$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c68ac5ee-b0da-3aaa-9166-e226ab928ff1.roa File: c68ac5ee-b0da-3aaa-9166-e226ab928ff1.roa (raw, json) Hash identifier: 1CZGfH/qCB0WFqNPck2l3hEauMop2iZA3t1iC9huyjs= Subject key identifier: 0F:9D:79:03:95:68:65:C4:89:14:D7:CB:AA:FD:F9:6D:EF:81:86:B5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A7E7B91C71EC4D0AE4C358BC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c68ac5ee-b0da-3aaa-9166-e226ab928ff1.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 108.170.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:91:c7:1e:c4:d0:ae:4c:35:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=a85ee31e-5a07-4fb2-a150-efe01a1dc47c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c8:11:a4:8c:db:f4:2d:58:e1:66:06:dd:2a: e2:af:17:f9:22:d0:75:2b:f8:37:72:5b:86:cf:ac: fd:db:66:0c:0d:1f:79:a3:b8:67:52:2a:41:a8:81: c7:a8:57:9d:b5:1c:80:86:45:1c:87:ac:bb:7d:5f: 68:9d:2d:a1:6a:2f:20:2d:87:40:94:5f:78:e7:f7: e5:b3:a4:69:57:15:2a:47:b5:6e:86:c3:84:93:08: f9:06:ec:8b:f3:2d:52:0a:56:74:d1:79:6a:87:bf: 24:89:72:fa:3a:c1:88:b7:f1:5f:41:36:86:be:d6: 72:8a:29:85:69:aa:00:10:d9:ef:db:84:6f:88:e7: 6d:f0:46:0f:3c:9c:26:3f:85:30:93:a6:1f:ad:fc: 1e:cf:96:a9:3e:57:d5:80:a9:49:06:3d:96:e2:58: 83:cb:60:80:27:69:99:5e:2c:5a:a8:85:14:e0:90: 67:94:0f:62:40:43:b5:0e:bc:1d:a0:1b:93:85:c9: 12:47:68:24:77:38:8b:dc:16:65:8d:9d:a5:7a:a2: 30:16:63:87:bc:da:19:b3:cc:12:51:ae:ef:09:8e: d7:aa:ff:38:fb:c5:e0:ef:b6:b8:19:78:cf:b3:93: 0f:58:d0:57:40:59:81:60:3a:5d:72:0d:bb:54:80: 9d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:9D:79:03:95:68:65:C4:89:14:D7:CB:AA:FD:F9:6D:EF:81:86:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c68ac5ee-b0da-3aaa-9166-e226ab928ff1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:90:08:fa:46:fc:fc:56:f2:8e:e2:6d:4a:22:1d:85:96:fe: cc:c2:20:c1:d2:9c:2c:8b:66:4e:97:49:97:fd:fa:a0:27:b3: c0:f7:8d:ca:f9:e9:f5:fa:ab:70:9c:38:9f:03:e9:fb:47:0c: ee:f0:df:0d:ae:45:ca:28:12:9f:35:ee:84:0b:6f:3f:ac:36: 3d:48:bb:85:db:ea:24:ff:c4:b2:12:78:0b:fb:21:58:b2:48: 4c:af:b2:a1:81:ce:d3:f8:7f:9c:b5:88:15:66:0f:8c:26:63: 83:ea:40:57:ca:46:bf:e4:9f:5f:11:8c:eb:dd:12:fd:c7:d8: 55:0c:32:ec:14:87:fd:5f:0e:a3:60:64:ae:4b:ed:76:d5:70: 47:55:94:ed:a3:99:e8:9f:34:f1:06:ec:27:dd:8d:dc:d2:08: d4:f2:17:59:af:72:74:78:93:1f:78:06:0e:f0:8a:ef:0b:c1: 5b:a8:26:d3:9c:13:24:ed:76:f9:3e:e7:76:18:a4:5e:db:85: 26:43:7d:19:5a:84:6c:af:aa:85:c2:5e:43:39:4e:ad:8a:cc: 25:8c:34:eb:e7:fc:d1:b1:19:06:2a:0d:b3:5c:87:6e:c2:1e: d6:a8:e5:41:05:68:1d:6f:5f:35:10:14:cc:fb:43:31:00:e4: 63:11:55:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e5HHHsTQrkw1i8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk YTg1ZWUzMWUtNWEwNy00ZmIyLWExNTAtZWZlMDFhMWRjNDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8gRpIzb9C1Y4WYG3Srirxf5ItB1K/g3cluG z6z922YMDR95o7hnUipBqIHHqFedtRyAhkUch6y7fV9onS2hai8gLYdAlF945/fl s6RpVxUqR7VuhsOEkwj5BuyL8y1SClZ00Xlqh78kiXL6OsGIt/FfQTaGvtZyiimF aaoAENnv24RviOdt8EYPPJwmP4Uwk6Yfrfwez5apPlfVgKlJBj2W4liDy2CAJ2mZ XixaqIUU4JBnlA9iQEO1DrwdoBuThckSR2gkdziL3BZljZ2leqIwFmOHvNoZs8wS Ua7vCY7Xqv84+8Xg77a4GXjPs5MPWNBXQFmBYDpdcg27VICdNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+deQOVaGXEiRTXy6r9+W3vgYa1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzY4YWM1ZWUtYjBkYS0z YWFhLTkxNjYtZTIyNmFiOTI4ZmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOQCPpG/PxW8o7ibUoiHYWW/szCIMHSnCyLZk6XSZf9+qAns8D3jcr5 6fX6q3CcOJ8D6ftHDO7w3w2uRcooEp817oQLbz+sNj1Iu4Xb6iT/xLISeAv7IViy SEyvsqGBztP4f5y1iBVmD4wmY4PqQFfKRr/kn18RjOvdEv3H2FUMMuwUh/1fDqNg ZK5L7XbVcEdVlO2jmeifNPEG7CfdjdzSCNTyF1mvcnR4kx94Bg7wiu8LwVuoJtOc EyTtdvk+53YYpF7bhSZDfRlahGyvqoXCXkM5Tq2KzCWMNOvn/NGxGQYqDbNch27C Htao5UEFaB1vXzUQFMz7QzEA5GMRVfU= -----END CERTIFICATE-----Generated at Mon Aug 4 19:07:47 2025 by rpki-client