$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5b74a01c-55b7-32bf-bbe6-e6d17c1c67c0.roa File: 5b74a01c-55b7-32bf-bbe6-e6d17c1c67c0.roa (raw, json) Hash identifier: LXVGDswnegD1erssL3Cf/Ti7zOckh7NYlmbRxhEtPzM= Subject key identifier: DD:82:A5:12:10:A0:FD:BB:D3:41:54:4D:67:D2:50:F1:CD:98:D1:74 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A7E7B9DCEC999366B97107500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5b74a01c-55b7-32bf-bbe6-e6d17c1c67c0.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 108.170.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:9d:ce:c9:99:36:6b:97:10:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=de58e7a8-63bc-4ade-aed7-babc60fe0e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:0e:24:ec:04:82:84:70:79:41:79:0b:fb:c4: 25:dc:85:65:b1:d6:e0:74:65:d9:3b:6b:30:ce:45: 98:8e:6b:09:f2:e7:67:50:90:84:5d:bc:0b:2d:5e: 92:62:05:58:4d:d5:4a:03:e8:2c:83:f5:68:20:09: 7e:51:c2:a1:93:ba:f2:ca:3e:dc:b1:9f:24:4f:96: bd:50:a6:33:4d:b9:61:1f:66:95:bc:a3:81:32:9a: 63:7b:26:24:f0:b0:4b:d5:78:0e:a5:76:3d:54:19: c7:3f:6c:d5:ea:8b:f0:5f:7b:82:c2:fb:e6:3a:63: 8a:5d:c8:06:95:bf:aa:26:d8:92:a8:2a:f0:b9:e3: cf:ba:c6:4a:f7:76:56:04:5f:d9:23:0f:93:c1:0a: 3f:0c:e4:1f:26:cb:8d:fb:74:99:15:0b:06:5d:7a: 7e:53:6a:d5:1b:46:5f:4f:47:de:21:e3:76:aa:ae: 2c:62:dd:25:0d:49:c6:af:36:96:2e:e7:78:43:d9: d8:2f:c5:f9:87:64:26:57:42:d6:8b:2d:7f:78:48: 19:4a:8b:17:ff:73:ca:6e:4e:eb:b8:2a:27:c2:84: 80:e6:ad:84:f0:9d:ea:73:5d:43:92:40:ea:4b:78: 1a:c2:87:29:0c:03:e7:d3:27:d9:d6:eb:09:b4:e9: f0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:82:A5:12:10:A0:FD:BB:D3:41:54:4D:67:D2:50:F1:CD:98:D1:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5b74a01c-55b7-32bf-bbe6-e6d17c1c67c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:2b:83:35:20:d4:9a:4f:b9:47:67:a6:89:61:01:8e:9f:c1: bd:0b:f7:af:fc:f4:52:27:df:7a:77:c0:7c:01:2a:9a:5e:ac: 41:50:cf:bd:a3:dc:fc:06:dd:17:ba:a1:41:84:36:d7:c6:bf: c4:ce:f8:19:d1:57:ff:b7:e1:41:17:7e:37:02:aa:8f:5a:bc: 49:d2:fa:a8:5d:7b:17:53:ac:1c:47:ff:66:19:d0:ea:35:c2: 95:b5:cc:c1:96:7d:88:0a:6e:db:fe:3f:63:45:4b:10:27:45: ff:db:57:97:a3:8e:1a:36:0e:62:b7:45:5f:a9:39:4f:79:54: e2:ff:12:0c:e4:db:83:f0:4a:d8:c5:63:4b:b4:ca:78:32:b6: aa:36:92:95:82:74:b8:6f:6a:61:fa:d9:7d:58:7f:0f:46:b0: f8:d0:ee:a5:93:40:d8:a2:ae:2e:13:f2:f8:ec:8a:e4:65:74: 13:df:1e:18:e8:9e:8d:b8:9a:fc:df:fd:73:55:03:07:1b:5a: 35:89:ba:63:84:11:f4:6e:6d:d3:e8:4e:3a:cf:82:be:ef:dc: e4:8e:b3:a8:b5:ac:e2:17:61:58:a9:62:cc:d3:fc:51:25:0f: 01:18:e7:3e:39:f2:b0:10:d3:6f:aa:92:28:2d:ce:e2:35:70: 20:e7:79:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e53OyZk2a5cQdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk ZGU1OGU3YTgtNjNiYy00YWRlLWFlZDctYmFiYzYwZmUwZTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Q4k7ASChHB5QXkL+8Ql3IVlsdbgdGXZO2sw zkWYjmsJ8udnUJCEXbwLLV6SYgVYTdVKA+gsg/VoIAl+UcKhk7ryyj7csZ8kT5a9 UKYzTblhH2aVvKOBMppjeyYk8LBL1XgOpXY9VBnHP2zV6ovwX3uCwvvmOmOKXcgG lb+qJtiSqCrwuePPusZK93ZWBF/ZIw+TwQo/DOQfJsuN+3SZFQsGXXp+U2rVG0Zf T0feIeN2qq4sYt0lDUnGrzaWLud4Q9nYL8X5h2QmV0LWiy1/eEgZSosX/3PKbk7r uConwoSA5q2E8J3qc11DkkDqS3gawocpDAPn0yfZ1usJtOnwewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2CpRIQoP2700FUTWfSUPHNmNF0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWI3NGEwMWMtNTViNy0z MmJmLWJiZTYtZTZkMTdjMWM2N2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8rgzUg1JpPuUdnpolhAY6fwb0L96/89FIn33p3wHwBKpperEFQz72j 3PwG3Re6oUGENtfGv8TO+BnRV/+34UEXfjcCqo9avEnS+qhdexdTrBxH/2YZ0Oo1 wpW1zMGWfYgKbtv+P2NFSxAnRf/bV5ejjho2DmK3RV+pOU95VOL/Egzk24PwStjF Y0u0yngytqo2kpWCdLhvamH62X1Yfw9GsPjQ7qWTQNiiri4T8vjsiuRldBPfHhjo no24mvzf/XNVAwcbWjWJumOEEfRubdPoTjrPgr7v3OSOs6i1rOIXYVipYszT/FEl DwEY5z458rAQ02+qkigtzuI1cCDneek= -----END CERTIFICATE-----Generated at Mon Aug 4 14:10:47 2025 by rpki-client