$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d0fa683f-b54a-312d-a1bb-62021883e18a.roa File: d0fa683f-b54a-312d-a1bb-62021883e18a.roa (raw, json) Hash identifier: yVrlonHmjqBM2+H7UTjJxatXAQcGyFiRtk5xuQ+fcyM= Subject key identifier: C3:26:4D:25:07:6F:EB:C0:E8:F2:6C:A2:C2:44:CE:BA:F2:ED:25:E7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A7E7B8B7C8CD00FC8C8805C80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d0fa683f-b54a-312d-a1bb-62021883e18a.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 108.170.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:8b:7c:8c:d0:0f:c8:c8:80:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=b1b7a404-480e-43d6-b4cd-2d3d1df7ebfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:dc:38:e6:4c:15:c4:4b:c5:97:3a:a7:e5:29: 1f:a4:69:ed:91:af:6a:cf:67:23:35:fb:6b:c5:ac: 24:e6:09:4c:da:b3:b7:02:62:78:3e:5e:9d:a0:4a: 02:4f:98:ab:51:35:fa:5b:bd:9c:40:5c:34:fb:35: 64:4c:67:ee:7c:b4:8a:0b:db:ab:1a:41:aa:cc:dd: 61:50:fe:0a:24:0d:6b:e6:9d:d4:9d:27:c1:64:71: c9:3f:e0:56:bb:f8:fd:89:99:9d:c1:46:47:3e:40: b2:7b:bc:01:b0:bf:90:1b:0b:09:27:64:84:67:40: ce:dc:90:c1:79:87:31:04:84:06:53:20:bd:b0:ce: b8:1d:c9:03:27:84:e2:72:26:3f:86:f7:95:b9:e9: b4:c7:e5:dc:ab:76:cd:d9:32:43:73:e2:a4:88:3a: b1:8b:a5:74:7f:de:67:90:72:3a:98:21:9b:92:3c: 6b:7e:ec:46:4f:61:6f:f2:05:81:4a:0d:3f:67:b1: 39:a0:99:07:d8:6c:bc:f6:78:f2:ee:86:c7:9d:dc: ae:e1:e0:b0:9f:bf:4a:03:5d:cd:e6:21:68:bc:bf: 64:fe:4e:ef:61:63:c0:62:43:bd:95:7e:20:39:9a: 20:11:88:16:d7:e3:69:9f:02:0d:e2:a8:68:38:b4: e0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:26:4D:25:07:6F:EB:C0:E8:F2:6C:A2:C2:44:CE:BA:F2:ED:25:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d0fa683f-b54a-312d-a1bb-62021883e18a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:4c:ae:71:4d:f6:cc:2d:42:55:80:c8:06:80:d4:e0:0a:2f: e7:d1:0d:3c:67:01:4f:5a:69:cb:17:82:b1:98:b8:14:43:1f: ba:e8:81:9d:b7:c2:24:aa:60:06:55:c1:c7:96:96:bd:f1:11: 5f:bb:35:d9:eb:0c:1d:2e:fe:02:b6:78:d7:e3:df:83:8f:2f: 4f:db:e7:17:c4:8f:84:d1:cc:67:fe:a9:6f:cf:c5:0a:af:96: 16:89:a9:10:09:6c:7d:56:66:63:11:eb:35:33:73:0c:b9:fa: a3:3f:25:a1:37:11:9f:e6:8c:58:8e:11:a5:90:2b:a3:06:92: 81:35:cb:70:96:23:f2:6d:fa:b6:0c:8c:e5:0e:bc:67:47:95: 9f:f4:d0:7c:fa:d9:90:8a:f4:7f:75:f3:ec:c5:cc:64:e3:7c: 3e:5c:44:27:4f:1e:3a:a9:1b:6f:4a:0e:7d:cb:47:e7:75:5f: 42:c8:69:8c:5e:53:ff:4d:15:e1:bf:60:1f:a3:73:2e:d4:5b: 4a:78:1f:fc:fe:1f:57:b1:55:f7:90:fa:1b:4c:25:fe:32:04: bd:5b:8d:38:18:af:04:37:3f:4d:2d:b2:36:83:35:cc:48:97: de:98:05:67:41:79:38:db:4f:80:31:90:dc:86:1f:e6:eb:5f: 87:ad:1d:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e4t8jNAPyMiAXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk YjFiN2E0MDQtNDgwZS00M2Q2LWI0Y2QtMmQzZDFkZjdlYmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNw45kwVxEvFlzqn5SkfpGntka9qz2cjNftr xawk5glM2rO3AmJ4Pl6doEoCT5irUTX6W72cQFw0+zVkTGfufLSKC9urGkGqzN1h UP4KJA1r5p3UnSfBZHHJP+BWu/j9iZmdwUZHPkCye7wBsL+QGwsJJ2SEZ0DO3JDB eYcxBIQGUyC9sM64HckDJ4TiciY/hveVuem0x+Xcq3bN2TJDc+KkiDqxi6V0f95n kHI6mCGbkjxrfuxGT2Fv8gWBSg0/Z7E5oJkH2Gy89njy7obHndyu4eCwn79KA13N 5iFovL9k/k7vYWPAYkO9lX4gOZogEYgW1+NpnwIN4qhoOLTggwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMmTSUHb+vA6PJsosJEzrry7SXnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDBmYTY4M2YtYjU0YS0z MTJkLWExYmItNjIwMjE4ODNlMThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVMrnFN9swtQlWAyAaA1OAKL+fRDTxnAU9aacsXgrGYuBRDH7rogZ23 wiSqYAZVwceWlr3xEV+7NdnrDB0u/gK2eNfj34OPL0/b5xfEj4TRzGf+qW/PxQqv lhaJqRAJbH1WZmMR6zUzcwy5+qM/JaE3EZ/mjFiOEaWQK6MGkoE1y3CWI/Jt+rYM jOUOvGdHlZ/00Hz62ZCK9H918+zFzGTjfD5cRCdPHjqpG29KDn3LR+d1X0LIaYxe U/9NFeG/YB+jcy7UW0p4H/z+H1exVfeQ+htMJf4yBL1bjTgYrwQ3P00tsjaDNcxI l96YBWdBeTjbT4AxkNyGH+brX4etHQs= -----END CERTIFICATE-----Generated at Mon Aug 4 15:02:08 2025 by rpki-client