$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa48523e-152e-352b-93ab-2b9702c9a66c.roa File: aa48523e-152e-352b-93ab-2b9702c9a66c.roa (raw, json) Hash identifier: cLyEYJWv9M6hc7Rop8n6xFBkGTRDGZMBvHeXuPerwEM= Subject key identifier: 51:EC:53:AA:32:34:76:D9:DF:8D:4E:1D:46:55:33:F3:7D:52:22:DA Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A7E7B6582843FF0F240AC9500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa48523e-152e-352b-93ab-2b9702c9a66c.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 108.170.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:65:82:84:3f:f0:f2:40:ac:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=2c307dba-2239-4b61-87ba-61af4fbac2c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a9:75:94:bd:8f:82:49:c2:34:b0:92:71:f6: 28:50:47:78:de:aa:c4:9f:34:01:ef:c3:15:43:9d: 3e:e9:00:d7:88:70:64:64:94:fe:4b:9c:26:79:aa: 34:bf:25:77:28:44:af:d9:8f:c6:36:0a:c7:c5:3d: 02:e5:dc:2a:02:14:41:7c:e4:c7:d9:1c:46:35:6f: 9c:b8:88:c4:52:61:09:1f:04:69:aa:42:a8:5d:3a: bb:16:18:b9:5d:c8:38:18:4c:69:ee:86:7c:2f:93: 1a:68:ce:2d:cb:fc:32:cd:e4:bf:13:8b:d3:d8:1b: 54:ef:b2:d8:9c:42:06:d6:9b:48:90:58:1f:62:44: b5:42:a0:cb:37:ca:17:21:1a:35:9e:d3:a4:6b:c6: 5a:2a:72:0c:12:50:5b:5d:20:6b:56:25:6a:73:f8: ee:65:83:e8:a6:24:09:c8:95:6c:48:70:20:a7:73: b7:c7:b6:2b:fc:71:e4:30:fc:b4:54:ac:b3:e5:5b: 29:89:f9:7b:5c:21:7e:bc:f9:f7:9b:da:b3:dc:7d: 68:32:2a:b9:52:fa:7e:26:9f:76:ea:3a:d8:3c:16: 6c:e9:81:d7:d9:69:4e:58:34:72:a6:59:0f:3e:8b: 30:07:ef:a2:bf:9e:3c:5e:c3:aa:02:c4:24:66:46: 93:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:EC:53:AA:32:34:76:D9:DF:8D:4E:1D:46:55:33:F3:7D:52:22:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa48523e-152e-352b-93ab-2b9702c9a66c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:3d:3a:0d:fa:37:ac:7c:b5:73:21:3a:0c:f2:a8:24:78:d1: 48:91:19:ac:ef:b0:01:6b:9a:39:08:eb:8c:31:06:b9:b1:a1: 54:11:0e:e5:80:d3:5f:25:e3:fb:a0:26:f5:6d:04:95:05:4e: bc:be:a2:5b:a0:d9:72:88:63:61:9e:6c:a4:d6:f4:c0:57:81: cb:05:d2:7a:0e:24:15:9a:fb:ba:a0:52:4b:22:d7:88:3f:78: 82:7a:d2:64:16:bc:96:2c:a2:83:85:b1:39:30:00:54:c3:2d: 98:09:3f:f7:34:e3:f8:eb:16:77:af:58:ed:fb:d8:a9:f9:b5: 38:73:46:21:d8:37:59:e0:e6:5e:7d:79:cf:9c:76:43:57:64: 53:9b:40:b1:e5:e1:75:e4:eb:29:25:42:76:c2:b8:2f:ec:f2: 75:f0:df:0f:22:e8:02:2a:67:a2:68:e9:ca:7b:9a:07:4b:24: 42:ec:5c:42:ff:cd:e3:f6:92:66:3b:71:b2:14:9f:c7:b6:f2: ae:34:37:dd:77:24:7a:8d:55:dd:c2:56:8e:4a:da:36:fc:ac: f2:e3:26:b4:0d:3f:e4:7f:5f:2c:97:d5:20:59:61:9b:ca:0a: 9f:c3:b4:d5:2e:67:4f:5d:a2:83:73:5b:81:be:59:0b:4e:65: df:b2:cf:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e2WChD/w8kCslQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MmMzMDdkYmEtMjIzOS00YjYxLTg3YmEtNjFhZjRmYmFjMmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKl1lL2PgknCNLCScfYoUEd43qrEnzQB78MV Q50+6QDXiHBkZJT+S5wmeao0vyV3KESv2Y/GNgrHxT0C5dwqAhRBfOTH2RxGNW+c uIjEUmEJHwRpqkKoXTq7Fhi5Xcg4GExp7oZ8L5MaaM4ty/wyzeS/E4vT2BtU77LY nEIG1ptIkFgfYkS1QqDLN8oXIRo1ntOka8ZaKnIMElBbXSBrViVqc/juZYPopiQJ yJVsSHAgp3O3x7Yr/HHkMPy0VKyz5Vspifl7XCF+vPn3m9qz3H1oMiq5Uvp+Jp92 6jrYPBZs6YHX2WlOWDRyplkPPoswB++iv548XsOqAsQkZkaTLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHsU6oyNHbZ341OHUZVM/N9UiLaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWE0ODUyM2UtMTUyZS0z NTJiLTkzYWItMmI5NzAyYzlhNjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGs9Og36N6x8tXMhOgzyqCR40UiRGazvsAFrmjkI64wxBrmxoVQRDuWA 018l4/ugJvVtBJUFTry+olug2XKIY2GebKTW9MBXgcsF0noOJBWa+7qgUksi14g/ eIJ60mQWvJYsooOFsTkwAFTDLZgJP/c04/jrFnevWO372Kn5tThzRiHYN1ng5l59 ec+cdkNXZFObQLHl4XXk6yklQnbCuC/s8nXw3w8i6AIqZ6Jo6cp7mgdLJELsXEL/ zeP2kmY7cbIUn8e28q40N913JHqNVd3CVo5K2jb8rPLjJrQNP+R/XyyX1SBZYZvK Cp/DtNUuZ09dooNzW4G+WQtOZd+yz2w= -----END CERTIFICATE-----Generated at Mon Aug 4 15:08:15 2025 by rpki-client