$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5dedb027-2cd9-3f7d-bdf9-07d3cf599d45.roa File: 5dedb027-2cd9-3f7d-bdf9-07d3cf599d45.roa (raw, json) Hash identifier: ji72rKDYHnFZXIcj0dXgPPqgI9uGXYnA53SQ3jsOfJU= Subject key identifier: 1E:87:84:37:C0:10:CB:02:57:58:DB:DE:B4:EA:B3:5F:E7:21:20:59 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A7E7B9B2A412412C4A3690FC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5dedb027-2cd9-3f7d-bdf9-07d3cf599d45.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 108.170.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:9b:2a:41:24:12:c4:a3:69:0f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=12346e6a-f96d-49fe-9ca3-f0998f0aff6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:98:4a:59:d6:de:03:58:b8:78:5b:c5:34:32: 4e:d6:43:0f:e0:90:f9:e6:22:4d:61:f0:f6:31:57: 0d:a6:7f:0b:49:e3:41:26:29:69:89:d9:23:04:4f: 5e:b7:d6:36:92:1e:ca:0b:d8:85:ef:e8:51:9e:61: 7d:98:47:9e:08:b7:a8:4d:d0:4c:75:f0:35:a5:3c: dd:cb:0d:55:c5:3b:69:a2:83:1d:5e:bd:2f:72:ed: e4:c9:bc:74:f9:bd:99:36:49:82:42:b3:75:b4:5a: a3:59:b1:1f:e8:4e:a4:c6:ef:33:6a:ce:45:0a:cf: dd:9b:98:28:49:08:ae:93:7c:92:9d:6c:8d:97:bb: c2:25:19:0a:42:ad:ea:c8:e0:a9:a9:e8:3d:d6:3b: 3f:d3:11:9a:9d:63:51:f5:24:3c:46:93:27:da:ff: 9e:5f:09:fc:98:6d:41:59:3e:1b:e1:93:42:52:59: 6e:ff:b1:d3:6c:53:d4:4c:f7:01:cc:2a:22:9b:d4: fe:91:1a:b7:df:a4:e8:ee:8b:38:07:dd:a2:30:d2: 34:c1:fd:56:db:d3:c8:7a:53:18:78:f5:8a:8b:18: fc:be:34:80:57:6f:99:49:2d:4c:15:99:ff:fc:2e: 41:02:e8:d6:29:b6:f0:21:53:9b:86:87:ba:71:64: 1c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:87:84:37:C0:10:CB:02:57:58:DB:DE:B4:EA:B3:5F:E7:21:20:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5dedb027-2cd9-3f7d-bdf9-07d3cf599d45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:d0:86:ae:e0:71:8d:e1:02:43:01:5c:84:a2:0c:ab:c2:e7: ff:f9:a5:34:89:6e:4d:ed:d7:f4:d4:d0:47:a0:e0:7f:4e:23: 6a:38:e6:84:7e:3e:9f:37:3e:82:39:b5:37:69:0e:d0:6b:7b: b3:71:5b:38:83:38:eb:9c:29:93:b9:0b:b3:12:57:87:f6:47: b5:97:7d:88:c8:2d:dc:14:17:a0:85:4b:a6:7d:72:e6:04:f4: 80:8e:8c:6f:1a:ab:6e:b3:94:92:fe:cd:47:12:17:82:dd:1b: 9a:41:18:53:d8:4b:95:c9:09:59:74:7a:74:9a:3f:f2:6a:97: 16:6e:51:54:40:82:cc:46:f9:80:37:1a:bf:0d:b7:38:5e:60: a8:b6:b5:d0:f3:80:9a:98:ef:cf:45:30:52:1e:5c:7f:f8:b1: f2:43:9a:0f:c0:90:7a:b1:59:8e:6b:01:b6:36:86:70:46:ce: 58:db:e2:c4:f1:6c:f6:e0:02:07:15:b7:f2:34:d3:8e:25:60: c4:6b:cd:c4:01:7a:fd:b3:f6:8e:77:7f:64:8e:28:3d:be:49: 70:1f:28:72:67:5e:01:e8:d3:46:18:d2:48:d4:b2:00:b1:49: 02:47:08:14:5b:d0:3b:0a:a5:0a:76:2e:38:62:f4:0f:02:b0: e6:39:3b:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e5sqQSQSxKNpD8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MTIzNDZlNmEtZjk2ZC00OWZlLTljYTMtZjA5OThmMGFmZjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZhKWdbeA1i4eFvFNDJO1kMP4JD55iJNYfD2 MVcNpn8LSeNBJilpidkjBE9et9Y2kh7KC9iF7+hRnmF9mEeeCLeoTdBMdfA1pTzd yw1VxTtpooMdXr0vcu3kybx0+b2ZNkmCQrN1tFqjWbEf6E6kxu8zas5FCs/dm5go SQiuk3ySnWyNl7vCJRkKQq3qyOCpqeg91js/0xGanWNR9SQ8RpMn2v+eXwn8mG1B WT4b4ZNCUllu/7HTbFPUTPcBzCoim9T+kRq336To7os4B92iMNI0wf1W29PIelMY ePWKixj8vjSAV2+ZSS1MFZn//C5BAujWKbbwIVObhoe6cWQc5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6HhDfAEMsCV1jb3rTqs1/nISBZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWRlZGIwMjctMmNkOS0z ZjdkLWJkZjktMDdkM2NmNTk5ZDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKraMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/Qhq7gcY3hAkMBXISiDKvC5//5pTSJbk3t1/TU0Eeg4H9OI2o45oR+ Pp83PoI5tTdpDtBre7NxWziDOOucKZO5C7MSV4f2R7WXfYjILdwUF6CFS6Z9cuYE 9ICOjG8aq26zlJL+zUcSF4LdG5pBGFPYS5XJCVl0enSaP/JqlxZuUVRAgsxG+YA3 Gr8NtzheYKi2tdDzgJqY789FMFIeXH/4sfJDmg/AkHqxWY5rAbY2hnBGzljb4sTx bPbgAgcVt/I0044lYMRrzcQBev2z9o53f2SOKD2+SXAfKHJnXgHo00YY0kjUsgCx SQJHCBRb0DsKpQp2Ljhi9A8CsOY5O5g= -----END CERTIFICATE-----Generated at Tue Aug 5 20:12:53 2025 by rpki-client