$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ec6f085-b2e5-3605-baa2-4f1c4fc3dea4.roa File: 4ec6f085-b2e5-3605-baa2-4f1c4fc3dea4.roa (raw, json) Hash identifier: AtcE7OEsSrP5wbInSCWpMYWRrv8xxGU9RnMdxzQsVeU= Subject key identifier: 7C:D8:51:3E:66:5A:95:C2:AC:3E:4B:E3:91:CC:12:31:AC:F6:25:56 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A7E7B676AF3ABEBD2D4492780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ec6f085-b2e5-3605-baa2-4f1c4fc3dea4.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 108.177.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:67:6a:f3:ab:eb:d2:d4:49:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=115a0441-603a-479c-8704-adc11a47945a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:39:5b:21:4d:bc:8f:a2:d5:e0:00:e8:8a:bb: 41:77:cf:37:5e:7c:7a:eb:8b:2a:aa:6c:5f:7c:ac: ea:00:16:d9:99:cb:38:ce:f5:15:f3:fc:ee:b6:e8: 93:f9:53:b0:2d:5f:ac:43:e7:40:20:78:4c:97:53: ca:b0:4d:50:0a:97:c5:b7:6a:1a:e7:89:38:38:f5: cb:09:9a:41:3b:f7:70:80:b2:a4:39:70:17:bd:e8: 94:10:12:c1:6f:27:ac:61:59:3f:84:80:9d:ee:38: 74:fe:c8:e0:9d:e4:b9:b2:c7:59:dc:aa:ee:34:85: b0:4c:97:95:cd:8f:e4:61:a1:58:be:70:a9:1b:a9: c1:34:db:8e:1a:bf:2c:3c:83:b4:ef:e5:a8:24:fa: ad:7d:55:d5:ae:14:fd:98:26:62:2d:9b:13:44:af: 73:15:99:dc:7f:33:8b:6f:51:4a:a0:cb:de:68:c8: 55:54:1e:b9:45:ad:2d:40:66:f2:5a:9b:93:d7:da: 5b:5d:a4:60:06:98:b0:97:af:33:4e:fb:b7:95:82: 63:a1:d2:81:fd:50:56:60:b7:7e:0b:a1:66:3f:74: 88:a5:04:92:67:9e:b1:b1:ea:5e:68:6d:a6:a5:3d: 8f:67:8e:92:0e:57:d3:94:93:36:52:fd:6f:80:7f: f8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D8:51:3E:66:5A:95:C2:AC:3E:4B:E3:91:CC:12:31:AC:F6:25:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4ec6f085-b2e5-3605-baa2-4f1c4fc3dea4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:f5:ed:38:8e:0c:df:e1:bf:27:4e:85:02:ef:02:83:a4:77: 68:fd:6c:9d:8e:23:90:5a:53:43:ee:64:91:55:1f:56:87:f5: a5:f9:7b:ef:dc:51:fc:4d:58:4e:d1:d5:4c:07:97:b3:77:93: bd:69:b8:7f:c1:60:49:27:10:ca:58:fc:bd:d2:d0:ab:5d:49: 00:57:cc:ff:5e:16:24:fa:5c:ee:80:29:e0:fe:60:01:c6:c3: 9c:55:f1:f1:b2:ce:0d:e9:2a:50:76:54:fa:16:1f:a6:a5:c7: d9:79:62:27:7c:a8:3a:a9:74:2f:aa:da:e1:d8:cc:f1:81:02: 63:9a:55:1b:a4:54:6c:03:79:f5:b5:5d:98:dd:05:d9:d0:10: 2f:1c:a2:fa:33:e2:24:54:fb:81:df:22:90:63:df:23:13:8d: 26:49:72:42:1e:e0:9c:fe:14:dd:e6:55:3b:06:64:29:7e:09: bf:33:62:07:ee:70:62:40:d8:37:a8:6d:8b:60:37:99:73:ff: fa:e6:98:67:e6:81:a2:7e:05:97:88:ba:2c:5b:ba:62:af:3a: dd:13:bc:47:6e:b2:f3:cd:b4:38:dd:1e:d6:69:9a:18:c0:aa: be:70:2c:5e:6b:5d:32:80:7f:82:60:99:2b:9f:25:aa:46:c2: 51:1b:55:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e2dq86vr0tRJJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MTE1YTA0NDEtNjAzYS00NzljLTg3MDQtYWRjMTFhNDc5NDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDlbIU28j6LV4ADoirtBd883Xnx664sqqmxf fKzqABbZmcs4zvUV8/zutuiT+VOwLV+sQ+dAIHhMl1PKsE1QCpfFt2oa54k4OPXL CZpBO/dwgLKkOXAXveiUEBLBbyesYVk/hICd7jh0/sjgneS5ssdZ3KruNIWwTJeV zY/kYaFYvnCpG6nBNNuOGr8sPIO07+WoJPqtfVXVrhT9mCZiLZsTRK9zFZncfzOL b1FKoMveaMhVVB65Ra0tQGbyWpuT19pbXaRgBpiwl68zTvu3lYJjodKB/VBWYLd+ C6FmP3SIpQSSZ56xsepeaG2mpT2PZ46SDlfTlJM2Uv1vgH/4awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzYUT5mWpXCrD5L45HMEjGs9iVWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGVjNmYwODUtYjJlNS0z NjA1LWJhYTItNGYxYzRmYzNkZWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE717TiODN/hvydOhQLvAoOkd2j9bJ2OI5BaU0PuZJFVH1aH9aX5e+/c UfxNWE7R1UwHl7N3k71puH/BYEknEMpY/L3S0KtdSQBXzP9eFiT6XO6AKeD+YAHG w5xV8fGyzg3pKlB2VPoWH6alx9l5Yid8qDqpdC+q2uHYzPGBAmOaVRukVGwDefW1 XZjdBdnQEC8covoz4iRU+4HfIpBj3yMTjSZJckIe4Jz+FN3mVTsGZCl+Cb8zYgfu cGJA2DeobYtgN5lz//rmmGfmgaJ+BZeIuixbumKvOt0TvEdusvPNtDjdHtZpmhjA qr5wLF5rXTKAf4JgmSufJapGwlEbVXQ= -----END CERTIFICATE-----Generated at Mon Aug 4 15:06:22 2025 by rpki-client