$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa7a9168-d9b5-3e3a-a2b1-ce2a7051cc43.roa File: aa7a9168-d9b5-3e3a-a2b1-ce2a7051cc43.roa (raw, json) Hash identifier: HzpSRO7YT149rHi6cxEY+Q/s/UxlGbRmZO8XkqEioNM= Subject key identifier: A8:88:81:94:A4:58:81:E4:41:3D:E7:65:C0:73:8A:04:DD:05:59:28 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A7E7B9AA8AF3F420292314A40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa7a9168-d9b5-3e3a-a2b1-ce2a7051cc43.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 108.177.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:9a:a8:af:3f:42:02:92:31:4a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=4ca89af4-1438-4278-b5e6-54a32c1a65b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d5:a0:18:28:b8:9c:d3:f0:62:74:52:4a:92: 2f:88:6f:fe:d1:12:c2:fb:52:ba:fe:35:4e:96:a4: ba:37:23:17:d3:c9:db:9d:30:c1:0b:62:47:c1:62: 1a:69:7a:02:77:a0:91:d8:25:7a:51:3f:b4:17:76: f2:5b:c2:8c:e5:62:a6:ee:c4:b2:31:d0:ec:30:7a: c3:b1:43:38:0b:13:c8:c1:99:5b:67:c0:17:d3:ea: b7:30:a4:18:fc:64:43:22:91:fe:74:2e:a0:91:40: ad:62:67:c1:fc:66:e7:03:d0:cd:e8:2a:27:df:4e: 39:0d:e9:df:02:de:c5:d7:38:b3:dc:fd:cc:8e:ea: ff:5a:f3:ab:17:14:1d:56:ae:84:3f:4e:92:59:15: 7e:ec:42:3c:2d:a5:9e:87:16:3a:48:53:ef:8b:52: 51:04:58:4f:fe:b7:f6:eb:62:b9:be:b9:11:4e:3e: 69:85:28:dc:54:e3:57:67:50:34:ad:48:b6:89:70: 02:f7:4a:70:3d:f7:8d:cb:b8:0e:96:0d:c3:c8:02: fe:37:4e:f1:c1:bf:41:5b:df:59:8d:fa:42:a8:58: f9:15:72:17:28:31:d6:1b:8d:b4:5e:6d:72:2f:81: 86:26:99:28:73:68:42:14:8f:a1:d3:3f:91:99:92: 42:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:88:81:94:A4:58:81:E4:41:3D:E7:65:C0:73:8A:04:DD:05:59:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aa7a9168-d9b5-3e3a-a2b1-ce2a7051cc43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:54:da:63:df:92:f7:5d:28:1f:a3:f4:d4:6a:b7:3c:0f:e5: 49:cf:8a:ba:e8:eb:01:be:9f:44:81:18:f8:97:e0:49:33:0b: 05:14:4a:bd:91:98:ea:e8:06:9a:58:f2:ed:fb:21:49:4d:09: f1:f3:e1:9e:a4:c9:96:af:7b:71:a1:75:d4:3d:41:73:35:d4: 25:0b:25:37:7c:56:af:ce:05:c4:e2:cc:3d:64:4b:d8:e6:b5: 67:3c:49:e1:2d:29:09:de:e3:aa:cc:60:d1:96:45:9c:6c:58: 57:30:ee:45:44:54:ed:fd:aa:ce:86:42:b7:41:09:c6:33:9e: 8a:4c:e3:80:d2:78:fa:8a:1c:62:60:f5:ef:9a:d6:d4:da:c6: 7b:77:76:e4:a6:70:2e:66:c7:df:85:71:1e:5e:6d:6e:d7:d8: 54:e0:d4:f5:d3:9a:34:63:7f:2c:d7:ad:50:93:b9:56:34:68: 72:2f:51:11:cf:2f:6d:65:01:e0:e1:90:39:d3:fb:fd:8a:d6: cb:4d:c7:be:d9:3f:f8:16:ae:bd:bd:61:dc:c8:c1:ee:55:4d: 08:64:3d:26:24:3b:f2:c6:82:cb:43:06:94:bb:44:03:ba:32: 6a:c4:67:8f:e9:12:30:e3:4b:e2:fb:79:ee:15:7e:89:6b:c9: bd:b0:20:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e5qorz9CApIxSkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk NGNhODlhZjQtMTQzOC00Mjc4LWI1ZTYtNTRhMzJjMWE2NWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNWgGCi4nNPwYnRSSpIviG/+0RLC+1K6/jVO lqS6NyMX08nbnTDBC2JHwWIaaXoCd6CR2CV6UT+0F3byW8KM5WKm7sSyMdDsMHrD sUM4CxPIwZlbZ8AX0+q3MKQY/GRDIpH+dC6gkUCtYmfB/GbnA9DN6Con3045Denf At7F1ziz3P3Mjur/WvOrFxQdVq6EP06SWRV+7EI8LaWehxY6SFPvi1JRBFhP/rf2 62K5vrkRTj5phSjcVONXZ1A0rUi2iXAC90pwPfeNy7gOlg3DyAL+N07xwb9BW99Z jfpCqFj5FXIXKDHWG420Xm1yL4GGJpkoc2hCFI+h0z+RmZJCNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiIgZSkWIHkQT3nZcBzigTdBVkoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWE3YTkxNjgtZDliNS0z ZTNhLWEyYjEtY2UyYTcwNTFjYzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLEXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItU2mPfkvddKB+j9NRqtzwP5UnPirro6wG+n0SBGPiX4EkzCwUUSr2R mOroBppY8u37IUlNCfHz4Z6kyZave3GhddQ9QXM11CULJTd8Vq/OBcTizD1kS9jm tWc8SeEtKQne46rMYNGWRZxsWFcw7kVEVO39qs6GQrdBCcYznopM44DSePqKHGJg 9e+a1tTaxnt3duSmcC5mx9+FcR5ebW7X2FTg1PXTmjRjfyzXrVCTuVY0aHIvURHP L21lAeDhkDnT+/2K1stNx77ZP/gWrr29YdzIwe5VTQhkPSYkO/LGgstDBpS7RAO6 MmrEZ4/pEjDjS+L7ee4Vfolryb2wILY= -----END CERTIFICATE-----Generated at Mon Aug 4 14:45:36 2025 by rpki-client