$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/81e132f5-7153-3263-a573-22214c133437.roa File: 81e132f5-7153-3263-a573-22214c133437.roa (raw, json) Hash identifier: bh1IOvfXTB+GNFz/cb7g4UBi8NrhDAnguIufEwuEjYo= Subject key identifier: AC:BD:B3:C1:74:9D:41:42:06:7C:D8:7F:BD:8E:D5:43:07:6F:64:AD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A7E7B75FD265FE09241959200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/81e132f5-7153-3263-a573-22214c133437.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 108.170.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:75:fd:26:5f:e0:92:41:95:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=361cddec-65a1-4f23-bc9e-33a0fe13d4f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7b:8c:e0:97:c7:a7:7b:a1:1e:fa:42:a1:45: 53:db:5d:f1:d1:eb:3e:5c:81:80:8b:01:3a:ff:11: 90:e0:c2:60:2b:57:73:a9:4f:f6:18:e5:c6:9a:c0: 89:e9:ab:3d:0f:30:25:2c:63:a6:06:2f:c3:76:8c: 87:22:88:97:40:77:df:cb:cb:d0:eb:bb:23:3c:2f: 90:3a:7f:a3:07:a8:82:dd:f3:c3:c6:9e:10:58:c6: 05:ce:d4:50:9f:95:59:a6:94:e5:68:6d:fb:93:9d: b6:57:7e:23:29:b8:4d:6b:06:f0:ec:42:91:7c:82: 8a:3e:9f:06:6c:9c:e7:60:17:49:e5:6f:4f:fa:bc: 18:74:61:ed:4b:e0:e4:c5:3b:12:fe:30:8b:af:3c: f7:7c:67:66:c6:84:24:ef:1e:0e:0a:de:c3:a6:e6: 8f:51:64:0e:26:6b:62:f1:d4:fd:c2:d2:58:c1:7f: e8:e2:29:f8:cd:81:3f:fb:5f:0b:b2:92:62:ad:36: 1e:80:4c:e1:0d:2c:a8:ed:63:f2:4b:96:99:ac:43: 6e:22:1b:f7:fd:eb:f7:3f:d5:ba:01:40:5d:5c:61: 61:01:58:b5:42:95:34:93:34:e3:48:f1:97:12:29: a7:17:bc:5d:7d:d3:62:b0:67:97:e7:a5:d6:db:b4: d8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BD:B3:C1:74:9D:41:42:06:7C:D8:7F:BD:8E:D5:43:07:6F:64:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/81e132f5-7153-3263-a573-22214c133437.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:ac:2f:d8:84:91:ad:6b:e9:71:b5:31:06:ca:80:84:80:e1: 45:2e:6a:80:98:b4:09:ad:1e:ee:cf:b3:9f:09:60:9c:10:c1: e4:71:9f:0b:2a:18:91:73:54:39:52:bf:42:2c:05:08:c9:41: 19:43:b0:b7:2c:09:78:82:66:47:16:46:e9:4a:45:c0:1f:af: 94:75:85:2a:ed:0b:a5:6f:c3:41:12:e5:b1:62:82:e9:ee:76: 85:e0:96:af:0d:ef:8a:e2:61:3e:3c:90:26:ec:83:68:db:95: b4:52:7a:bb:05:92:f9:87:74:ab:e0:38:b3:68:28:99:c1:4b: 07:e7:63:ec:71:dd:12:77:0e:1b:e0:e1:b4:48:7d:8b:2f:76: 2a:cd:dd:a8:26:c7:e5:38:86:a5:78:2e:39:7f:b9:8a:47:64: e7:06:b2:14:3f:1e:d9:d0:44:76:2d:44:6e:97:c1:61:63:0c: 76:53:a4:68:c7:d8:fa:d7:6f:13:9a:18:4f:be:81:b8:c5:9a: 95:0b:9b:b8:37:0a:b9:fa:92:b8:d9:48:17:2e:05:45:16:74: ca:95:a8:83:06:69:65:c4:78:a5:17:d9:4f:f4:b6:0e:73:53: 94:75:24:0e:c6:ea:2c:72:75:c4:9c:49:70:bf:fa:44:60:89: 6a:fe:31:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e3X9Jl/gkkGVkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MzYxY2RkZWMtNjVhMS00ZjIzLWJjOWUtMzNhMGZlMTNkNGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXuM4JfHp3uhHvpCoUVT213x0es+XIGAiwE6 /xGQ4MJgK1dzqU/2GOXGmsCJ6as9DzAlLGOmBi/DdoyHIoiXQHffy8vQ67sjPC+Q On+jB6iC3fPDxp4QWMYFztRQn5VZppTlaG37k522V34jKbhNawbw7EKRfIKKPp8G bJznYBdJ5W9P+rwYdGHtS+DkxTsS/jCLrzz3fGdmxoQk7x4OCt7DpuaPUWQOJmti 8dT9wtJYwX/o4in4zYE/+18LspJirTYegEzhDSyo7WPyS5aZrENuIhv3/ev3P9W6 AUBdXGFhAVi1QpU0kzTjSPGXEimnF7xdfdNisGeX56XW27TYUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKy9s8F0nUFCBnzYf72O1UMHb2StMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODFlMTMyZjUtNzE1My0z MjYzLWE1NzMtMjIyMTRjMTMzNDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOsL9iEka1r6XG1MQbKgISA4UUuaoCYtAmtHu7Ps58JYJwQweRxnwsq GJFzVDlSv0IsBQjJQRlDsLcsCXiCZkcWRulKRcAfr5R1hSrtC6Vvw0ES5bFigunu doXglq8N74riYT48kCbsg2jblbRSersFkvmHdKvgOLNoKJnBSwfnY+xx3RJ3Dhvg 4bRIfYsvdirN3agmx+U4hqV4Ljl/uYpHZOcGshQ/HtnQRHYtRG6XwWFjDHZTpGjH 2PrXbxOaGE++gbjFmpULm7g3Crn6krjZSBcuBUUWdMqVqIMGaWXEeKUX2U/0tg5z U5R1JA7G6ixydcScSXC/+kRgiWr+Mew= -----END CERTIFICATE-----Generated at Wed Aug 6 10:17:14 2025 by rpki-client