$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4d5fb234-4b0d-375b-8830-f6a550ba1a38.roa File: 4d5fb234-4b0d-375b-8830-f6a550ba1a38.roa (raw, json) Hash identifier: 7Zc08f1OpXrH5raML1l2JFb1QxFPpUChsBKFuz3wwug= Subject key identifier: 0E:F2:2A:83:E0:35:FC:6C:79:D2:2D:DA:CC:7F:A8:B3:76:C5:A3:27 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A7E7B89A09784E1E6B62BC500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4d5fb234-4b0d-375b-8830-f6a550ba1a38.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 108.170.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:89:a0:97:84:e1:e6:b6:2b:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=bcbe89ee-ac23-43aa-b7fc-aa2b63ddec53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d5:e5:99:63:7d:bd:8f:4f:4e:af:5d:8b:cd: 0f:d2:74:ec:e2:09:1d:c7:83:6a:96:94:40:ea:c1: 6b:47:86:83:05:24:9c:5d:9f:cc:39:17:7b:26:2c: 85:fc:6a:b8:17:32:e5:43:0b:0d:a8:c7:a7:39:c9: 6f:97:a4:f3:0f:2e:7d:ac:04:60:2b:81:07:c1:16: 16:25:a7:9a:19:80:40:fb:30:21:ed:c8:d8:f3:f4: 7c:42:87:6c:89:a4:16:0a:a8:d4:21:9d:46:3e:7b: 35:4d:b9:4b:aa:1a:7d:ab:57:c6:95:4c:54:ae:11: 17:50:06:4c:e9:f4:4a:47:d2:56:8e:18:bd:ec:d6: b2:88:72:24:39:ed:1a:4a:94:f4:8c:bc:f8:c9:67: 02:6c:3d:64:05:57:75:1c:f3:29:8c:d0:bc:3b:60: 3b:2c:e2:42:aa:22:84:21:dd:81:da:76:46:86:ac: 0f:4f:d1:07:f7:62:96:ba:5f:bb:f5:2a:ea:18:9f: f9:32:41:82:47:d5:38:64:1f:e2:fa:f3:a0:1e:b0: 65:c2:9d:7e:6f:79:0c:7d:c0:4b:57:62:49:76:ac: 28:fb:b4:5c:9e:1e:3b:5d:5a:8e:32:8a:b7:4c:f0: a9:e1:92:7c:e7:73:94:c6:b5:91:40:32:96:61:eb: 67:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F2:2A:83:E0:35:FC:6C:79:D2:2D:DA:CC:7F:A8:B3:76:C5:A3:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4d5fb234-4b0d-375b-8830-f6a550ba1a38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:53:1c:d1:3f:10:0c:12:34:3b:33:6b:9d:da:16:e6:18:f5: 82:07:42:80:84:2c:fd:d9:9b:01:7c:83:dd:69:38:ed:fb:67: d7:2e:75:ac:92:c2:59:21:d0:bd:f3:f3:36:67:6a:d0:89:5e: 78:95:03:31:2b:35:0f:c6:05:47:23:94:92:3e:47:df:a3:3c: ab:f1:7b:d1:c3:ff:c0:80:f2:0d:4e:29:6b:63:4c:13:54:cd: fc:41:96:44:a5:bd:e0:8f:d4:bd:3b:1b:56:2a:1a:06:a3:93: 6e:93:1d:66:5e:35:08:ad:55:89:14:0e:dc:cb:f6:d6:e5:c4: 43:e3:48:92:de:ef:86:9e:c1:b5:6b:4b:19:33:20:05:72:eb: 59:ab:23:85:bd:b8:b7:8c:d9:2a:71:4b:d5:16:89:1b:d8:8c: e3:8d:6d:2b:51:5a:1e:81:bb:3c:26:ef:44:af:fe:48:e4:c4: 10:ec:6a:88:0e:e2:13:62:5b:90:85:47:f1:b4:a8:a6:ac:82: f0:53:e2:01:ce:5e:36:2e:10:e3:94:c0:f8:8c:1f:62:fb:19: 7c:43:e2:61:7a:8a:4b:4e:f0:82:7f:c0:d5:f8:da:98:2c:68: 32:c6:85:5d:72:2c:f8:66:d1:7b:2c:d6:70:d3:05:b6:ff:86: 90:c8:98:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e4mgl4Th5rYrxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk YmNiZTg5ZWUtYWMyMy00M2FhLWI3ZmMtYWEyYjYzZGRlYzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtXlmWN9vY9PTq9di80P0nTs4gkdx4NqlpRA 6sFrR4aDBSScXZ/MORd7JiyF/Gq4FzLlQwsNqMenOclvl6TzDy59rARgK4EHwRYW JaeaGYBA+zAh7cjY8/R8QodsiaQWCqjUIZ1GPns1TblLqhp9q1fGlUxUrhEXUAZM 6fRKR9JWjhi97NayiHIkOe0aSpT0jLz4yWcCbD1kBVd1HPMpjNC8O2A7LOJCqiKE Id2B2nZGhqwPT9EH92KWul+79SrqGJ/5MkGCR9U4ZB/i+vOgHrBlwp1+b3kMfcBL V2JJdqwo+7Rcnh47XVqOMoq3TPCp4ZJ853OUxrWRQDKWYetngwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7yKoPgNfxsedIt2sx/qLN2xaMnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGQ1ZmIyMzQtNGIwZC0z NzViLTg4MzAtZjZhNTUwYmExYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVTHNE/EAwSNDsza53aFuYY9YIHQoCELP3ZmwF8g91pOO37Z9cudayS wlkh0L3z8zZnatCJXniVAzErNQ/GBUcjlJI+R9+jPKvxe9HD/8CA8g1OKWtjTBNU zfxBlkSlveCP1L07G1YqGgajk26THWZeNQitVYkUDtzL9tblxEPjSJLe74aewbVr SxkzIAVy61mrI4W9uLeM2SpxS9UWiRvYjOONbStRWh6Buzwm70Sv/kjkxBDsaogO 4hNiW5CFR/G0qKasgvBT4gHOXjYuEOOUwPiMH2L7GXxD4mF6iktO8IJ/wNX42pgs aDLGhV1yLPhm0Xss1nDTBbb/hpDImFw= -----END CERTIFICATE-----Generated at Mon Aug 4 16:04:45 2025 by rpki-client