$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4b374d9-382f-3914-b85f-4b00ec1af5d2.roa File: d4b374d9-382f-3914-b85f-4b00ec1af5d2.roa (raw, json) Hash identifier: F0WXzKFqjr4JJ8Jza42tm85GSKljGHsELmMb6AsqyA0= Subject key identifier: 2D:39:84:11:93:F9:35:8E:67:AB:56:23:22:0E:DE:26:B5:A8:F6:24 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A7E7B78B050F3022DCBCD2380 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4b374d9-382f-3914-b85f-4b00ec1af5d2.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 108.177.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:78:b0:50:f3:02:2d:cb:cd:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=09f58acc-2499-42c3-9572-6025c3f0b331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a9:99:ce:68:1f:4b:35:91:fe:9d:c7:08:60: c7:d8:6f:25:ef:0b:d1:ab:ae:82:7d:45:ad:50:2e: 67:f5:5f:8a:1b:42:fb:30:b1:37:07:cb:b6:85:1d: 8a:f9:05:a8:6f:0d:34:c5:57:41:00:f1:2c:03:0c: 61:91:f9:78:17:ee:e6:db:f4:24:59:6b:36:49:0a: 0b:65:e9:87:dd:ff:05:89:bd:ff:46:9b:4f:2e:79: 0b:46:cb:64:10:bc:b8:20:a1:87:1f:57:13:41:72: 83:4f:d9:b8:39:4f:87:e7:96:34:04:6d:51:66:8b: 3c:03:4a:b0:59:91:76:f8:f0:94:bb:11:dc:f9:cd: cc:b2:5d:64:68:46:fb:ed:43:9c:46:89:d6:a0:0b: e9:bf:4b:19:61:15:16:b4:61:07:05:90:93:b2:0c: 9b:34:5d:07:36:6f:6e:ed:1d:4a:4d:9f:d1:07:c5: 69:31:98:ae:fb:14:10:fe:cd:fc:18:6a:05:64:d3: 39:88:b9:87:e0:36:7a:11:b3:5c:d6:d2:e8:af:6a: 72:59:bf:77:f6:6a:1b:4c:a1:06:c1:f7:9b:c8:e9: 0f:e6:7a:1b:fb:ed:ee:bd:24:7c:b4:f6:5a:b6:d1: d2:69:1f:f7:d3:51:72:53:0c:fa:a2:f3:04:88:73: a5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:39:84:11:93:F9:35:8E:67:AB:56:23:22:0E:DE:26:B5:A8:F6:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4b374d9-382f-3914-b85f-4b00ec1af5d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:e6:ee:c3:9a:c8:3e:23:67:cf:74:21:e7:b5:79:c3:38:7e: 9c:d1:81:98:d6:dd:99:2a:b1:48:8c:74:68:97:0d:cc:71:39: b2:4a:ea:30:f9:24:b7:1c:1c:c4:ae:88:b7:14:32:70:e2:31: ec:31:05:23:3a:80:1f:cb:61:94:15:91:71:8d:47:26:4a:a7: f8:0a:fd:82:02:4d:2c:a5:21:7f:88:b3:1f:70:61:af:c4:ba: 48:1c:a9:57:cb:41:8c:c7:fe:2c:10:2b:1a:f0:ca:48:69:d7: 70:40:e2:d9:3a:c3:12:72:6b:8b:b2:08:0c:4a:69:cd:0b:c1: 21:e6:77:8e:c6:be:fe:ee:8d:ec:09:58:61:2a:0e:4d:bb:3d: 0b:46:87:78:4e:ad:23:41:d6:d0:1b:e6:a3:9f:7d:08:29:0c: 30:92:e5:53:51:e0:22:90:37:82:f3:3f:95:ff:c3:9f:2a:36: cd:87:e7:c5:6f:e7:e9:bd:f6:33:35:fb:15:bd:1c:d4:5c:63: d9:ff:9c:56:e5:72:e7:db:77:31:a1:a3:50:95:76:de:e6:13: 44:94:25:68:6d:ed:57:85:da:37:e7:a1:dd:98:06:2e:a9:f8: 54:5d:2b:78:c6:cf:ae:5a:b2:6d:f2:80:51:1c:ae:5d:66:2b: fa:31:3d:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e3iwUPMCLcvNI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MDlmNThhY2MtMjQ5OS00MmMzLTk1NzItNjAyNWMzZjBiMzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKmZzmgfSzWR/p3HCGDH2G8l7wvRq66CfUWt UC5n9V+KG0L7MLE3B8u2hR2K+QWobw00xVdBAPEsAwxhkfl4F+7m2/QkWWs2SQoL ZemH3f8Fib3/RptPLnkLRstkELy4IKGHH1cTQXKDT9m4OU+H55Y0BG1RZos8A0qw WZF2+PCUuxHc+c3Msl1kaEb77UOcRonWoAvpv0sZYRUWtGEHBZCTsgybNF0HNm9u 7R1KTZ/RB8VpMZiu+xQQ/s38GGoFZNM5iLmH4DZ6EbNc1tLor2pyWb939mobTKEG wfebyOkP5nob++3uvSR8tPZattHSaR/301FyUwz6ovMEiHOlDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC05hBGT+TWOZ6tWIyIO3ia1qPYkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDRiMzc0ZDktMzgyZi0z OTE0LWI4NWYtNGIwMGVjMWFmNWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvm7sOayD4jZ890Iee1ecM4fpzRgZjW3ZkqsUiMdGiXDcxxObJK6jD5 JLccHMSuiLcUMnDiMewxBSM6gB/LYZQVkXGNRyZKp/gK/YICTSylIX+Isx9wYa/E ukgcqVfLQYzH/iwQKxrwykhp13BA4tk6wxJya4uyCAxKac0LwSHmd47Gvv7ujewJ WGEqDk27PQtGh3hOrSNB1tAb5qOffQgpDDCS5VNR4CKQN4LzP5X/w58qNs2H58Vv 5+m99jM1+xW9HNRcY9n/nFblcufbdzGho1CVdt7mE0SUJWht7VeF2jfnod2YBi6p +FRdK3jGz65asm3ygFEcrl1mK/oxPQ8= -----END CERTIFICATE-----Generated at Mon Aug 4 14:54:38 2025 by rpki-client