$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5369fcdb-823a-3f7a-aca5-1cabe01f1e33.roa File: 5369fcdb-823a-3f7a-aca5-1cabe01f1e33.roa (raw, json) Hash identifier: 9ViAp6EpI6cg+WMXImnSrlnsM2BCW1a12p5cskeQRQs= Subject key identifier: 9C:6C:04:49:92:59:B2:3D:12:79:95:32:4B:53:28:E1:04:AB:F4:70 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A7E7B924E15576C8BA4106540 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5369fcdb-823a-3f7a-aca5-1cabe01f1e33.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 108.177.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:92:4e:15:57:6c:8b:a4:10:65:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=b6fb242c-0e31-4bc0-9a2b-d006675840c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:31:81:47:df:6c:c1:8d:57:36:75:c8:56:db: 7c:05:47:72:70:18:ce:2b:5b:75:be:35:ed:4c:d6: c7:ac:4e:5a:2d:96:a3:1b:2f:a6:5a:ae:d3:c1:fe: 0d:7e:a2:49:47:7b:26:da:a0:95:7c:52:22:b2:84: 19:55:08:9a:ff:a7:65:49:fe:ba:18:05:74:bb:d9: 09:61:f5:bf:a1:f3:3d:11:87:4e:3b:e2:af:49:48: ab:19:8d:0d:1a:71:62:03:9b:58:f2:25:8d:7a:37: 8a:ec:45:eb:65:1d:7f:30:63:f5:71:b1:86:46:ec: 7c:2a:08:f4:9c:fa:ad:23:43:b7:ac:8b:8a:76:96: f3:bd:2e:49:b3:c7:ce:a9:9e:44:66:4c:2b:44:e8: e1:99:10:f7:b4:73:24:4f:6e:e1:b8:86:9e:b4:c7: 45:68:d3:50:45:2c:28:0e:41:22:e1:11:52:62:91: 2a:43:9d:e0:a2:00:9d:9f:fb:ad:e0:ff:eb:5d:f2: a2:1d:00:a0:9d:11:2e:17:c7:e7:05:79:d1:89:ac: b1:b8:61:0e:61:ae:34:06:7f:3b:ba:50:53:00:c0: 7a:97:f6:af:36:52:c8:4e:80:73:ca:7c:84:53:cf: ce:f9:60:5c:b0:53:ef:96:85:92:97:7a:9a:f4:cf: d7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:6C:04:49:92:59:B2:3D:12:79:95:32:4B:53:28:E1:04:AB:F4:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5369fcdb-823a-3f7a-aca5-1cabe01f1e33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:3c:4a:9b:43:51:18:cd:72:6f:1e:08:08:68:4c:23:4e:9a: 88:54:c8:ca:17:5e:07:35:53:f5:ff:c2:e0:f2:6b:f0:d3:10: 58:93:79:5a:b3:79:d0:2e:7e:45:8b:4b:09:9b:d0:ae:04:c4: ba:df:09:91:ae:47:8c:ce:50:ef:e7:14:f2:89:c0:e5:8a:83: d6:95:39:92:dd:6a:a6:b5:52:77:52:78:0c:e5:be:ff:c0:44: 61:b3:9c:f7:09:20:95:d1:61:b3:5a:dd:bd:cf:c1:77:fe:1a: f3:b6:37:f8:44:df:59:b4:05:b9:25:a1:c7:a2:0a:94:06:df: ad:ea:75:0c:f6:09:f1:9b:a6:37:88:7f:cb:82:23:42:f6:6a: 58:36:28:75:33:7f:c4:ec:6c:df:6f:62:d5:2c:a8:6c:e7:0c: 6e:56:89:dc:fa:77:79:d1:0d:82:61:dd:fc:33:b8:e8:0f:cf: d7:7c:27:fe:53:41:90:12:9f:74:84:96:b0:0d:ff:fe:ac:53: ec:6e:0f:ec:11:64:94:55:07:bd:8b:07:40:57:64:d5:70:4b: 09:1f:26:8f:e5:7b:c4:ca:22:12:80:2f:81:c6:bb:2d:94:4f: 33:9a:50:d2:5f:e0:cb:0d:c8:e3:44:2b:b9:ea:ef:44:0a:af: e7:bd:36:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e5JOFVdsi6QQZUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk YjZmYjI0MmMtMGUzMS00YmMwLTlhMmItZDAwNjY3NTg0MGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTGBR99swY1XNnXIVtt8BUdycBjOK1t1vjXt TNbHrE5aLZajGy+mWq7Twf4NfqJJR3sm2qCVfFIisoQZVQia/6dlSf66GAV0u9kJ YfW/ofM9EYdOO+KvSUirGY0NGnFiA5tY8iWNejeK7EXrZR1/MGP1cbGGRux8Kgj0 nPqtI0O3rIuKdpbzvS5Js8fOqZ5EZkwrROjhmRD3tHMkT27huIaetMdFaNNQRSwo DkEi4RFSYpEqQ53gogCdn/ut4P/rXfKiHQCgnREuF8fnBXnRiayxuGEOYa40Bn87 ulBTAMB6l/avNlLIToBzynyEU8/O+WBcsFPvloWSl3qa9M/XzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxsBEmSWbI9EnmVMktTKOEEq/RwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTM2OWZjZGItODIzYS0z ZjdhLWFjYTUtMWNhYmUwMWYxZTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLFhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHw8SptDURjNcm8eCAhoTCNOmohUyMoXXgc1U/X/wuDya/DTEFiTeVqz edAufkWLSwmb0K4ExLrfCZGuR4zOUO/nFPKJwOWKg9aVOZLdaqa1UndSeAzlvv/A RGGznPcJIJXRYbNa3b3PwXf+GvO2N/hE31m0BbkloceiCpQG363qdQz2CfGbpjeI f8uCI0L2alg2KHUzf8TsbN9vYtUsqGznDG5Widz6d3nRDYJh3fwzuOgPz9d8J/5T QZASn3SElrAN//6sU+xuD+wRZJRVB72LB0BXZNVwSwkfJo/le8TKIhKAL4HGuy2U TzOaUNJf4MsNyONEK7nq70QKr+e9NgQ= -----END CERTIFICATE-----Generated at Mon Aug 4 14:46:00 2025 by rpki-client