$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/6cefd9ed-c6aa-377f-b955-242338127643.roa File: 6cefd9ed-c6aa-377f-b955-242338127643.roa (raw, json) Hash identifier: tGRw0yxDH13ZJVeagSGAcAm261XS7JZ88Lu+vQP0vBU= Subject key identifier: FE:08:91:E4:51:78:04:C9:3C:1B:DE:EA:E7:52:72:DB:DC:2D:8E:9E Certificate issuer: /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Certificate serial: 010D0C9F4328584A7780A72D022EDF6E14A8CF90 Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/6cefd9ed-c6aa-377f-b955-242338127643.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 21581 IP address blocks: 108.161.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:a7:2d:02:2e:df:6e:14:a8:cf:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=d33c01b6-09bc-4f6f-a354-fe6ad9c82843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e3:42:de:20:79:e7:03:d5:b8:d0:3e:ae:bb: ef:b6:47:a0:a2:83:2a:6a:43:43:44:6f:35:3d:7f: 0d:52:f4:de:9a:d1:f1:09:b7:7f:ac:7b:43:ee:b5: 2b:02:b8:af:96:80:5c:01:7a:4d:ab:b0:b7:5c:bc: 2b:70:a8:aa:72:e0:69:01:4f:95:3c:eb:ca:b4:e9: 2e:cf:6e:f3:34:5d:81:1c:5a:c0:c1:05:ed:85:24: 56:89:38:7e:94:2f:ff:f3:90:0c:1e:ab:00:8f:4c: 21:33:dc:8e:b9:4a:50:32:0d:aa:4f:a6:f6:56:a8: 33:8a:0e:a1:d4:7c:21:50:3a:96:58:df:9e:26:c3: 8e:fa:d0:14:33:f0:11:da:e8:98:00:b5:20:a8:cf: 8d:0c:53:02:9d:f4:a0:17:71:ec:53:6f:9c:61:6d: 60:0d:3c:7a:ab:44:f9:12:ca:f0:aa:59:73:9f:89: 7f:9a:68:af:1f:fb:b1:67:d0:89:8a:ca:7a:ec:7f: d3:10:28:6d:be:3f:7b:2e:36:53:1e:08:c0:49:76: 12:3f:e5:97:ad:f7:d0:19:b6:bf:f7:0a:3b:93:6b: ca:60:1f:73:92:9d:a9:d4:6f:51:cb:54:9f:36:de: d9:a2:d4:3b:68:62:a2:ba:be:83:02:cd:90:3b:4d: 9e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:08:91:E4:51:78:04:C9:3C:1B:DE:EA:E7:52:72:DB:DC:2D:8E:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/6cefd9ed-c6aa-377f-b955-242338127643.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl X509v3 Authority Key Identifier: keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer sbgp-ipAddrBlock: critical IPv4: 108.161.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:38:52:b7:0f:bb:1e:e1:60:50:1c:f8:9b:79:0d:30:ff:d7: 3c:d1:bf:5a:f5:d2:2f:f6:86:fe:d2:5e:da:b8:2c:0a:42:cf: 88:e4:d2:e1:46:15:f5:83:65:a0:78:9a:64:cb:ee:13:27:48: 09:e3:75:3d:fd:f9:ff:6d:04:4c:c4:39:1f:b3:4c:83:2b:6e: b3:ed:31:8b:ab:f4:f5:2b:31:da:ce:fa:ce:0f:6e:9c:11:4a: a8:f5:17:28:9f:ed:6b:6d:4c:93:24:35:b2:dc:d8:8c:cf:40: a6:3e:d5:85:dd:56:90:ef:93:e9:90:12:93:ef:44:34:0d:ca: 4f:75:d7:4c:fd:14:71:50:95:07:cf:33:6e:5a:c1:8d:7d:21: 81:d4:dd:a8:71:6b:25:06:93:f2:07:d6:47:a5:c6:70:05:ae: ed:55:82:8d:b4:0b:20:e8:2e:e2:5b:e5:6a:f6:77:7d:4e:ff: 30:68:d1:69:19:c8:37:dd:38:78:74:50:2d:dc:b7:1e:05:09: 3c:84:aa:0e:b1:a5:6e:01:29:e1:03:2c:6b:d8:88:21:5f:43: a0:f3:86:37:59:7b:06:65:5e:33:17:22:7b:ba:10:9e:b8:55: 3c:a6:9a:b7:3e:8c:c6:ad:b0:28:1b:bc:2c:d6:be:97:40:6a: f7:92:76:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gKctAi7fbhSoz5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY5ZTYwYTYtNTFjNC00YTNlLTgyMWEtMmQ3ZDQzOGJh ZDRjMB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk ZDMzYzAxYjYtMDliYy00ZjZmLWEzNTQtZmU2YWQ5YzgyODQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgONC3iB55wPVuNA+rrvvtkegooMqakNDRG81 PX8NUvTemtHxCbd/rHtD7rUrArivloBcAXpNq7C3XLwrcKiqcuBpAU+VPOvKtOku z27zNF2BHFrAwQXthSRWiTh+lC//85AMHqsAj0whM9yOuUpQMg2qT6b2Vqgzig6h 1HwhUDqWWN+eJsOO+tAUM/AR2uiYALUgqM+NDFMCnfSgF3HsU2+cYW1gDTx6q0T5 Esrwqllzn4l/mmivH/uxZ9CJisp67H/TEChtvj97LjZTHgjASXYSP+WXrffQGba/ 9wo7k2vKYB9zkp2p1G9Ry1SfNt7ZotQ7aGKiur6DAs2QO02ecQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4IkeRReATJPBve6udSctvcLY6eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNjll NjBhNi01MWM0LTRhM2UtODIxYS0yZDdkNDM4YmFkNGMvNmNlZmQ5ZWQtYzZhYS0z NzdmLWI5NTUtMjQyMzM4MTI3NjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjY5ZTYwYTYtNTFjNC00YTNlLTgy MWEtMmQ3ZDQzOGJhZDRjL2Y2OWU2MGE2LTUxYzQtNGEzZS04MjFhLTJkN2Q0Mzhi YWQ0Yy5jcmwwHwYDVR0jBBgwFoAUreo9MXSqvMcug0IvZpaHEFYYkwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNjllNjBhNi01MWM0LTRhM2UtODIxYS0yZDdk NDM4YmFkNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEbKGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEM4UrcPux7hYFAc+Jt5DTD/1zzRv1r10i/2hv7SXtq4LApCz4jk0uFG FfWDZaB4mmTL7hMnSAnjdT39+f9tBEzEOR+zTIMrbrPtMYur9PUrMdrO+s4PbpwR Sqj1Fyif7WttTJMkNbLc2IzPQKY+1YXdVpDvk+mQEpPvRDQNyk9110z9FHFQlQfP M25awY19IYHU3ahxayUGk/IH1kelxnAFru1Vgo20CyDoLuJb5Wr2d31O/zBo0WkZ yDfdOHh0UC3ctx4FCTyEqg6xpW4BKeEDLGvYiCFfQ6DzhjdZewZlXjMXInu6EJ64 VTymmrc+jMatsCgbvCzWvpdAaveSdgA= -----END CERTIFICATE-----Generated at Mon Aug 4 16:04:07 2025 by rpki-client