$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/022b06d5-a8b3-3b48-a69a-409b7bb12008.roa File: 022b06d5-a8b3-3b48-a69a-409b7bb12008.roa (raw, json) Hash identifier: 3EW+VHtjC/pbz4m9ZOHZ1LQd8u8EoUx0JVdjFVHHdRM= Subject key identifier: A5:4F:FB:B6:24:EB:3D:3E:C3:4F:A7:75:4A:2C:85:B3:E6:50:26:1F Certificate issuer: /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Certificate serial: 010D0C9F4328584A7780814B684BEAEFF0B63000 Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/022b06d5-a8b3-3b48-a69a-409b7bb12008.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 21581 IP address blocks: 108.161.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:81:4b:68:4b:ea:ef:f0:b6:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=13ccbc06-12d1-4dab-a989-013ffe862428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:82:51:1d:a7:f3:ba:bc:55:20:cc:47:eb:9d: 00:84:94:fc:17:91:21:84:28:2a:0c:2c:fa:23:a7: bc:79:bf:ae:d5:1c:77:8a:84:b8:53:1f:fe:43:d1: c2:94:6e:b4:57:3c:64:a7:90:c0:b5:5f:c4:6f:ba: bd:e7:d5:a4:ed:4e:c7:09:af:b9:ac:43:ff:f7:e0: 7a:5d:b5:d2:69:78:ef:41:c9:ac:02:21:36:c5:68: 56:d8:df:0d:a3:7d:5c:2b:93:ef:bd:65:73:87:aa: 42:4f:19:45:f1:6e:54:91:cd:a8:d1:24:f5:5e:5b: ff:9d:d3:7e:f7:21:2c:d0:cc:07:5d:34:69:57:0d: 66:70:b9:62:f3:34:87:5f:a9:63:a7:97:c9:3c:06: 75:c1:84:98:84:9f:c2:35:6c:52:55:88:60:de:b3: eb:03:eb:50:6c:02:df:ae:18:00:5d:c7:0d:b6:27: 4b:ed:38:ec:cc:68:95:77:3f:67:5a:43:ac:b2:86: 4c:42:af:be:64:cb:fc:2a:25:98:77:b4:6b:85:36: 63:a1:d6:26:bf:fd:30:fd:ba:1b:80:91:a0:0f:c3: f8:66:ac:17:83:f6:14:76:bb:71:e9:42:6e:fc:9e: 54:c9:26:9f:d0:c8:62:16:2e:6b:97:f3:37:0b:35: e1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:4F:FB:B6:24:EB:3D:3E:C3:4F:A7:75:4A:2C:85:B3:E6:50:26:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/022b06d5-a8b3-3b48-a69a-409b7bb12008.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl X509v3 Authority Key Identifier: keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer sbgp-ipAddrBlock: critical IPv4: 108.161.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:7e:7f:fe:ca:3b:f7:41:53:26:7b:57:c7:d9:3d:39:f4:b4: f8:0e:c5:1a:60:95:e1:57:96:79:46:fd:12:79:49:90:8e:71: 5b:ca:cf:11:b4:a3:97:87:96:be:f5:60:8f:33:c6:1c:01:08: 92:4b:ac:43:48:d1:ca:1a:ab:80:f3:3d:13:ea:ac:6c:5f:2e: 2a:3a:90:b6:61:29:ef:1f:80:20:b0:71:c8:1b:42:a2:5f:fa: 65:54:bf:4d:64:9d:8f:01:d9:6a:03:1b:72:2f:e1:86:ab:e7: 38:ff:d8:b3:81:81:60:1d:27:67:63:2e:6f:33:ad:1d:d4:79: da:50:e2:7d:72:72:d2:e1:d8:0b:9e:32:3b:ce:0e:27:9e:8c: f6:e7:38:44:62:88:33:a1:f8:22:c6:f3:fb:1a:35:f3:21:40: ac:ee:0b:43:d6:c3:09:d9:57:55:4f:72:17:db:bc:02:ea:3b: 46:c6:7f:51:d6:1f:9c:f1:5b:e9:f3:1c:9d:f7:a2:42:e2:83: fa:40:49:81:b8:9d:0c:80:39:ba:df:2d:6d:61:52:d6:9a:47: 4c:73:c3:85:e8:67:d9:b0:29:8d:b3:0f:87:ab:c3:8f:29:76: 76:84:d1:0f:2c:1c:ab:34:bc:30:a2:53:39:c2:5a:8f:58:11: a8:3b:e6:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gIFLaEvq7/C2MAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY5ZTYwYTYtNTFjNC00YTNlLTgyMWEtMmQ3ZDQzOGJh ZDRjMB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk MTNjY2JjMDYtMTJkMS00ZGFiLWE5ODktMDEzZmZlODYyNDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIJRHafzurxVIMxH650AhJT8F5EhhCgqDCz6 I6e8eb+u1Rx3ioS4Ux/+Q9HClG60Vzxkp5DAtV/Eb7q959Wk7U7HCa+5rEP/9+B6 XbXSaXjvQcmsAiE2xWhW2N8No31cK5PvvWVzh6pCTxlF8W5Ukc2o0ST1Xlv/ndN+ 9yEs0MwHXTRpVw1mcLli8zSHX6ljp5fJPAZ1wYSYhJ/CNWxSVYhg3rPrA+tQbALf rhgAXccNtidL7TjszGiVdz9nWkOssoZMQq++ZMv8KiWYd7RrhTZjodYmv/0w/bob gJGgD8P4ZqwXg/YUdrtx6UJu/J5UySaf0MhiFi5rl/M3CzXhkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVP+7Yk6z0+w0+ndUoshbPmUCYfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNjll NjBhNi01MWM0LTRhM2UtODIxYS0yZDdkNDM4YmFkNGMvMDIyYjA2ZDUtYThiMy0z YjQ4LWE2OWEtNDA5YjdiYjEyMDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjY5ZTYwYTYtNTFjNC00YTNlLTgy MWEtMmQ3ZDQzOGJhZDRjL2Y2OWU2MGE2LTUxYzQtNGEzZS04MjFhLTJkN2Q0Mzhi YWQ0Yy5jcmwwHwYDVR0jBBgwFoAUreo9MXSqvMcug0IvZpaHEFYYkwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNjllNjBhNi01MWM0LTRhM2UtODIxYS0yZDdk NDM4YmFkNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHF+f/7KO/dBUyZ7V8fZPTn0tPgOxRpgleFXlnlG/RJ5SZCOcVvKzxG0 o5eHlr71YI8zxhwBCJJLrENI0coaq4DzPRPqrGxfLio6kLZhKe8fgCCwccgbQqJf +mVUv01knY8B2WoDG3Iv4Yar5zj/2LOBgWAdJ2djLm8zrR3UedpQ4n1yctLh2Aue MjvODieejPbnOERiiDOh+CLG8/saNfMhQKzuC0PWwwnZV1VPchfbvALqO0bGf1HW H5zxW+nzHJ33okLig/pASYG4nQyAObrfLW1hUtaaR0xzw4XoZ9mwKY2zD4erw48p dnaE0Q8sHKs0vDCiUznCWo9YEag75lk= -----END CERTIFICATE-----Generated at Mon Aug 4 14:52:28 2025 by rpki-client