$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/0bb8b992-e69b-3f68-9228-3d2a8870d832.roa File: 0bb8b992-e69b-3f68-9228-3d2a8870d832.roa (raw, json) Hash identifier: 2Cj69E6IxZeu9sXZEKC1dFQCes+kxrmlrbZXD5YA4T0= Subject key identifier: FF:B0:63:A0:B9:65:18:5E:F3:64:C9:65:F0:C1:C5:5D:AB:48:DF:F8 Certificate issuer: /CN=d8e4c881-0377-49f5-9af5-410d30fb5527 Certificate serial: 010D0C9F4328584A23BFFD47D623390D3CF42DB0 Authority key identifier: F8:65:15:9D:DF:4F:3D:56:24:B0:0A:D9:62:F4:FB:4F:82:E2:D3:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/0bb8b992-e69b-3f68-9228-3d2a8870d832.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 203 IP address blocks: 107.191.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/d8e4c881-0377-49f5-9af5-410d30fb5527.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/d8e4c881-0377-49f5-9af5-410d30fb5527.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:bf:fd:47:d6:23:39:0d:3c:f4:2d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8e4c881-0377-49f5-9af5-410d30fb5527 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=d88cb5d5-1112-43aa-b356-0c3a40bfdf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:95:00:30:a5:41:fe:1f:b7:1a:c8:32:be:76: 4f:9c:fe:da:2f:37:90:1f:4b:4a:bf:26:81:e3:f7: 08:96:0b:26:d8:f2:67:07:d6:25:ef:c1:4b:58:47: 30:6d:e0:1f:d8:29:83:59:e7:aa:f9:4e:e7:e6:cd: 94:f4:24:e3:73:af:a2:98:f9:e4:75:28:be:1d:3a: 30:4c:d9:98:e7:a8:c0:69:21:97:ad:44:a2:d6:1e: 87:20:02:4e:21:3c:a0:43:40:c3:97:ad:a3:c9:3b: 75:63:a5:5c:10:27:9e:18:d9:82:35:3b:47:f3:50: 74:7e:ba:24:75:87:e9:f9:3a:82:99:e2:76:4a:24: 00:43:ec:ca:fa:cd:16:d5:f7:d2:28:58:58:f2:1b: 0d:69:e1:ff:a3:e8:7e:8b:e6:42:2c:c7:75:ad:58: de:07:ab:29:68:e3:ac:29:ce:10:56:83:83:0a:c0: d8:64:4f:c5:5f:c5:4f:7d:f0:05:fd:03:f1:70:c7: 04:60:2c:ec:c9:e8:0a:4a:cf:09:8b:00:05:1f:f7: de:f3:0e:6c:2d:7e:4d:5f:eb:c0:19:e7:82:4b:61: 51:c7:a7:28:d7:64:3d:57:74:d3:b8:8d:c5:c9:d8: 74:e2:16:7a:d2:a8:8d:dc:ba:11:36:46:cf:ed:c8: 2d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B0:63:A0:B9:65:18:5E:F3:64:C9:65:F0:C1:C5:5D:AB:48:DF:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/0bb8b992-e69b-3f68-9228-3d2a8870d832.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/d8e4c881-0377-49f5-9af5-410d30fb5527.crl X509v3 Authority Key Identifier: keyid:F8:65:15:9D:DF:4F:3D:56:24:B0:0A:D9:62:F4:FB:4F:82:E2:D3:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527.cer sbgp-ipAddrBlock: critical IPv4: 107.191.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:7c:8d:dd:a8:17:83:1d:7a:a9:20:bd:e2:94:7d:71:5a:54: 95:e1:da:b7:22:c7:dc:e0:1f:65:29:d0:0d:60:c9:06:53:e2: 97:6f:83:08:6f:3d:9f:4d:ed:36:87:04:86:46:69:56:5e:f4: 06:68:1e:3a:8a:33:f8:28:12:76:0a:b4:34:67:7d:51:8a:b7: f3:2a:07:8b:14:51:b3:c2:eb:65:0a:b2:f8:b4:a3:89:ea:dd: 1b:82:51:75:cd:04:bc:5f:e8:2d:23:7d:fe:5f:46:bd:14:e1: 1d:06:1f:2a:12:b3:47:ec:93:99:0f:f2:00:ac:81:f0:7a:89: f4:bf:db:9f:c8:10:0b:c4:c5:d0:45:2c:ea:34:8d:2d:0d:0f: 1d:35:7c:8e:a1:d0:ea:fb:34:c2:25:00:41:35:e1:d7:f7:7e: 60:64:4c:85:e7:09:a5:a3:4d:87:ea:fd:57:65:8b:ff:e3:bb: ff:b8:b7:56:1e:63:cb:6c:92:aa:70:a0:ca:8b:cf:af:9f:60: ad:20:e2:46:a3:63:5d:02:1c:9a:79:3e:70:33:ab:a5:b3:ca: c2:4e:70:45:71:d1:0f:aa:10:82:1c:b7:c0:08:da:a5:39:30: a5:87:ed:cb:6a:e0:50:7e:58:22:a0:53:19:67:b0:33:d3:10: 26:e5:71:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojv/1H1iM5DTz0LbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhlNGM4ODEtMDM3Ny00OWY1LTlhZjUtNDEwZDMwZmI1 NTI3MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk ZDg4Y2I1ZDUtMTExMi00M2FhLWIzNTYtMGMzYTQwYmZkZjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5UAMKVB/h+3GsgyvnZPnP7aLzeQH0tKvyaB 4/cIlgsm2PJnB9Yl78FLWEcwbeAf2CmDWeeq+U7n5s2U9CTjc6+imPnkdSi+HTow TNmY56jAaSGXrUSi1h6HIAJOITygQ0DDl62jyTt1Y6VcECeeGNmCNTtH81B0frok dYfp+TqCmeJ2SiQAQ+zK+s0W1ffSKFhY8hsNaeH/o+h+i+ZCLMd1rVjeB6spaOOs Kc4QVoODCsDYZE/FX8VPffAF/QPxcMcEYCzsyegKSs8JiwAFH/fe8w5sLX5NX+vA GeeCS2FRx6co12Q9V3TTuI3Fydh04hZ60qiN3LoRNkbP7cgtpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+wY6C5ZRhe82TJZfDBxV2rSN/4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOGU0 Yzg4MS0wMzc3LTQ5ZjUtOWFmNS00MTBkMzBmYjU1MjcvMGJiOGI5OTItZTY5Yi0z ZjY4LTkyMjgtM2QyYTg4NzBkODMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDhlNGM4ODEtMDM3Ny00OWY1LTlh ZjUtNDEwZDMwZmI1NTI3L2Q4ZTRjODgxLTAzNzctNDlmNS05YWY1LTQxMGQzMGZi NTUyNy5jcmwwHwYDVR0jBBgwFoAU+GUVnd9PPVYksArZYvT7T4Li004wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kOGU0Yzg4MS0wMzc3LTQ5ZjUtOWFmNS00MTBk MzBmYjU1MjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa79DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFp8jd2oF4MdeqkgveKUfXFaVJXh2rcix9zgH2Up0A1gyQZT4pdvgwhv PZ9N7TaHBIZGaVZe9AZoHjqKM/goEnYKtDRnfVGKt/MqB4sUUbPC62UKsvi0o4nq 3RuCUXXNBLxf6C0jff5fRr0U4R0GHyoSs0fsk5kP8gCsgfB6ifS/25/IEAvExdBF LOo0jS0NDx01fI6h0Or7NMIlAEE14df3fmBkTIXnCaWjTYfq/Vdli//ju/+4t1Ye Y8tskqpwoMqLz6+fYK0g4kajY10CHJp5PnAzq6WzysJOcEVx0Q+qEIIct8AI2qU5 MKWH7ctq4FB+WCKgUxlnsDPTECblceM= -----END CERTIFICATE-----Generated at Sun Jun 15 12:07:56 2025 by rpki-client