$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/55217647-19f2-3f41-9966-9baf6ed218d5.roa File: 55217647-19f2-3f41-9966-9baf6ed218d5.roa (raw, json) Hash identifier: 3bdEl4y8/WhbZmdoB9eL1dyiCdZrncgc9KUuCxMMYjs= Subject key identifier: 8A:4C:8B:03:36:96:AE:B9:27:DC:06:48:08:C9:4B:28:5D:7E:6F:77 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A7E7B89AFB98A8CDD62A87070 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/55217647-19f2-3f41-9966-9baf6ed218d5.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 108.170.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:89:af:b9:8a:8c:dd:62:a8:70:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=ff9ef684-fdf4-4470-9d61-0a8b551b3648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:70:8a:f8:1b:20:70:2f:20:0a:90:44:08:81: 07:67:29:32:d5:b6:52:30:f9:d9:2a:67:dc:3e:24: 53:d2:e5:e3:ed:15:ef:c5:36:e4:67:78:63:a1:35: e7:fb:eb:9c:7f:6d:2c:74:6d:96:57:bf:96:8f:08: 11:d2:7d:83:4b:e4:4f:30:a6:80:bc:72:11:a1:60: 2c:7f:ea:17:8e:08:6f:ca:d5:57:57:2a:b6:49:f8: 2d:df:94:69:1e:23:52:7b:bc:f1:67:c0:b3:a0:29: e2:62:b4:44:18:e2:af:f5:27:3d:db:11:db:2a:ee: 3d:27:bf:4d:ff:2a:78:77:c3:60:e8:3f:0e:11:94: fc:0f:9d:d8:02:f3:ed:43:e3:0f:ec:cb:80:bc:5f: 37:28:34:82:03:25:0a:75:f7:fd:ce:0d:11:dc:42: ca:ed:e8:ff:e7:d9:be:3a:26:97:cf:6c:c8:b4:81: d2:12:12:5e:97:ef:3b:92:b6:54:6f:8b:2e:d4:6a: 9f:11:3d:17:a0:8a:cf:78:e7:14:7c:8c:6c:62:f1: 6b:28:c2:c2:7f:c3:1e:af:f9:99:db:ef:cd:25:e9: 5b:26:e7:e9:40:ed:2b:e7:10:56:98:02:d2:6b:c3: e0:20:ff:fe:bb:f9:53:8b:7a:cf:0a:4d:56:81:6f: 43:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:4C:8B:03:36:96:AE:B9:27:DC:06:48:08:C9:4B:28:5D:7E:6F:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/55217647-19f2-3f41-9966-9baf6ed218d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:03:f3:93:9e:a2:67:eb:87:36:6d:10:9f:92:5e:b8:1b:e8: 83:84:ca:3b:44:e5:80:d4:d5:ad:ec:e4:c7:8c:e3:66:ef:70: 95:22:f7:72:2e:86:e8:2e:8f:5e:d0:9c:5d:6f:0c:38:50:fe: d8:20:d0:88:23:ca:b4:7f:5a:7a:91:cc:ec:34:bf:1f:cf:72: c1:f4:f0:d0:a4:a4:1a:10:4b:00:c0:ed:fd:e9:93:03:77:e2: 2b:87:44:15:19:c2:5b:6c:3a:87:49:8f:2b:01:53:ae:8a:ed: 80:50:1b:cf:a2:00:be:6b:d7:28:54:07:02:e2:88:84:70:82: 2f:9c:40:87:26:3d:48:3f:69:d7:14:b7:d7:e8:01:1d:9d:d2: 15:14:07:74:20:38:4a:6f:dc:00:79:94:64:73:72:f6:7c:b9: 94:05:86:e6:ea:5c:23:3f:a3:d4:16:3f:6e:6b:cc:d2:59:98: f4:21:7e:cd:f6:05:50:48:2b:74:6c:02:09:c9:52:e9:57:3d: 8b:09:7e:f4:85:04:85:dd:bb:b3:30:40:e0:e7:b7:38:18:45: 49:e8:f5:19:2f:d6:c8:0d:c7:ac:71:33:ae:a5:48:0c:b0:89: 51:cc:39:28:a1:d7:e5:f8:1c:44:69:9f:bc:9e:fc:5a:15:f4: 54:6d:32:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e4mvuYqM3WKocHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk ZmY5ZWY2ODQtZmRmNC00NDcwLTlkNjEtMGE4YjU1MWIzNjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXCK+BsgcC8gCpBECIEHZyky1bZSMPnZKmfc PiRT0uXj7RXvxTbkZ3hjoTXn++ucf20sdG2WV7+WjwgR0n2DS+RPMKaAvHIRoWAs f+oXjghvytVXVyq2Sfgt35RpHiNSe7zxZ8CzoCniYrREGOKv9Sc92xHbKu49J79N /yp4d8Ng6D8OEZT8D53YAvPtQ+MP7MuAvF83KDSCAyUKdff9zg0R3ELK7ej/59m+ OiaXz2zItIHSEhJel+87krZUb4su1GqfET0XoIrPeOcUfIxsYvFrKMLCf8Mer/mZ 2+/NJelbJufpQO0r5xBWmALSa8PgIP/+u/lTi3rPCk1WgW9D/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpMiwM2lq65J9wGSAjJSyhdfm93MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTUyMTc2NDctMTlmMi0z ZjQxLTk5NjYtOWJhZjZlZDIxOGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKreMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKwD85OeomfrhzZtEJ+SXrgb6IOEyjtE5YDU1a3s5MeM42bvcJUi93Iu huguj17QnF1vDDhQ/tgg0IgjyrR/WnqRzOw0vx/PcsH08NCkpBoQSwDA7f3pkwN3 4iuHRBUZwltsOodJjysBU66K7YBQG8+iAL5r1yhUBwLiiIRwgi+cQIcmPUg/adcU t9foAR2d0hUUB3QgOEpv3AB5lGRzcvZ8uZQFhubqXCM/o9QWP25rzNJZmPQhfs32 BVBIK3RsAgnJUulXPYsJfvSFBIXdu7MwQODntzgYRUno9Rkv1sgNx6xxM66lSAyw iVHMOSih1+X4HERpn7ye/FoV9FRtMnc= -----END CERTIFICATE-----Generated at Mon Aug 4 15:36:14 2025 by rpki-client