$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6c14cdf0-c63e-3fe5-aafb-4cbd1cdc49da.roa File: 6c14cdf0-c63e-3fe5-aafb-4cbd1cdc49da.roa (raw, json) Hash identifier: N44/5+deOymLQV8lZJ0MmZhI+8HnkGX/YeG+mM8QyGA= Subject key identifier: FB:0A:F2:48:97:35:57:FB:F2:44:B5:74:54:80:1A:D1:D7:02:BB:E3 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A7E7B6B5F043ADCCCD2677560 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6c14cdf0-c63e-3fe5-aafb-4cbd1cdc49da.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 108.170.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:6b:5f:04:3a:dc:cc:d2:67:75:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=e17591a0-6f47-4ed4-bde3-4b89e1cf4bd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8f:79:b9:21:97:ba:e3:92:d2:7f:41:a2:61: 9e:01:59:1b:a7:4e:65:25:7d:db:36:1a:fa:7c:cb: 53:ad:b9:c3:3d:25:64:de:1a:a2:c3:81:62:f7:cc: f9:93:e5:7b:94:c9:e4:f1:85:9a:ae:e2:60:61:71: 92:6a:25:67:55:c9:ba:a1:f5:66:f1:c2:65:d7:be: 4f:38:11:c4:31:d1:d5:71:05:76:c1:09:e9:94:f6: 52:de:8a:81:d9:04:98:89:dd:73:3b:12:33:0d:bf: 4b:78:03:4f:d8:1d:9d:59:91:dc:85:40:c6:4a:1c: 82:6f:8f:35:3f:e9:3d:1e:4e:a9:07:f4:99:23:1b: 44:09:fa:a5:2e:48:5d:06:6d:1f:af:db:d4:84:2c: e4:a5:a4:5f:2a:df:fd:ca:67:2d:cc:26:7a:0e:69: 84:44:83:cd:33:bd:9f:8d:f2:53:af:43:80:21:40: 64:02:c5:65:cc:94:f4:0f:87:1f:85:d7:4f:39:2e: 7a:54:bb:ed:45:89:f7:4d:27:12:46:bc:a1:2c:50: ff:c8:0e:dd:2b:ef:24:62:1e:9e:2d:6f:61:18:39: cc:80:ca:b3:20:7c:c8:b4:e2:4b:6a:35:f8:0c:e1: 76:a0:03:be:88:f0:4a:b3:92:47:31:67:b3:81:21: 8b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:0A:F2:48:97:35:57:FB:F2:44:B5:74:54:80:1A:D1:D7:02:BB:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6c14cdf0-c63e-3fe5-aafb-4cbd1cdc49da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:30:4c:de:18:c5:6c:61:59:ff:79:53:e5:f6:ad:a2:04:c0: c3:b0:a1:e7:1e:96:7c:48:fb:7f:7e:a8:0f:19:c5:dd:fb:18: 0b:e4:51:a1:d7:e6:58:e2:78:14:dd:84:ac:c9:53:e8:86:46: 5d:f8:3a:b0:1e:97:58:57:2d:76:29:af:90:5d:08:7a:b9:36: ff:8a:81:df:fe:37:90:31:e8:a5:51:3a:a5:35:88:d3:2a:4c: 96:7b:76:3f:ac:79:b1:12:97:22:15:59:5d:01:16:da:ce:0a: 97:64:d5:15:66:53:04:57:ac:26:8f:e5:bf:b9:ca:27:81:56: 28:50:7e:59:49:60:63:12:36:1d:84:78:09:7b:e8:d2:96:de: c1:52:0b:02:55:ec:3d:13:7e:d6:fa:af:9a:6e:9b:d7:21:23: d4:fa:f0:83:1e:94:02:c2:d1:a8:39:b2:d4:a7:81:8f:12:e8: 7d:a9:47:4b:6f:96:32:da:60:2b:4a:c8:d4:e7:7a:4b:06:31: a5:8c:cb:93:52:03:20:c9:74:88:c1:ef:e5:ce:5f:2a:aa:84: db:37:db:bd:6f:30:39:44:56:30:31:ee:1e:48:71:ed:a4:b2: 8f:63:3c:ca:87:bf:b5:7f:d8:19:fc:8c:c6:73:36:a6:d5:e0: b4:2c:48:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e2tfBDrczNJndWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk ZTE3NTkxYTAtNmY0Ny00ZWQ0LWJkZTMtNGI4OWUxY2Y0YmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY95uSGXuuOS0n9BomGeAVkbp05lJX3bNhr6 fMtTrbnDPSVk3hqiw4Fi98z5k+V7lMnk8YWaruJgYXGSaiVnVcm6ofVm8cJl175P OBHEMdHVcQV2wQnplPZS3oqB2QSYid1zOxIzDb9LeANP2B2dWZHchUDGShyCb481 P+k9Hk6pB/SZIxtECfqlLkhdBm0fr9vUhCzkpaRfKt/9ymctzCZ6DmmERIPNM72f jfJTr0OAIUBkAsVlzJT0D4cfhddPOS56VLvtRYn3TScSRryhLFD/yA7dK+8kYh6e LW9hGDnMgMqzIHzItOJLajX4DOF2oAO+iPBKs5JHMWezgSGL6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsK8kiXNVf78kS1dFSAGtHXArvjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNmMxNGNkZjAtYzYzZS0z ZmU1LWFhZmItNGNiZDFjZGM0OWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcwTN4YxWxhWf95U+X2raIEwMOwoecelnxI+39+qA8Zxd37GAvkUaHX 5ljieBTdhKzJU+iGRl34OrAel1hXLXYpr5BdCHq5Nv+Kgd/+N5Ax6KVROqU1iNMq TJZ7dj+sebESlyIVWV0BFtrOCpdk1RVmUwRXrCaP5b+5yieBVihQfllJYGMSNh2E eAl76NKW3sFSCwJV7D0Tftb6r5pum9chI9T68IMelALC0ag5stSngY8S6H2pR0tv ljLaYCtKyNTneksGMaWMy5NSAyDJdIjB7+XOXyqqhNs3271vMDlEVjAx7h5Ice2k so9jPMqHv7V/2Bn8jMZzNqbV4LQsSHg= -----END CERTIFICATE-----Generated at Mon Aug 4 14:43:48 2025 by rpki-client