$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/97424350-496c-3039-8021-28cda3631346.roa File: 97424350-496c-3039-8021-28cda3631346.roa (raw, json) Hash identifier: RTZLNxZTlXcjJk4wYOmEFqL95HmBQJNZt4OQZc9gn/A= Subject key identifier: 10:C2:D8:84:A1:FE:C8:FB:0C:43:17:CA:B0:A2:85:33:02:C3:95:82 Certificate issuer: /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Certificate serial: 010D0C9F4328584A77808B768E6828DCF2978C40 Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/97424350-496c-3039-8021-28cda3631346.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 21581 IP address blocks: 108.161.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:8b:76:8e:68:28:dc:f2:97:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=28f75742-b92f-4796-9acf-acd46b385cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e1:f7:d1:0b:8b:82:6e:16:65:49:1c:62:b3: 4e:b3:e3:45:b1:11:89:fb:0c:41:dc:9a:17:87:3a: 17:31:1c:4d:f7:ef:e7:d3:c1:4e:c0:88:10:ec:06: 8f:e3:e7:d5:92:bb:c1:1c:a6:49:4a:5d:46:37:41: aa:62:a8:95:0b:c9:2a:3f:a0:fb:3d:d8:63:fe:b3: ca:da:06:46:b1:b2:3d:85:91:cc:48:a2:3d:37:a3: 7d:fa:50:dd:6c:5e:ef:ca:21:76:79:0f:0e:ea:83: d3:db:fe:b9:2c:19:ee:db:aa:8b:1c:6f:7d:0f:05: 97:5c:cc:33:b8:25:3b:14:1c:6b:fe:fb:d8:36:a9: be:84:03:c1:dd:b1:ea:77:fc:09:91:08:6d:1c:4d: d8:6f:67:23:b8:51:dd:3e:cd:30:28:6b:76:be:f3: 37:da:2f:d9:0f:bb:29:e2:13:48:87:c8:9a:2e:f9: 53:0e:37:10:79:65:ae:3f:fa:16:0d:ce:dc:5a:d9: 61:c5:43:f5:d2:15:e6:bd:1d:36:4b:1e:8f:3e:2a: 94:40:8a:dc:d5:b6:00:52:30:86:cc:44:f4:85:36: dd:bb:95:e0:7c:7c:8a:64:7b:6b:8c:d8:68:54:24: f5:d9:58:02:f3:b7:9a:85:a5:51:9b:3f:29:f7:8a: 7d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C2:D8:84:A1:FE:C8:FB:0C:43:17:CA:B0:A2:85:33:02:C3:95:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/97424350-496c-3039-8021-28cda3631346.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl X509v3 Authority Key Identifier: keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer sbgp-ipAddrBlock: critical IPv4: 108.161.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:1a:5f:51:7f:a6:91:2c:3d:0e:bb:60:80:2f:4b:f1:23:99: 17:10:46:72:38:f3:f2:07:58:91:df:d9:6e:4f:95:3c:81:39: b0:27:f5:51:02:46:f7:c7:31:3b:73:63:04:53:a1:1f:9b:41: ea:62:7f:89:ca:c0:6f:f0:f7:53:22:1c:6d:be:1f:2d:cf:ce: 37:a6:7a:e4:7e:7c:11:66:d2:7b:da:1c:a9:05:2a:ee:f9:9a: fb:51:bb:c5:e9:eb:13:71:be:af:11:bb:78:a1:b7:b6:5c:44: 85:5c:14:b3:4e:4a:08:1f:60:66:e3:af:d0:96:ad:0a:46:13: 78:59:66:4e:8c:c6:fb:ec:2b:12:26:5f:44:a7:7e:33:b5:48: b1:0d:2c:41:ba:21:e7:4a:71:2e:1e:54:ad:b7:65:7c:ad:cf: 3f:2c:99:ce:53:98:5c:88:46:11:81:ed:f3:b8:ab:17:3b:3a: 0f:f5:3d:87:de:e2:29:f6:1b:85:55:d0:20:59:95:af:0f:5b: 4d:9e:7d:57:de:84:c1:78:c5:68:51:26:80:5e:a6:0d:5a:af: de:94:20:64:47:f1:47:c1:67:a5:9f:6a:bf:b8:9d:ff:a7:df: 47:a0:85:65:d2:91:21:eb:fd:44:bd:21:15:dc:90:31:f4:7c: 04:21:53:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gIt2jmgo3PKXjEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY5ZTYwYTYtNTFjNC00YTNlLTgyMWEtMmQ3ZDQzOGJh ZDRjMB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk MjhmNzU3NDItYjkyZi00Nzk2LTlhY2YtYWNkNDZiMzg1Y2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OH30QuLgm4WZUkcYrNOs+NFsRGJ+wxB3JoX hzoXMRxN9+/n08FOwIgQ7AaP4+fVkrvBHKZJSl1GN0GqYqiVC8kqP6D7Pdhj/rPK 2gZGsbI9hZHMSKI9N6N9+lDdbF7vyiF2eQ8O6oPT2/65LBnu26qLHG99DwWXXMwz uCU7FBxr/vvYNqm+hAPB3bHqd/wJkQhtHE3Yb2cjuFHdPs0wKGt2vvM32i/ZD7sp 4hNIh8iaLvlTDjcQeWWuP/oWDc7cWtlhxUP10hXmvR02Sx6PPiqUQIrc1bYAUjCG zET0hTbdu5XgfHyKZHtrjNhoVCT12VgC87eahaVRmz8p94p9jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDC2ISh/sj7DEMXyrCihTMCw5WCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNjll NjBhNi01MWM0LTRhM2UtODIxYS0yZDdkNDM4YmFkNGMvOTc0MjQzNTAtNDk2Yy0z MDM5LTgwMjEtMjhjZGEzNjMxMzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjY5ZTYwYTYtNTFjNC00YTNlLTgy MWEtMmQ3ZDQzOGJhZDRjL2Y2OWU2MGE2LTUxYzQtNGEzZS04MjFhLTJkN2Q0Mzhi YWQ0Yy5jcmwwHwYDVR0jBBgwFoAUreo9MXSqvMcug0IvZpaHEFYYkwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNjllNjBhNi01MWM0LTRhM2UtODIxYS0yZDdk NDM4YmFkNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKGfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAaX1F/ppEsPQ67YIAvS/EjmRcQRnI48/IHWJHf2W5PlTyBObAn9VEC RvfHMTtzYwRToR+bQepif4nKwG/w91MiHG2+Hy3PzjemeuR+fBFm0nvaHKkFKu75 mvtRu8Xp6xNxvq8Ru3iht7ZcRIVcFLNOSggfYGbjr9CWrQpGE3hZZk6MxvvsKxIm X0SnfjO1SLENLEG6IedKcS4eVK23ZXytzz8smc5TmFyIRhGB7fO4qxc7Og/1PYfe 4in2G4VV0CBZla8PW02efVfehMF4xWhRJoBepg1ar96UIGRH8UfBZ6Wfar+4nf+n 30eghWXSkSHr/US9IRXckDH0fAQhU3c= -----END CERTIFICATE-----Generated at Mon Aug 4 16:09:32 2025 by rpki-client