$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9b5cfa33-fc05-34aa-b1b9-bfe8a7d0e17e.roa File: 9b5cfa33-fc05-34aa-b1b9-bfe8a7d0e17e.roa (raw, json) Hash identifier: N8xjqhXuaktkihodasQYB6Xm/M1CCTYtE/iyF+Bo8ZM= Subject key identifier: 81:5B:9A:63:38:5D:F4:7B:28:EA:7F:BF:98:95:E2:EE:12:29:39:E5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A7E7B9AD6C1C8539C9F7AA780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9b5cfa33-fc05-34aa-b1b9-bfe8a7d0e17e.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 108.177.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:9a:d6:c1:c8:53:9c:9f:7a:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=f67f2c0c-5a5a-4aff-84ab-1f260808638b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e1:22:ed:cf:45:f1:11:bb:34:3d:ad:92:00: 6a:15:c0:5d:7a:f4:1d:89:6b:17:33:73:27:6a:75: c0:ea:6a:09:32:1a:1a:50:0f:65:70:4c:4d:ae:fc: 24:3c:66:80:50:6e:c0:f1:e1:88:ee:38:00:76:4a: 75:fb:9d:b1:80:e9:99:79:43:0e:c7:32:81:d2:04: 57:0c:c3:94:a8:04:84:a3:8b:91:0a:54:7d:4f:a1: e2:6d:fd:6a:34:82:85:1e:54:6d:ac:98:6a:1f:b1: e7:4e:d1:7d:ce:47:6d:48:a8:e6:a6:fc:14:44:a9: 3c:1e:5e:8d:b4:66:96:bc:a8:9f:97:af:85:f0:2c: fc:df:62:c2:d0:80:c2:2e:23:86:d1:81:3d:29:8b: 84:72:ce:c7:f5:d4:29:5e:5a:67:24:a7:8c:44:14: 3a:1f:33:02:a3:e8:03:fa:e8:0a:02:47:2c:de:75: 45:1a:94:09:f7:9e:91:54:53:5f:f4:5b:47:2a:a6: 1e:10:a4:13:7e:db:de:c6:7c:cd:f3:b0:32:ed:20: 83:41:2b:af:20:d2:3d:a0:78:e1:52:bc:dd:16:a3: 7b:43:8a:6c:72:a8:43:15:7a:1c:34:c7:42:2f:4a: 63:4f:f3:6c:f8:3b:bd:9f:a7:61:0f:11:b4:80:36: 45:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:5B:9A:63:38:5D:F4:7B:28:EA:7F:BF:98:95:E2:EE:12:29:39:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9b5cfa33-fc05-34aa-b1b9-bfe8a7d0e17e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:ba:af:59:64:65:3e:9f:3b:52:1b:6c:4d:8e:20:95:ea:e5: 92:38:86:cf:3d:9d:8b:bb:04:dc:d5:a9:38:2f:0f:42:0e:00: c6:4f:9b:a9:00:8f:2f:e4:c9:e2:a7:a4:f2:6a:75:01:c9:f0: 79:92:33:73:86:3c:5d:05:a2:10:94:67:c9:8e:ab:53:93:68: d9:42:ab:e0:7a:6e:6a:e7:33:42:bc:85:0d:c7:26:39:b9:e3: c4:0e:0c:e8:04:90:e9:d5:e6:ab:8e:6d:77:54:c6:ef:a1:f3: 13:41:98:e7:55:00:8a:10:9a:0f:f6:6a:ac:30:7e:12:08:a8: f6:ec:05:66:d6:7b:1a:b9:81:3c:fd:ad:0c:95:c3:2d:69:d5: b7:04:c6:27:3d:5b:62:fc:b6:8d:d3:b2:11:61:49:6d:04:eb: f2:ec:e5:d3:bf:06:a9:26:a6:84:d3:31:11:56:72:3f:8e:c5: 8f:e5:4c:76:07:c6:f1:9f:ec:21:ca:cb:00:db:fc:30:fd:dd: f4:3a:ae:9e:ac:de:85:88:b3:52:e8:90:9b:2d:ad:63:29:ea: e6:46:2d:ef:0c:e1:95:75:f9:58:d9:56:25:c8:86:8d:49:25: f3:61:9b:4a:cc:f0:0e:67:65:9a:a0:75:b9:50:21:40:69:47: e9:a5:5d:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e5rWwchTnJ96p4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk ZjY3ZjJjMGMtNWE1YS00YWZmLTg0YWItMWYyNjA4MDg2MzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieEi7c9F8RG7ND2tkgBqFcBdevQdiWsXM3Mn anXA6moJMhoaUA9lcExNrvwkPGaAUG7A8eGI7jgAdkp1+52xgOmZeUMOxzKB0gRX DMOUqASEo4uRClR9T6Hibf1qNIKFHlRtrJhqH7HnTtF9zkdtSKjmpvwURKk8Hl6N tGaWvKifl6+F8Cz832LC0IDCLiOG0YE9KYuEcs7H9dQpXlpnJKeMRBQ6HzMCo+gD +ugKAkcs3nVFGpQJ956RVFNf9FtHKqYeEKQTftvexnzN87Ay7SCDQSuvINI9oHjh UrzdFqN7Q4pscqhDFXocNMdCL0pjT/Ns+Du9n6dhDxG0gDZFkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFbmmM4XfR7KOp/v5iV4u4SKTnlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWI1Y2ZhMzMtZmMwNS0z NGFhLWIxYjktYmZlOGE3ZDBlMTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLF/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKW6r1lkZT6fO1IbbE2OIJXq5ZI4hs89nYu7BNzVqTgvD0IOAMZPm6kA jy/kyeKnpPJqdQHJ8HmSM3OGPF0FohCUZ8mOq1OTaNlCq+B6bmrnM0K8hQ3HJjm5 48QODOgEkOnV5quObXdUxu+h8xNBmOdVAIoQmg/2aqwwfhIIqPbsBWbWexq5gTz9 rQyVwy1p1bcExic9W2L8to3TshFhSW0E6/Ls5dO/BqkmpoTTMRFWcj+OxY/lTHYH xvGf7CHKywDb/DD93fQ6rp6s3oWIs1LokJstrWMp6uZGLe8M4ZV1+VjZViXIho1J JfNhm0rM8A5nZZqgdblQIUBpR+mlXSA= -----END CERTIFICATE-----Generated at Mon Aug 4 14:59:03 2025 by rpki-client