$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bfa668b0-b5b0-38a6-b6ce-520c4a9d0f7a.roa File: bfa668b0-b5b0-38a6-b6ce-520c4a9d0f7a.roa (raw, json) Hash identifier: C9Aol0krL3kSNgbhFK2MvQt2XA4858jJAQyh8JitKlo= Subject key identifier: 7C:A8:C7:FE:FB:41:07:38:8E:E7:4C:8E:24:C4:DF:4B:EA:78:31:6D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A7E7B8FC0E1A3961C65EF7D00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bfa668b0-b5b0-38a6-b6ce-520c4a9d0f7a.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 108.177.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:8f:c0:e1:a3:96:1c:65:ef:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=d15040a5-3b8c-445e-8997-2cad1e11b847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3a:08:ce:38:2c:5d:d7:69:f9:32:34:19:cb: da:c0:70:d7:5f:b9:f9:26:41:78:e7:79:2e:7c:6d: 25:71:70:b3:ba:a9:f9:3f:16:4c:16:2f:ce:55:65: f4:10:fa:22:b4:30:0e:94:56:57:b3:51:4a:de:67: 19:da:95:9f:94:aa:f3:32:6c:61:95:1c:01:98:1c: 68:ae:4d:7a:cb:fc:c0:f0:f8:03:e9:c1:72:af:af: b2:ec:29:2a:b3:07:f6:eb:2b:98:98:31:81:9c:b9: f9:4a:48:3f:92:a1:44:25:24:62:f9:45:73:4d:ca: 7d:e2:0f:81:c8:b5:4f:2e:b5:e1:f7:18:d7:98:10: 49:2d:81:b5:c6:43:50:8e:94:84:e9:24:27:4f:25: 05:58:98:5c:74:7d:5a:40:5d:f7:4c:fb:53:b4:c7: 2e:1e:a6:bf:57:36:1b:30:26:f2:08:6e:94:a8:b4: ac:f5:ee:31:63:67:1d:41:2b:6b:1a:a3:2a:b1:2e: 10:bf:c5:1d:75:53:68:bc:f0:a2:76:31:be:4a:3a: f6:4c:ae:b6:48:0f:37:4b:0d:e5:93:61:e2:a7:46: af:7b:9f:e8:3f:db:5c:83:93:84:ef:b4:10:75:12: 46:9e:37:7b:38:6e:ca:e8:16:9b:0e:a9:89:ab:11: 7c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A8:C7:FE:FB:41:07:38:8E:E7:4C:8E:24:C4:DF:4B:EA:78:31:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bfa668b0-b5b0-38a6-b6ce-520c4a9d0f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:12:4a:54:05:5f:03:06:27:07:1f:fc:56:28:10:9f:98:67: 9d:22:1d:b1:6e:6b:25:4f:67:50:71:91:09:a0:6c:ef:29:ae: 84:94:50:de:db:bb:11:ac:ed:2c:a5:a3:8e:d7:21:20:3d:d4: 01:b5:18:b5:4a:11:7c:f7:29:ac:12:ad:d5:fa:9a:57:09:9d: f3:e6:8d:67:6b:a4:2e:f2:29:4d:ba:63:65:ba:02:5c:05:66: bc:68:b7:fb:ba:7d:df:5c:1c:47:79:ba:fd:79:6e:88:68:c6: 81:a5:18:aa:25:1d:f2:dd:16:8e:19:e3:19:6a:8b:29:de:5b: 23:17:57:00:35:91:94:ae:c0:71:b6:16:27:8c:0d:4d:05:e5: 1b:ca:a6:15:e7:f3:f6:cc:a2:73:ac:08:4b:4d:16:13:95:4e: e3:2f:f5:2f:23:7b:2b:81:ff:48:e0:5d:62:61:9e:3a:4b:14: 1e:8f:58:bf:91:00:3d:c8:7b:3d:bf:22:0f:68:53:e7:bb:f0: b3:5f:5e:be:74:3c:2a:f5:94:f1:b0:d7:ac:c4:df:a2:fa:87: c8:ea:50:ba:45:05:35:5d:1d:c2:a4:8d:c5:4e:28:aa:79:29: ea:2b:22:17:d8:5c:15:b5:8c:42:3e:65:f4:f8:c8:2c:bc:35: a8:02:8f:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e4/A4aOWHGXvfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk ZDE1MDQwYTUtM2I4Yy00NDVlLTg5OTctMmNhZDFlMTFiODQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqToIzjgsXddp+TI0GcvawHDXX7n5JkF453ku fG0lcXCzuqn5PxZMFi/OVWX0EPoitDAOlFZXs1FK3mcZ2pWflKrzMmxhlRwBmBxo rk16y/zA8PgD6cFyr6+y7Ckqswf26yuYmDGBnLn5Skg/kqFEJSRi+UVzTcp94g+B yLVPLrXh9xjXmBBJLYG1xkNQjpSE6SQnTyUFWJhcdH1aQF33TPtTtMcuHqa/VzYb MCbyCG6UqLSs9e4xY2cdQStrGqMqsS4Qv8UddVNovPCidjG+Sjr2TK62SA83Sw3l k2Hip0ave5/oP9tcg5OE77QQdRJGnjd7OG7K6BabDqmJqxF8SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHyox/77QQc4judMjiTE30vqeDFtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmZhNjY4YjAtYjViMC0z OGE2LWI2Y2UtNTIwYzRhOWQwZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLF7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALYSSlQFXwMGJwcf/FYoEJ+YZ50iHbFuayVPZ1BxkQmgbO8proSUUN7b uxGs7Sylo47XISA91AG1GLVKEXz3KawSrdX6mlcJnfPmjWdrpC7yKU26Y2W6AlwF Zrxot/u6fd9cHEd5uv15bohoxoGlGKolHfLdFo4Z4xlqiyneWyMXVwA1kZSuwHG2 FieMDU0F5RvKphXn8/bMonOsCEtNFhOVTuMv9S8jeyuB/0jgXWJhnjpLFB6PWL+R AD3Iez2/Ig9oU+e78LNfXr50PCr1lPGw16zE36L6h8jqULpFBTVdHcKkjcVOKKp5 KeorIhfYXBW1jEI+ZfT4yCy8NagCj8k= -----END CERTIFICATE-----Generated at Mon Aug 4 15:05:55 2025 by rpki-client