$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/03a99281-bba0-34b3-ae41-891078c2a499.roa File: 03a99281-bba0-34b3-ae41-891078c2a499.roa (raw, json) Hash identifier: 7bxlI7RTn9p/bq0crC0U80B3oxEJp+1nBT4qLDYsMCQ= Subject key identifier: 98:C2:E0:0B:30:49:19:64:7B:75:BC:B6:A2:62:D4:EE:BD:ED:53:29 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584A8F3B77F6235C1E941AD60B80 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/03a99281-bba0-34b3-ae41-891078c2a499.roa Signing time: Fri 18 Jul 2025 13:01:05 +0000 ROA not before: Fri 18 Jul 2025 13:01:05 +0000 ROA not after: Thu 16 Oct 2025 13:01:05 +0000 asID: 174 IP address blocks: 107.158.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8f:3b:77:f6:23:5c:1e:94:1a:d6:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Jul 18 13:01:05 2025 GMT Not After : Oct 16 13:01:05 2025 GMT Subject: CN=3eab9e32-618e-4b4a-977b-0d348052ee9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b3:44:1b:34:61:a5:25:db:87:b5:2d:62:ff: 17:21:27:82:6c:a6:a1:69:c7:85:d4:92:17:df:08: fd:27:b7:a2:4f:16:c9:60:d7:0b:ef:36:8b:a5:a4: 1d:f4:94:e2:9a:76:c2:bc:7c:a0:14:0f:77:4f:4d: 15:d7:73:4a:8e:6c:98:3e:fe:f8:0c:55:fd:63:87: 45:5b:42:b6:f1:d5:bc:bb:9c:40:af:37:dd:22:dd: fb:84:04:91:80:24:e4:8f:98:a1:53:8b:52:12:c9: 0f:c4:45:49:b8:01:7b:b7:23:20:de:84:4c:31:44: ca:2d:f3:b0:b2:95:6c:20:39:c6:6c:ab:95:cc:a4: ef:58:cd:78:b4:b7:8d:ed:f9:3c:0d:e8:0f:d5:64: f0:08:44:f4:bb:9b:10:5c:dd:1c:cd:76:8d:73:3b: a0:1a:e9:a7:af:21:9d:49:97:3c:f3:d4:1b:83:f7: 8b:37:2f:e0:f9:fd:7d:f7:cd:ee:54:20:9c:e3:ef: b9:76:37:e1:f6:e0:df:72:b8:2f:73:1c:e4:de:05: 30:91:27:19:07:9c:5b:bc:ec:3c:d2:2d:a8:94:12: 45:be:ff:50:54:a8:66:0c:36:25:3a:0b:f0:e1:81: 5c:58:b4:5e:fa:ed:ff:3e:39:d6:dc:45:40:27:42: 42:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C2:E0:0B:30:49:19:64:7B:75:BC:B6:A2:62:D4:EE:BD:ED:53:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/03a99281-bba0-34b3-ae41-891078c2a499.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 107.158.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:07:77:8e:a3:b1:dc:40:fb:59:c3:c5:58:bf:11:2b:e1:60: 8b:c4:27:7f:dd:b5:b2:55:df:fd:c8:e4:f4:be:b9:1f:09:f5: 1d:10:26:60:f1:74:65:cc:0f:43:a1:2b:0e:95:87:8d:c2:72: 52:b4:c1:04:1e:20:d5:d4:ce:87:fa:be:45:a4:96:1a:21:6e: 6a:cf:4c:c1:46:a2:89:d5:7b:e0:f1:8b:0f:35:7b:7b:9f:50: 62:29:f3:bd:06:bf:cb:0d:f1:c5:d0:7b:76:aa:75:01:41:49: 86:14:bd:ca:8b:43:6c:25:7f:e9:e8:77:b5:d6:94:79:c1:88: ba:a6:04:41:61:66:2b:a8:44:48:20:53:89:ee:92:67:a1:02: 51:6b:0e:1f:91:ec:c0:3b:a7:ab:88:75:04:3c:7f:c7:26:9b: 73:28:1b:25:e7:56:ca:bb:47:8d:ea:ae:48:aa:e5:aa:10:61: 52:27:d1:9e:b7:8b:0b:96:7b:1c:f4:e1:db:1a:6d:11:0d:86: 8b:63:5f:02:79:d9:a8:ea:27:bd:8b:1d:f6:3e:5f:b5:b2:76: dd:4b:c1:9c:ed:cc:da:26:6f:82:48:bd:9f:2c:5e:e3:db:71: 2a:14:12:95:e5:32:fd:0d:0e:89:15:14:91:f4:ca:33:72:fe: c1:d0:0e:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqPO3f2I1welBrWC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDcxODEzMDEwNVoXDTI1MTAxNjEzMDEwNVowLzEtMCsGA1UEAxMk M2VhYjllMzItNjE4ZS00YjRhLTk3N2ItMGQzNDgwNTJlZTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLNEGzRhpSXbh7UtYv8XISeCbKahaceF1JIX 3wj9J7eiTxbJYNcL7zaLpaQd9JTimnbCvHygFA93T00V13NKjmyYPv74DFX9Y4dF W0K28dW8u5xArzfdIt37hASRgCTkj5ihU4tSEskPxEVJuAF7tyMg3oRMMUTKLfOw spVsIDnGbKuVzKTvWM14tLeN7fk8DegP1WTwCET0u5sQXN0czXaNczugGumnryGd SZc889Qbg/eLNy/g+f19983uVCCc4++5djfh9uDfcrgvcxzk3gUwkScZB5xbvOw8 0i2olBJFvv9QVKhmDDYlOgvw4YFcWLRe+u3/PjnW3EVAJ0JCGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjC4AswSRlke3W8tqJi1O697VMpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMDNhOTkyODEtYmJhMC0z NGIzLWFlNDEtODkxMDc4YzJhNDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa56ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8Hd46jsdxA+1nDxVi/ESvhYIvEJ3/dtbJV3/3I5PS+uR8J9R0QJmDx dGXMD0OhKw6Vh43CclK0wQQeINXUzof6vkWklhohbmrPTMFGoonVe+Dxiw81e3uf UGIp870Gv8sN8cXQe3aqdQFBSYYUvcqLQ2wlf+nod7XWlHnBiLqmBEFhZiuoREgg U4nukmehAlFrDh+R7MA7p6uIdQQ8f8cmm3MoGyXnVsq7R43qrkiq5aoQYVIn0Z63 iwuWexz04dsabRENhotjXwJ52ajqJ72LHfY+X7Wydt1LwZztzNomb4JIvZ8sXuPb cSoUEpXlMv0NDokVFJH0yjNy/sHQDpA= -----END CERTIFICATE-----Generated at Sat Aug 9 03:04:24 2025 by rpki-client