$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/cf12e658-9dd5-39f2-bf70-c0a48375d8a6.roa File: cf12e658-9dd5-39f2-bf70-c0a48375d8a6.roa (raw, json) Hash identifier: PCnWE/j6vAY+SBMqLfFeDpPOP1g1/9g8ReeW0PBa744= Subject key identifier: 24:B6:45:1A:FE:72:81:98:00:A1:68:B3:2D:06:39:9B:04:C5:DA:1E Certificate issuer: /CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Certificate serial: 010D0C9F4328584A778081341338DFEC7247E600 Authority key identifier: AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/cf12e658-9dd5-39f2-bf70-c0a48375d8a6.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 21581 IP address blocks: 108.161.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:81:34:13:38:df:ec:72:47:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69e60a6-51c4-4a3e-821a-2d7d438bad4c Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=d98acc6e-dcb2-4cd7-82a3-0a622296512a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7d:26:42:b7:d3:64:79:40:2a:58:73:59:94: 6a:f4:2d:4b:47:ee:6b:07:47:c9:83:1d:f1:b0:d5: 5a:3c:23:c8:c8:ad:c1:02:a3:8d:7a:24:42:ab:15: b9:98:36:7b:2a:11:f6:2d:45:68:8b:0d:7d:5c:cf: be:22:0a:83:0a:61:cf:d2:6b:2c:ac:06:57:81:f5: 9b:c3:ac:c0:b5:7c:3c:22:9a:af:ec:3c:3c:d0:5f: 31:78:56:ff:1d:68:03:94:a7:e6:55:73:2d:bc:10: 6a:21:9e:fa:a2:16:e5:48:c4:b8:cf:61:52:3b:a2: d4:e4:0f:19:5f:ee:c4:c3:c3:3e:61:aa:b5:62:96: 40:76:ac:36:0a:df:20:98:e5:99:3c:0b:42:ac:67: 35:8f:85:66:f5:db:63:e6:0c:47:92:ad:a6:ff:5f: 8e:8c:19:2f:b9:09:18:f7:e1:85:bc:a8:d8:17:70: be:05:44:78:15:a3:13:ce:da:72:87:44:30:7c:eb: 18:07:e0:00:c4:b2:61:08:09:8b:c4:91:7f:fc:10: 8c:28:d1:4c:96:e1:6f:7a:dd:af:41:7e:68:5c:17: df:7d:ac:82:9f:00:07:ea:9b:32:d9:16:0f:2a:50: 86:8a:8c:b7:ff:10:e8:59:8a:b4:48:02:f9:8a:5b: e7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B6:45:1A:FE:72:81:98:00:A1:68:B3:2D:06:39:9B:04:C5:DA:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/cf12e658-9dd5-39f2-bf70-c0a48375d8a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.crl X509v3 Authority Key Identifier: keyid:AD:EA:3D:31:74:AA:BC:C7:2E:83:42:2F:66:96:87:10:56:18:93:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f69e60a6-51c4-4a3e-821a-2d7d438bad4c.cer sbgp-ipAddrBlock: critical IPv4: 108.161.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:a4:f5:8f:b5:82:a8:39:69:97:d8:ec:89:aa:2b:23:81:44: d6:25:11:31:bf:25:30:9a:13:ed:35:25:cd:e2:04:b8:4d:ce: 59:59:e0:89:00:a6:5c:8f:83:9d:07:0f:a9:24:21:0d:7a:14: 1f:43:4f:27:06:1e:2d:e6:b2:92:e8:88:cd:ba:eb:94:31:c5: 82:a8:bc:41:a8:ca:0c:1e:cf:61:44:1f:e1:90:4c:2c:63:99: 09:29:59:51:fb:ce:50:cd:38:86:a1:e3:21:01:57:92:89:be: 47:69:55:c1:60:94:c7:bc:3e:f8:46:d1:31:2e:0f:25:de:e3: 76:1e:c1:5a:2b:8c:b4:f3:5d:a0:38:b4:53:eb:dd:ef:99:a9: 47:60:96:aa:ff:a7:50:76:e8:a3:9c:9a:54:86:3e:cc:79:58: b0:24:c2:c1:38:a3:d3:48:ba:39:e9:22:59:9f:be:a7:59:c3: cd:9d:28:fb:95:08:0e:d7:9d:bf:1a:63:a4:9f:02:ab:f7:27: e9:aa:07:c4:03:80:a3:c4:4b:7e:1d:f5:ab:ec:a6:f5:a3:e6: 37:1e:a9:4d:0e:e0:49:37:65:a6:24:09:98:95:70:b2:d6:45: 90:91:81:a8:c8:3c:66:a1:ab:f3:15:1e:e6:d1:b0:17:65:d3: 6a:8a:99:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gIE0Ezjf7HJH5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY5ZTYwYTYtNTFjNC00YTNlLTgyMWEtMmQ3ZDQzOGJh ZDRjMB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk ZDk4YWNjNmUtZGNiMi00Y2Q3LTgyYTMtMGE2MjIyOTY1MTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun0mQrfTZHlAKlhzWZRq9C1LR+5rB0fJgx3x sNVaPCPIyK3BAqONeiRCqxW5mDZ7KhH2LUVoiw19XM++IgqDCmHP0mssrAZXgfWb w6zAtXw8Ipqv7Dw80F8xeFb/HWgDlKfmVXMtvBBqIZ76ohblSMS4z2FSO6LU5A8Z X+7Ew8M+Yaq1YpZAdqw2Ct8gmOWZPAtCrGc1j4Vm9dtj5gxHkq2m/1+OjBkvuQkY 9+GFvKjYF3C+BUR4FaMTztpyh0QwfOsYB+AAxLJhCAmLxJF//BCMKNFMluFvet2v QX5oXBfffayCnwAH6psy2RYPKlCGioy3/xDoWYq0SAL5ilvngQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCS2RRr+coGYAKFosy0GOZsExdoeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNjll NjBhNi01MWM0LTRhM2UtODIxYS0yZDdkNDM4YmFkNGMvY2YxMmU2NTgtOWRkNS0z OWYyLWJmNzAtYzBhNDgzNzVkOGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjY5ZTYwYTYtNTFjNC00YTNlLTgy MWEtMmQ3ZDQzOGJhZDRjL2Y2OWU2MGE2LTUxYzQtNGEzZS04MjFhLTJkN2Q0Mzhi YWQ0Yy5jcmwwHwYDVR0jBBgwFoAUreo9MXSqvMcug0IvZpaHEFYYkwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNjllNjBhNi01MWM0LTRhM2UtODIxYS0yZDdk NDM4YmFkNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKGeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6k9Y+1gqg5aZfY7ImqKyOBRNYlETG/JTCaE+01Jc3iBLhNzllZ4IkA plyPg50HD6kkIQ16FB9DTycGHi3mspLoiM2665QxxYKovEGoygwez2FEH+GQTCxj mQkpWVH7zlDNOIah4yEBV5KJvkdpVcFglMe8PvhG0TEuDyXe43YewVorjLTzXaA4 tFPr3e+ZqUdglqr/p1B26KOcmlSGPsx5WLAkwsE4o9NIujnpIlmfvqdZw82dKPuV CA7Xnb8aY6SfAqv3J+mqB8QDgKPES34d9avspvWj5jceqU0O4Ek3ZaYkCZiVcLLW RZCRgajIPGahq/MVHubRsBdl02qKmVE= -----END CERTIFICATE-----Generated at Mon Aug 4 14:50:07 2025 by rpki-client