4FjM= Subject key identifier: 71:CD:0B:22:22:08:B5:5F:2A:C1:2C:96:3E:B0:27:16:78:6E:56:6B Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584AB4EB760EE79896F37E4D9980 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e28dc1da-cf85-3290-ba33-6973d3a63483.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 62651 IP address blocks: 108.171.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:76:0e:e7:98:96:f3:7e:4d:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=1703298a-42e3-4377-8b85-016e76f7f186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8b:dc:ef:e3:8e:20:b3:80:20:27:a5:11:f2: 4e:53:4c:da:78:2a:49:72:a4:c2:fe:d0:ba:5d:a4: 27:0f:71:b3:3d:b6:ec:98:f5:2d:4d:c3:63:aa:95: 44:1f:1f:fb:f2:97:47:2e:db:14:42:7e:f8:45:d4: 5e:45:e3:e6:7c:d1:58:c2:52:d0:e3:00:bb:8f:9b: 6c:58:ca:03:1b:1d:62:16:a7:df:49:00:f1:40:02: e9:99:16:30:4c:be:5d:a2:2f:24:01:e0:50:eb:9d: 8b:da:11:0f:98:be:f7:74:11:32:d6:dd:b7:b2:9e: d7:f1:f5:d2:bd:70:72:ff:30:49:84:95:85:d8:c3: 04:40:56:de:e7:61:70:bf:f3:15:8c:f1:f5:b5:67: 47:e3:c2:b9:7a:b2:03:2b:21:f3:30:2a:51:1b:b4: 65:ec:9a:ae:a0:40:80:cb:e4:d6:9e:8e:4f:3a:be: 27:ac:d1:13:fe:74:f0:42:21:a6:23:f8:32:55:c4: 40:f1:4a:02:03:39:d5:a9:e7:60:bc:e2:a7:a1:7e: 5d:b0:d5:c1:04:26:66:0c:99:b3:17:c2:87:58:3f: 2e:9f:74:c2:c7:23:8f:32:d3:8d:7d:e4:3c:a8:1f: 27:77:e4:a0:42:7b:26:a8:76:31:34:21:9e:20:ff: fd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CD:0B:22:22:08:B5:5F:2A:C1:2C:96:3E:B0:27:16:78:6E:56:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e28dc1da-cf85-3290-ba33-6973d3a63483.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 108.171.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:c7:7c:08:a1:dd:ae:37:72:0c:a8:56:ef:4c:20:0e:bc:85: b2:ea:7c:88:83:57:6b:9b:75:4e:67:68:39:8a:34:8b:41:85: 86:2d:c0:e9:ef:17:49:64:b8:c0:62:bd:20:69:e0:a8:c7:0d: 24:bb:0f:95:e4:76:4d:bd:35:30:94:ce:09:4b:18:af:23:bc: 29:ad:a4:e6:8a:d3:6f:50:52:80:94:97:45:10:cc:5e:8d:81: 87:b5:7e:03:3d:78:26:92:70:5d:52:d4:75:b1:b4:7b:c3:53: 8c:44:37:17:b2:ce:6f:77:15:8f:06:88:22:cf:08:ae:6b:b4: 15:17:7a:cd:c5:0a:ab:a5:98:54:b3:c9:53:19:69:5b:20:2e: 4a:b9:e8:e1:b2:63:45:bc:d7:33:4a:2d:7f:47:4e:40:ba:16: 11:32:16:ba:89:15:85:37:18:f8:34:d0:a6:9c:11:c4:ef:9e: 17:b1:59:57:d9:c5:dd:a2:f0:de:33:0a:11:8c:0b:14:8e:41: df:15:29:ce:eb:05:d8:ca:67:36:99:fc:b1:25:b4:ac:3f:fc: b1:83:28:de:0e:2a:0b:35:bc:29:8f:bd:b7:04:1c:74:8f:a9: 50:26:02:50:92:63:6a:46:67:fb:16:d0:cc:9d:f9:bb:36:cf: 18:fa:48:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq063YO55iW835NmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk MTcwMzI5OGEtNDJlMy00Mzc3LThiODUtMDE2ZTc2ZjdmMTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIvc7+OOILOAICelEfJOU0zaeCpJcqTC/tC6 XaQnD3GzPbbsmPUtTcNjqpVEHx/78pdHLtsUQn74RdReRePmfNFYwlLQ4wC7j5ts WMoDGx1iFqffSQDxQALpmRYwTL5doi8kAeBQ652L2hEPmL73dBEy1t23sp7X8fXS vXBy/zBJhJWF2MMEQFbe52Fwv/MVjPH1tWdH48K5erIDKyHzMCpRG7Rl7JquoECA y+TWno5POr4nrNET/nTwQiGmI/gyVcRA8UoCAznVqedgvOKnoX5dsNXBBCZmDJmz F8KHWD8un3TCxyOPMtONfeQ8qB8nd+SgQnsmqHYxNCGeIP/9KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHNCyIiCLVfKsEslj6wJxZ4blZrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZTI4ZGMxZGEtY2Y4NS0z MjkwLWJhMzMtNjk3M2QzYTYzNDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKtnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfHfAih3a43cgyoVu9MIA68hbLqfIiDV2ubdU5naDmKNItBhYYtwOnv F0lkuMBivSBp4KjHDSS7D5Xkdk29NTCUzglLGK8jvCmtpOaK029QUoCUl0UQzF6N gYe1fgM9eCaScF1S1HWxtHvDU4xENxeyzm93FY8GiCLPCK5rtBUXes3FCqulmFSz yVMZaVsgLkq56OGyY0W81zNKLX9HTkC6FhEyFrqJFYU3GPg00KacEcTvnhexWVfZ xd2i8N4zChGMCxSOQd8VKc7rBdjKZzaZ/LEltKw//LGDKN4OKgs1vCmPvbcEHHSP qVAmAlCSY2pGZ/sW0Myd+bs2zxj6SJM= -----END CERTIFICATE-----Generated at Sat Aug 9 23:15:41 2025 by rpki-client