$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1294a0aa-0f27-3bf4-a037-bb87197fe260.roa File: 1294a0aa-0f27-3bf4-a037-bb87197fe260.roa (raw, json) Hash identifier: mP+O4b0s80/vFuHm+O4VETplilg4mPoBk164G/NEQHY= Subject key identifier: F6:2E:82:2B:15:1A:9C:76:BC:E2:D1:01:76:EC:F0:EC:7B:40:53:60 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A7E7B7392103108CC2B301280 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1294a0aa-0f27-3bf4-a037-bb87197fe260.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 108.170.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:73:92:10:31:08:cc:2b:30:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=7d7ce1e0-20b3-43aa-a73f-d08c684d77d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3b:be:6b:9c:a1:21:17:1b:67:09:5e:42:24: 51:fe:77:02:32:47:63:3d:5a:d0:c0:7b:df:36:09: 70:f7:25:86:34:37:61:42:9a:a1:1e:a0:6f:aa:00: 23:f9:f4:9d:f9:ee:49:62:c6:21:aa:21:c0:90:1d: 2e:a8:3d:53:02:46:76:1a:6b:f5:4c:b3:0f:96:e0: a1:9c:8e:2d:25:40:81:fe:a2:aa:5a:28:d6:22:cb: 42:8d:5c:3b:67:0f:2e:bc:ec:1c:c4:f2:54:60:72: 0c:20:eb:cc:e1:eb:45:4b:e6:0f:9e:3e:1a:75:dc: 6f:bb:a3:63:8b:fe:0a:0e:f5:82:4b:46:e8:e2:02: 48:59:c8:56:df:c2:52:24:0c:7d:fa:6f:55:6c:1f: cd:e4:a0:e4:93:ee:cf:ed:04:bf:ba:99:0b:63:4f: 0d:f8:3c:c6:94:87:4f:0a:da:84:69:2a:7c:b1:8e: 37:e0:75:0f:ab:6b:c3:b3:a1:d4:05:f6:9f:b0:fc: d3:d9:5c:33:41:21:1b:88:5b:43:c3:7b:aa:39:27: 03:43:f9:0a:34:82:1a:13:22:1e:c8:ae:a4:c4:58: d3:5b:e0:b8:d8:ce:3f:b5:58:f6:2c:01:dc:d3:59: 4e:7e:4a:c0:f0:35:57:5e:f4:9d:97:2b:a9:59:68: 45:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:2E:82:2B:15:1A:9C:76:BC:E2:D1:01:76:EC:F0:EC:7B:40:53:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1294a0aa-0f27-3bf4-a037-bb87197fe260.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:4d:a4:c3:76:e2:10:d3:ba:73:fe:a9:a5:cb:49:3f:8d:17: 08:f6:6a:43:b7:5b:0a:1a:c3:9a:e9:ce:87:b1:73:f7:35:ee: eb:6a:cc:59:b0:1b:4c:25:a3:c8:3f:23:c2:07:7f:d9:32:15: 2a:68:7f:6a:b0:07:d9:fc:f5:be:f9:4f:3d:d9:b8:a2:8b:78: fd:02:f3:55:13:c8:ee:7d:fc:50:fb:b6:af:bb:0b:77:2e:b2: 34:d0:e1:31:28:f4:da:d7:96:8e:d2:e6:e5:9a:09:60:cf:27: ca:1c:be:64:44:33:66:79:22:52:ef:1b:06:c8:36:8f:75:5c: 6b:f6:b6:59:a0:c7:50:78:c1:2f:0c:3e:49:ac:a7:e9:3d:a5: bc:da:ea:1e:e4:bd:75:cf:61:1e:5c:09:12:4a:ed:70:62:8f: ae:bd:f7:4b:6e:6e:8f:51:15:b3:f8:29:ef:ef:66:fa:dc:58: 41:68:ac:ff:91:92:cb:17:51:93:cb:a8:5a:9f:8a:69:4a:a6: f1:03:f0:c5:e3:6f:12:0a:13:97:2e:2d:e3:51:bb:b2:84:45: 4a:76:85:7d:1c:db:18:a0:db:f0:d3:fa:14:1f:b3:df:33:3b: f2:dd:4e:3f:01:54:40:56:2a:bd:27:f1:20:2f:d1:f2:f5:9f: b1:5e:b7:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e3OSEDEIzCswEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk N2Q3Y2UxZTAtMjBiMy00M2FhLWE3M2YtZDA4YzY4NGQ3N2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizu+a5yhIRcbZwleQiRR/ncCMkdjPVrQwHvf Nglw9yWGNDdhQpqhHqBvqgAj+fSd+e5JYsYhqiHAkB0uqD1TAkZ2Gmv1TLMPluCh nI4tJUCB/qKqWijWIstCjVw7Zw8uvOwcxPJUYHIMIOvM4etFS+YPnj4addxvu6Nj i/4KDvWCS0bo4gJIWchW38JSJAx9+m9VbB/N5KDkk+7P7QS/upkLY08N+DzGlIdP CtqEaSp8sY434HUPq2vDs6HUBfafsPzT2VwzQSEbiFtDw3uqOScDQ/kKNIIaEyIe yK6kxFjTW+C42M4/tVj2LAHc01lOfkrA8DVXXvSdlyupWWhFQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPYugisVGpx2vOLRAXbs8Ox7QFNgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTI5NGEwYWEtMGYyNy0z YmY0LWEwMzctYmI4NzE5N2ZlMjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1NpMN24hDTunP+qaXLST+NFwj2akO3Wwoaw5rpzoexc/c17utqzFmw G0wlo8g/I8IHf9kyFSpof2qwB9n89b75Tz3ZuKKLeP0C81UTyO59/FD7tq+7C3cu sjTQ4TEo9NrXlo7S5uWaCWDPJ8ocvmREM2Z5IlLvGwbINo91XGv2tlmgx1B4wS8M Pkmsp+k9pbza6h7kvXXPYR5cCRJK7XBij66990tubo9RFbP4Ke/vZvrcWEForP+R kssXUZPLqFqfimlKpvED8MXjbxIKE5cuLeNRu7KERUp2hX0c2xig2/DT+hQfs98z O/LdTj8BVEBWKr0n8SAv0fL1n7Fet1w= -----END CERTIFICATE-----Generated at Tue Aug 5 17:09:59 2025 by rpki-client