$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4fd9a91-edb2-3025-bc74-1a054d6c617d.roa File: d4fd9a91-edb2-3025-bc74-1a054d6c617d.roa (raw, json) Hash identifier: c6XGCVI3VE5nKSkX/gKdVT/CMp7DYUGU5hspiFBkkN8= Subject key identifier: 65:1C:AA:7D:8D:F6:27:70:C4:57:CE:E6:BF:08:85:56:CA:2D:21:EF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A7E7B7687EB6B20EB36E57700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4fd9a91-edb2-3025-bc74-1a054d6c617d.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 108.170.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:76:87:eb:6b:20:eb:36:e5:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=d493254a-ea9d-4a3b-9660-756729e41e85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0e:46:68:a2:c1:11:10:c9:a7:1b:da:9f:1a: 84:57:ea:03:99:64:27:e3:7d:7f:84:4c:ac:81:7b: 03:df:2f:75:e8:0a:37:ba:08:95:87:45:a3:b7:4f: 15:54:8b:af:1b:56:9d:12:79:18:b6:91:3c:77:4d: 70:78:8d:a3:33:4b:29:46:60:46:af:cd:bf:46:ae: ce:ce:d1:a5:4d:c4:5a:21:93:d8:58:03:85:be:5f: 8e:5b:d6:f0:6c:bb:a3:e3:7d:0c:a4:27:fd:72:82: a6:e2:72:44:89:d2:cf:ca:60:40:63:e5:12:c7:79: ba:b4:38:91:0f:ba:7e:87:dc:bd:7f:7c:15:1f:0b: c5:70:7f:3a:72:53:8a:83:fe:35:eb:c0:ef:a3:41: c8:e5:a7:2f:0b:06:0e:1d:8d:de:a7:24:b5:2a:88: 09:09:ad:98:43:ce:04:88:43:81:fd:b3:cb:0a:c1: 0e:68:d6:e9:9a:ac:fe:13:d6:94:89:bc:4a:85:6d: d2:a9:19:fd:c2:80:81:e8:bb:b7:67:4e:5b:8d:1a: 16:f6:a0:52:9f:b9:c6:33:bf:4f:10:3e:ac:34:48: eb:38:b0:6d:7e:68:f8:92:a5:a5:96:14:3e:44:ed: 94:94:51:21:81:9e:3f:bc:a3:0b:7e:11:c9:76:bb: c6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:1C:AA:7D:8D:F6:27:70:C4:57:CE:E6:BF:08:85:56:CA:2D:21:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d4fd9a91-edb2-3025-bc74-1a054d6c617d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:ac:08:61:03:9d:4d:40:31:74:4d:bc:df:b5:1d:ad:d2:67: 69:af:eb:51:9c:7b:0e:a4:07:0a:18:c0:3e:ca:49:50:18:ae: b0:7e:6e:86:12:3d:fb:1a:77:b1:b8:fb:a3:5f:c4:0d:d7:a9: 9b:e9:38:fa:a1:0b:30:6d:f1:78:82:cc:b0:83:24:b1:1f:60: 82:2f:b1:ff:0d:6c:b6:c8:d4:93:b5:1a:b5:25:55:03:ef:50: 91:1c:43:83:88:13:3d:25:cb:29:b8:06:33:66:5e:82:f3:8c: 26:76:e3:54:89:aa:5f:3a:f7:95:fe:ad:66:d3:bb:29:e2:bb: c3:0c:89:a2:2d:f4:90:92:06:ea:65:ed:75:1b:9d:4d:d8:e0: f9:c0:f0:bb:f1:20:6b:4a:9d:4e:19:c6:42:e3:4f:ba:64:53: f8:16:4b:d2:a1:12:cc:f4:6a:22:a0:f2:88:c8:b1:85:f5:0b: 50:3a:6d:a1:05:b0:dd:95:ed:5b:53:1c:bf:bd:89:58:24:c7: 54:c4:ff:09:0d:60:26:12:72:d8:5d:29:f8:21:37:70:b8:4d: 3d:2f:8b:04:6a:1a:2b:a0:22:02:ec:23:c1:8c:46:cf:6d:a0: 4d:c8:1d:5b:6e:41:e3:74:71:0e:23:be:e5:b6:a4:9c:d0:54: 91:fa:e1:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e3aH62sg6zbldwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk ZDQ5MzI1NGEtZWE5ZC00YTNiLTk2NjAtNzU2NzI5ZTQxZTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4A5GaKLBERDJpxvanxqEV+oDmWQn431/hEys gXsD3y916Ao3ugiVh0Wjt08VVIuvG1adEnkYtpE8d01weI2jM0spRmBGr82/Rq7O ztGlTcRaIZPYWAOFvl+OW9bwbLuj430MpCf9coKm4nJEidLPymBAY+USx3m6tDiR D7p+h9y9f3wVHwvFcH86clOKg/4168Dvo0HI5acvCwYOHY3epyS1KogJCa2YQ84E iEOB/bPLCsEOaNbpmqz+E9aUibxKhW3SqRn9woCB6Lu3Z05bjRoW9qBSn7nGM79P ED6sNEjrOLBtfmj4kqWllhQ+RO2UlFEhgZ4/vKMLfhHJdrvGcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUcqn2N9idwxFfO5r8IhVbKLSHvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDRmZDlhOTEtZWRiMi0z MDI1LWJjNzQtMWEwNTRkNmM2MTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEesCGEDnU1AMXRNvN+1Ha3SZ2mv61Gcew6kBwoYwD7KSVAYrrB+boYS Pfsad7G4+6NfxA3XqZvpOPqhCzBt8XiCzLCDJLEfYIIvsf8NbLbI1JO1GrUlVQPv UJEcQ4OIEz0lyym4BjNmXoLzjCZ241SJql8695X+rWbTuyniu8MMiaIt9JCSBupl 7XUbnU3Y4PnA8LvxIGtKnU4ZxkLjT7pkU/gWS9KhEsz0aiKg8ojIsYX1C1A6baEF sN2V7VtTHL+9iVgkx1TE/wkNYCYScthdKfghN3C4TT0viwRqGiugIgLsI8GMRs9t oE3IHVtuQeN0cQ4jvuW2pJzQVJH64fs= -----END CERTIFICATE-----Generated at Mon Aug 4 15:26:46 2025 by rpki-client