$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3bb98b0e-91bf-35a7-ad88-f53ba1413c70.roa File: 3bb98b0e-91bf-35a7-ad88-f53ba1413c70.roa (raw, json) Hash identifier: q6rGONdwpO/jmmx7ezLMQ+pGSwJPTjgqdPNMIaehdRc= Subject key identifier: 14:77:E9:2C:1B:D7:C6:F9:E4:8E:15:D1:B9:3C:03:E3:9D:16:3B:4D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A7E7B9AE4DB16790AA45F2040 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3bb98b0e-91bf-35a7-ad88-f53ba1413c70.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 108.177.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:9a:e4:db:16:79:0a:a4:5f:20:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=0ddd8037-534e-43c7-a440-f91012b68217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:29:4b:13:4e:83:99:86:b8:fd:51:fe:a7:44: a6:f0:da:3e:1f:71:36:b3:3d:48:37:9d:4e:e8:7f: 3a:00:0e:76:be:f1:b4:b5:d7:c0:0a:4d:c1:cc:4f: e2:65:a0:10:73:17:2e:ab:55:a3:44:83:34:05:e3: db:89:7f:a7:ed:64:d8:a5:6e:7e:6c:87:97:9a:3e: 69:03:9a:dd:b3:dd:13:7f:10:58:ec:8a:c2:72:62: 13:7c:e2:20:13:72:fd:ac:87:aa:26:3a:cf:a1:cb: 19:5e:93:d6:8f:1e:9f:59:7d:f2:3d:1e:d2:49:3b: 66:b1:75:23:76:76:67:2e:97:f5:50:a2:3e:3e:fd: c5:88:32:ff:04:e2:22:06:44:45:3d:0e:94:12:26: 65:d3:29:f1:41:1f:40:29:2c:d6:b6:41:bd:93:b6: 69:40:50:02:44:9b:95:f6:45:52:92:ee:cd:d3:e1: 53:43:24:fe:91:27:bb:e1:45:cb:bc:55:04:b4:ee: 12:dc:01:16:d1:31:e0:bd:d8:c9:c5:b6:a7:93:1f: bf:5d:d8:93:46:90:a5:2d:a9:d7:69:0b:7f:bb:2d: 2a:eb:eb:f6:8d:53:bd:6e:8e:2d:04:6f:d7:03:a8: c9:f3:f8:89:ed:5e:75:e6:5f:b3:78:1c:19:38:e7: 05:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:77:E9:2C:1B:D7:C6:F9:E4:8E:15:D1:B9:3C:03:E3:9D:16:3B:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3bb98b0e-91bf-35a7-ad88-f53ba1413c70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:82:de:3b:cc:5e:18:ae:74:67:d0:6f:9e:03:78:34:d8:85: 5d:3c:dd:34:cf:c5:b0:12:f2:24:1e:a6:ce:eb:1a:fa:38:28: 7f:47:2c:2a:3e:e0:c9:9a:45:5f:88:67:47:22:5a:3f:fe:5a: 2f:43:91:d6:d8:06:07:a9:50:46:4d:08:da:2a:5b:ab:b6:cd: 43:7f:d6:94:03:5c:f2:cb:d2:07:20:5d:e3:54:d2:2e:73:5f: e8:14:6b:cd:25:c5:3a:7b:ec:c6:90:2c:e1:1a:50:95:31:71: 30:47:d5:69:36:59:26:58:9d:80:4c:d3:86:a7:ab:b0:47:95: 92:e8:45:43:79:dd:9d:d9:05:e9:d0:0f:54:e7:c2:c1:07:cb: fd:a4:ed:be:cc:8a:1e:2b:64:ce:72:08:02:e7:5b:9a:f0:4b: 3d:83:bf:21:7e:d6:7a:96:9f:e1:e3:b0:d1:ea:04:93:23:c1: 97:8b:68:b3:dc:0d:da:53:71:b1:98:64:8c:5e:2c:82:4f:88: e3:a3:95:cd:db:76:11:7a:ce:44:1b:87:0c:3b:e9:6b:92:fa: 40:74:b6:cc:0f:71:23:50:a3:86:ea:ed:b7:04:56:d3:3d:89: fe:c3:ca:51:5c:5c:48:aa:48:06:b0:ea:f4:79:1b:18:72:6e: 44:6e:77:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e5rk2xZ5CqRfIEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MGRkZDgwMzctNTM0ZS00M2M3LWE0NDAtZjkxMDEyYjY4MjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlilLE06DmYa4/VH+p0Sm8No+H3E2sz1IN51O 6H86AA52vvG0tdfACk3BzE/iZaAQcxcuq1WjRIM0BePbiX+n7WTYpW5+bIeXmj5p A5rds90TfxBY7IrCcmITfOIgE3L9rIeqJjrPocsZXpPWjx6fWX3yPR7SSTtmsXUj dnZnLpf1UKI+Pv3FiDL/BOIiBkRFPQ6UEiZl0ynxQR9AKSzWtkG9k7ZpQFACRJuV 9kVSku7N0+FTQyT+kSe74UXLvFUEtO4S3AEW0THgvdjJxbankx+/XdiTRpClLanX aQt/uy0q6+v2jVO9bo4tBG/XA6jJ8/iJ7V515l+zeBwZOOcF9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBR36Swb18b55I4V0bk8A+OdFjtNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2JiOThiMGUtOTFiZi0z NWE3LWFkODgtZjUzYmExNDEzYzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKOC3jvMXhiudGfQb54DeDTYhV083TTPxbAS8iQeps7rGvo4KH9HLCo+ 4MmaRV+IZ0ciWj/+Wi9DkdbYBgepUEZNCNoqW6u2zUN/1pQDXPLL0gcgXeNU0i5z X+gUa80lxTp77MaQLOEaUJUxcTBH1Wk2WSZYnYBM04anq7BHlZLoRUN53Z3ZBenQ D1TnwsEHy/2k7b7Mih4rZM5yCALnW5rwSz2DvyF+1nqWn+HjsNHqBJMjwZeLaLPc DdpTcbGYZIxeLIJPiOOjlc3bdhF6zkQbhww76WuS+kB0tswPcSNQo4bq7bcEVtM9 if7DylFcXEiqSAaw6vR5GxhybkRud/s= -----END CERTIFICATE-----Generated at Tue Aug 5 17:12:55 2025 by rpki-client