$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7f0cb031-dcee-3d44-8d27-f094f67636b1.roa File: 7f0cb031-dcee-3d44-8d27-f094f67636b1.roa (raw, json) Hash identifier: Fef9sdu/b0Ia9DQ9FQs6cPjMYyUrf+gKHqTH9IkYLxo= Subject key identifier: 5A:ED:A6:E0:C8:96:49:D8:3F:16:EE:93:A8:17:49:05:CF:6F:B2:C7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A7E7B65D0887A7718E720E4CC Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7f0cb031-dcee-3d44-8d27-f094f67636b1.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 108.170.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:65:d0:88:7a:77:18:e7:20:e4:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=e90d3f7c-a87f-4af0-b4b1-174b805cec06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5d:8d:e0:dd:83:5d:59:c9:da:fc:85:6f:4c: 07:fb:f9:44:74:62:00:fe:b3:f4:ef:89:5d:5b:e3: f8:6e:78:44:49:e6:4c:04:13:da:e0:1a:50:e9:92: 13:8d:50:9b:f3:9c:96:9c:2b:cd:53:21:9b:0d:c0: f8:6d:88:32:8b:70:6b:fa:ef:3f:05:d5:1c:fd:86: 82:4c:f3:2d:87:a5:41:97:b3:da:c7:43:60:99:36: 69:3a:ed:99:c6:1a:4f:02:e5:e3:e4:9e:d0:8d:db: 3e:90:9d:b8:bd:86:7e:48:64:c7:2c:fb:fe:3c:a7: 75:9c:67:ba:ac:c6:31:57:f7:21:a4:85:8f:de:28: 93:4e:2c:69:f3:93:9b:b0:e2:40:67:50:53:2b:e6: 41:39:82:c8:c5:ef:fc:95:9f:ae:c0:80:6c:b2:c2: be:15:4b:8d:19:5c:fc:e7:66:5c:63:d6:16:0d:7f: e6:32:e3:cd:af:e4:b9:92:13:64:74:b9:20:d3:41: ce:61:a7:84:af:07:f8:1d:45:7a:9d:0a:21:91:2a: 07:2f:2a:db:5f:60:41:59:03:47:f9:c1:a6:45:04: 6d:6f:6f:55:bf:99:56:25:ee:7d:a4:a1:cc:5d:91: c2:9a:db:cb:cc:89:d0:79:22:e8:7c:b2:7e:4e:b0: a3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:ED:A6:E0:C8:96:49:D8:3F:16:EE:93:A8:17:49:05:CF:6F:B2:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7f0cb031-dcee-3d44-8d27-f094f67636b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:13:a1:3e:7b:08:1e:46:b2:e7:db:62:11:2f:40:3b:08:27: 32:0c:51:04:a6:37:9e:35:b7:4c:fa:7b:98:6d:ac:fe:87:59: 4e:a1:7e:5b:5c:d5:18:0e:51:f6:2f:10:87:f8:43:99:a1:58: 23:0f:5b:6f:0a:14:59:8b:62:ed:6d:62:cb:9c:5f:0f:55:0b: 2c:a9:f3:10:64:44:34:4a:7d:c1:f4:ed:d1:fe:7d:c5:17:6d: 50:b6:eb:db:91:a3:68:a2:66:d6:a0:d1:54:8d:ad:f5:c6:54: f1:18:22:14:6e:9b:26:4c:7c:6a:cc:ae:36:71:8a:36:4e:a5: 72:71:1d:6b:01:97:05:69:0c:28:17:8b:6c:be:f1:5e:1a:15: ca:b1:2c:03:ff:33:11:f3:c5:40:61:36:8e:03:0c:93:e2:e5: 3f:d9:f0:85:e6:d7:18:94:8e:ae:b4:34:80:26:ef:ef:94:24: 06:5f:dc:a0:85:ab:fb:84:ba:71:0f:19:9b:4b:f3:3d:b9:7d: 97:99:a6:6b:ee:b0:ef:90:b1:da:73:ef:22:a4:78:ee:b4:f1: 77:5e:6b:25:ae:94:de:12:91:27:1b:62:c6:bc:b7:8a:a9:02: 4e:ce:86:f9:47:1f:29:db:91:dd:42:dc:22:80:46:5e:ca:95: 14:7e:52:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e2XQiHp3GOcg5MwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk ZTkwZDNmN2MtYTg3Zi00YWYwLWI0YjEtMTc0YjgwNWNlYzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhl2N4N2DXVnJ2vyFb0wH+/lEdGIA/rP074ld W+P4bnhESeZMBBPa4BpQ6ZITjVCb85yWnCvNUyGbDcD4bYgyi3Br+u8/BdUc/YaC TPMth6VBl7Pax0NgmTZpOu2ZxhpPAuXj5J7Qjds+kJ24vYZ+SGTHLPv+PKd1nGe6 rMYxV/chpIWP3iiTTixp85ObsOJAZ1BTK+ZBOYLIxe/8lZ+uwIBsssK+FUuNGVz8 52ZcY9YWDX/mMuPNr+S5khNkdLkg00HOYaeErwf4HUV6nQohkSoHLyrbX2BBWQNH +cGmRQRtb29Vv5lWJe59pKHMXZHCmtvLzInQeSLofLJ+TrCj/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrtpuDIlknYPxbuk6gXSQXPb7LHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvN2YwY2IwMzEtZGNlZS0z ZDQ0LThkMjctZjA5NGY2NzYzNmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcToT57CB5GsufbYhEvQDsIJzIMUQSmN541t0z6e5htrP6HWU6hfltc 1RgOUfYvEIf4Q5mhWCMPW28KFFmLYu1tYsucXw9VCyyp8xBkRDRKfcH07dH+fcUX bVC269uRo2iiZtag0VSNrfXGVPEYIhRumyZMfGrMrjZxijZOpXJxHWsBlwVpDCgX i2y+8V4aFcqxLAP/MxHzxUBhNo4DDJPi5T/Z8IXm1xiUjq60NIAm7++UJAZf3KCF q/uEunEPGZtL8z25fZeZpmvusO+Qsdpz7yKkeO608XdeayWulN4SkScbYsa8t4qp Ak7OhvlHHynbkd1C3CKARl7KlRR+Uk4= -----END CERTIFICATE-----Generated at Mon Aug 4 15:26:41 2025 by rpki-client