$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10b9f552-b9a4-3676-bead-6e1a7bef29bc.roa File: 10b9f552-b9a4-3676-bead-6e1a7bef29bc.roa (raw, json) Hash identifier: DMYNXZmWm+WMgNBo++9eNURyaFuBe7kE6+5KYX4InBA= Subject key identifier: B4:AB:AD:15:FD:58:46:C9:90:83:66:92:47:E5:9E:66:C4:76:3C:B7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A7E7B7063D4743BBD0E74E380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10b9f552-b9a4-3676-bead-6e1a7bef29bc.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 108.170.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:70:63:d4:74:3b:bd:0e:74:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=ba784922-869c-404d-a2b2-764e0abfcc37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:59:df:7e:ca:d4:d7:54:ae:d3:03:4b:dd:11: 0f:5e:c1:53:a5:42:86:46:61:3d:eb:a8:7f:ab:29: 00:b9:3e:5e:4e:e8:20:9a:39:61:13:c2:70:24:04: 61:d8:a8:75:79:cb:35:8f:0c:97:a9:fe:de:f0:9c: 02:9c:06:eb:68:48:7e:2d:dc:75:74:83:9f:5d:4c: 12:35:70:b8:e6:50:bc:11:7b:b1:43:40:a8:f5:97: fd:f0:14:52:71:a4:2a:a0:ca:49:94:05:b5:c9:bc: 42:52:df:1f:d5:69:63:5c:3f:c0:a9:01:eb:36:0e: de:02:c8:7f:6d:a5:62:ab:83:89:43:c7:45:73:60: 63:5a:71:86:52:47:f9:8b:fa:24:46:40:0c:fd:fb: 7e:d7:f6:3e:18:ea:70:a3:b0:a2:6b:ce:b3:da:c9: d5:f2:5b:3e:8a:df:f2:a2:13:c6:be:6c:8a:b5:94: 1c:fa:ab:e0:7b:18:4e:d0:19:ef:2d:fb:f9:da:c5: 55:8a:63:21:63:5b:e8:e2:13:a0:49:a2:76:4f:8f: 58:33:4f:96:c1:37:8a:0e:2f:5d:c3:43:86:aa:50: bb:a5:9a:bc:03:1a:e1:2e:f6:e5:71:60:fa:f1:d9: 52:6b:a3:47:1a:dc:57:b0:e8:a2:dd:0d:25:ac:4c: 02:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:AB:AD:15:FD:58:46:C9:90:83:66:92:47:E5:9E:66:C4:76:3C:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10b9f552-b9a4-3676-bead-6e1a7bef29bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:2c:67:bc:56:a0:25:3c:63:50:5a:e5:eb:9b:dd:23:62:b3: 2d:a1:38:d5:d4:cf:54:40:d4:4b:fc:94:a3:91:42:c7:de:47: 4d:f5:f2:a4:65:e1:6b:b8:38:89:83:94:e1:96:a3:f0:49:3f: 3e:09:0d:97:fe:99:66:70:37:09:27:d7:d9:f7:31:11:c6:7e: c8:d1:fc:48:2f:4f:b7:9d:2c:d3:7f:2e:65:73:fe:fe:d9:19: 05:03:d4:a5:29:d9:a2:f5:cc:3c:b0:51:31:1d:4b:b9:b1:05: be:70:b9:e5:d8:26:b4:77:8b:5a:50:08:97:c7:71:b8:15:fb: 16:93:22:49:63:e0:bb:45:7a:94:23:31:f7:de:e9:7a:f8:ff: 84:95:9e:f9:bd:0c:57:c5:34:d4:6e:a0:1e:88:a2:b0:55:51: 72:d2:7c:74:f0:19:49:48:5f:42:d6:f0:0d:21:1a:10:09:04: 76:2d:fc:1b:8f:b0:e8:08:18:b8:85:7f:c4:3a:28:66:ae:7b: 8c:e3:38:d3:85:b7:1b:37:0c:8c:51:ff:2b:d4:96:11:67:88: a6:1e:69:1c:23:97:5d:63:59:af:f5:45:a0:c3:3b:3e:cc:6c: 4f:61:f3:02:43:34:f0:28:c8:75:cc:14:f1:cf:79:14:c2:02: 50:45:0f:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e3Bj1HQ7vQ5044AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk YmE3ODQ5MjItODY5Yy00MDRkLWEyYjItNzY0ZTBhYmZjYzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilnffsrU11Su0wNL3REPXsFTpUKGRmE966h/ qykAuT5eTuggmjlhE8JwJARh2Kh1ecs1jwyXqf7e8JwCnAbraEh+Ldx1dIOfXUwS NXC45lC8EXuxQ0Co9Zf98BRScaQqoMpJlAW1ybxCUt8f1WljXD/AqQHrNg7eAsh/ baViq4OJQ8dFc2BjWnGGUkf5i/okRkAM/ft+1/Y+GOpwo7Cia86z2snV8ls+it/y ohPGvmyKtZQc+qvgexhO0BnvLfv52sVVimMhY1vo4hOgSaJ2T49YM0+WwTeKDi9d w0OGqlC7pZq8AxrhLvblcWD68dlSa6NHGtxXsOii3Q0lrEwCuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSrrRX9WEbJkINmkkflnmbEdjy3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTBiOWY1NTItYjlhNC0z Njc2LWJlYWQtNmUxYTdiZWYyOWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMsZ7xWoCU8Y1Ba5eub3SNisy2hONXUz1RA1Ev8lKORQsfeR0318qRl 4Wu4OImDlOGWo/BJPz4JDZf+mWZwNwkn19n3MRHGfsjR/EgvT7edLNN/LmVz/v7Z GQUD1KUp2aL1zDywUTEdS7mxBb5wueXYJrR3i1pQCJfHcbgV+xaTIklj4LtFepQj Mffe6Xr4/4SVnvm9DFfFNNRuoB6IorBVUXLSfHTwGUlIX0LW8A0hGhAJBHYt/BuP sOgIGLiFf8Q6KGaue4zjONOFtxs3DIxR/yvUlhFniKYeaRwjl11jWa/1RaDDOz7M bE9h8wJDNPAoyHXMFPHPeRTCAlBFD4k= -----END CERTIFICATE-----Generated at Mon Aug 4 15:00:14 2025 by rpki-client