$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9b0497cb-ea60-3bc1-9905-1e838d3add64.roa File: 9b0497cb-ea60-3bc1-9905-1e838d3add64.roa (raw, json) Hash identifier: tBbUWA8RfLWorjtNMor1BKw4wMy0GYvMzbCGzeWwIM4= Subject key identifier: 24:C5:14:63:DE:DD:D3:7B:EA:E3:44:5E:F7:DA:B4:66:F4:E8:38:6F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A7E7B6CD630074E37066FDC00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9b0497cb-ea60-3bc1-9905-1e838d3add64.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 108.170.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:6c:d6:30:07:4e:37:06:6f:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=535119fe-699c-4841-9de9-e3a8d03b707a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:72:ab:b4:f2:04:ac:b9:2a:fb:52:6b:18:6d: fb:fd:de:12:63:26:e1:d8:27:96:a4:72:c7:f1:7d: d1:5b:d9:43:da:d7:9c:76:db:16:b8:f8:07:98:bb: 89:ca:33:c4:83:fe:8e:bf:8d:15:eb:d8:15:f4:f7: d7:8f:c9:f2:aa:c2:7d:2e:00:a5:34:7a:31:fc:1d: 8a:8f:ae:ca:5f:72:12:88:9e:0c:d6:98:d8:b2:8b: a5:23:bd:bd:4b:51:5a:6f:da:12:6a:22:91:15:22: 0a:08:94:c4:ff:b8:31:d4:04:64:36:35:63:a2:ae: 6e:c4:62:92:60:85:6d:96:7f:4c:45:02:77:d8:ac: 44:50:e8:33:58:40:d9:a6:28:7a:b4:6f:c6:da:29: e5:ff:b4:96:c0:7c:8e:40:c8:64:42:37:db:18:2a: 76:4a:4c:5e:4c:04:28:0b:28:0c:fe:6f:f4:e9:70: 12:cc:14:29:2f:02:8c:22:58:a2:cb:24:13:e3:2f: dd:9e:5c:81:6d:86:98:8a:1d:0a:d9:ed:d7:ee:21: 52:1f:72:79:f7:bc:b6:cf:48:a6:78:14:f2:4a:29: e6:af:5a:47:c3:41:05:bc:52:48:50:20:60:b4:3d: 53:50:10:88:bd:89:0e:9a:17:69:35:51:c2:a2:a9: 41:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C5:14:63:DE:DD:D3:7B:EA:E3:44:5E:F7:DA:B4:66:F4:E8:38:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9b0497cb-ea60-3bc1-9905-1e838d3add64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:6b:15:d1:50:41:f8:27:a4:18:bb:ca:9f:c8:1b:2f:b1:54: 25:1b:83:d8:43:26:63:03:66:fa:ea:5c:40:4d:74:e9:16:e0: e1:a7:33:75:1a:34:e8:24:8a:53:55:eb:de:c5:55:22:56:6b: 63:99:0b:cb:90:57:9b:e9:3a:23:4f:b7:33:68:1a:84:32:a7: 80:27:53:20:2d:b5:05:8d:2a:19:eb:79:86:c0:ac:ac:5f:c0: a0:cd:26:53:4e:00:88:ea:76:93:b9:1e:26:b9:8f:5b:78:74: cd:02:b7:90:b8:3c:0e:ba:87:47:05:72:f5:71:78:e1:a9:62: a7:ed:c4:4e:ee:45:c7:48:68:b7:d6:93:40:bb:7e:45:69:54: 7b:4f:f1:65:fd:97:e9:fd:bd:c2:ad:e2:25:0a:7d:bf:7e:52: f9:96:9a:19:01:89:01:cf:67:84:8f:e8:ac:53:0e:77:54:7d: b6:14:d4:3e:67:cb:2d:e3:2c:ab:d2:6c:4c:47:a1:08:ee:eb: de:bd:79:93:fd:fc:34:f9:8d:0f:70:2c:af:b1:e0:fe:05:84: bd:6c:bd:1a:f1:ec:ac:24:5c:2a:84:c4:09:3b:1c:33:fc:c1: ca:2b:97:f3:0e:3c:3d:79:19:09:14:de:3c:7f:76:12:58:8d: a3:b4:8d:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e2zWMAdONwZv3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk NTM1MTE5ZmUtNjk5Yy00ODQxLTlkZTktZTNhOGQwM2I3MDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXKrtPIErLkq+1JrGG37/d4SYybh2CeWpHLH 8X3RW9lD2tecdtsWuPgHmLuJyjPEg/6Ov40V69gV9PfXj8nyqsJ9LgClNHox/B2K j67KX3ISiJ4M1pjYsoulI729S1Fab9oSaiKRFSIKCJTE/7gx1ARkNjVjoq5uxGKS YIVtln9MRQJ32KxEUOgzWEDZpih6tG/G2inl/7SWwHyOQMhkQjfbGCp2SkxeTAQo CygM/m/06XASzBQpLwKMIliiyyQT4y/dnlyBbYaYih0K2e3X7iFSH3J597y2z0im eBTySinmr1pHw0EFvFJIUCBgtD1TUBCIvYkOmhdpNVHCoqlBNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTFFGPe3dN76uNEXvfatGb06DhvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWIwNDk3Y2ItZWE2MC0z YmMxLTk5MDUtMWU4MzhkM2FkZDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5rFdFQQfgnpBi7yp/IGy+xVCUbg9hDJmMDZvrqXEBNdOkW4OGnM3Ua NOgkilNV697FVSJWa2OZC8uQV5vpOiNPtzNoGoQyp4AnUyAttQWNKhnreYbArKxf wKDNJlNOAIjqdpO5Hia5j1t4dM0Ct5C4PA66h0cFcvVxeOGpYqftxE7uRcdIaLfW k0C7fkVpVHtP8WX9l+n9vcKt4iUKfb9+UvmWmhkBiQHPZ4SP6KxTDndUfbYU1D5n yy3jLKvSbExHoQju6969eZP9/DT5jQ9wLK+x4P4FhL1svRrx7KwkXCqExAk7HDP8 wcorl/MOPD15GQkU3jx/dhJYjaO0jX8= -----END CERTIFICATE-----Generated at Mon Aug 4 14:56:14 2025 by rpki-client