$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8acef3d-fb29-33d5-b657-56e7f8e32298.roa File: d8acef3d-fb29-33d5-b657-56e7f8e32298.roa (raw, json) Hash identifier: XhtHbH2B9bNKuZipcwYZD1ILz4uvm89c5inyYAVoXe4= Subject key identifier: 05:41:0B:E7:CA:07:6C:74:D6:5B:2F:31:35:64:FD:5C:08:BB:10:89 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A7E7B9CA6455C35D7AAAEAA00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8acef3d-fb29-33d5-b657-56e7f8e32298.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 108.177.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:9c:a6:45:5c:35:d7:aa:ae:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=82a2aab1-4263-43ee-8685-bfce05b7edc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:77:1d:7e:95:20:85:d6:cd:a5:62:23:e7:63: 50:c8:31:d2:98:ea:14:7a:8c:02:0e:a8:22:6f:35: 32:83:9c:ec:aa:93:74:02:7c:a4:05:22:85:2c:7e: 32:47:51:0c:8c:19:43:05:48:e3:db:53:07:15:36: 8e:8c:04:45:0c:a6:c3:88:c5:bb:e0:29:9c:82:30: 9d:7f:21:ec:f9:98:0d:eb:a6:05:f5:96:0d:ae:32: 18:cf:e5:68:34:d0:15:4c:f3:a5:38:8a:2c:a3:44: c4:38:58:a4:d6:31:77:90:0f:82:46:3e:f9:d3:7b: 38:ba:40:58:44:68:22:91:b5:a3:a2:7c:22:bc:f7: e1:f9:02:94:c3:62:00:52:0f:2b:cc:8c:93:8f:32: 4c:6c:9e:fa:a0:9d:fb:0e:74:3f:4e:8c:87:e7:54: 4d:83:1d:3b:0b:91:15:c8:e3:ed:b3:b9:36:66:51: 9b:2f:9e:0f:06:47:10:20:e7:f4:eb:94:38:68:6a: 21:4d:35:19:cb:26:5b:ec:f1:16:73:7c:02:0d:c7: 7c:b0:de:7d:64:4f:70:6c:33:57:34:90:a3:b4:76: b0:6d:6f:37:23:34:b0:12:11:7c:bf:b8:65:bc:4e: d0:e2:f1:90:5e:bd:24:b0:cc:ac:56:ae:c3:86:bc: 36:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:41:0B:E7:CA:07:6C:74:D6:5B:2F:31:35:64:FD:5C:08:BB:10:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8acef3d-fb29-33d5-b657-56e7f8e32298.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:17:e5:8d:6a:2f:c6:07:d7:18:f9:be:3f:ed:ef:79:5a:51: 34:21:53:2b:0c:24:7c:db:4d:71:a5:fa:d6:12:75:94:5b:a9: b5:b3:ae:50:b8:43:82:ca:2c:e7:c5:22:3b:4e:6c:7e:e1:5a: d7:00:62:5b:3f:09:f2:a7:53:c5:41:0e:da:5c:1c:0b:ae:50: 82:d0:2b:18:c6:a9:2b:09:cb:87:ec:63:6c:e3:49:95:cb:c6: cd:d6:cf:c2:d8:b8:12:37:3a:12:9c:40:bc:da:11:6a:c6:6c: 78:48:54:12:ab:e2:47:8d:6c:a8:ae:cb:aa:a6:89:51:56:dd: 37:66:95:64:46:c7:b1:4f:70:ba:0f:b7:77:00:83:6f:0e:9f: 86:06:c9:58:03:80:d3:a8:bf:8b:af:c1:b0:55:8f:6c:b0:6f: a7:7a:84:42:74:91:9d:03:5a:9b:7e:5a:f7:0a:39:29:99:44: 36:43:79:3f:50:af:e6:67:b4:d3:f8:f6:a1:eb:18:ed:2a:17: e8:1c:02:34:2e:1a:b6:c5:96:26:65:e7:eb:eb:b8:42:fd:8b: 23:62:03:57:17:03:1e:28:65:25:02:f4:cb:69:eb:ec:48:7c: 9e:87:13:6f:1b:78:2b:0f:c0:27:66:f6:4f:07:5d:07:0e:03: dd:ad:e7:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e5ymRVw116quqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk ODJhMmFhYjEtNDI2My00M2VlLTg2ODUtYmZjZTA1YjdlZGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXcdfpUghdbNpWIj52NQyDHSmOoUeowCDqgi bzUyg5zsqpN0AnykBSKFLH4yR1EMjBlDBUjj21MHFTaOjARFDKbDiMW74CmcgjCd fyHs+ZgN66YF9ZYNrjIYz+VoNNAVTPOlOIoso0TEOFik1jF3kA+CRj7503s4ukBY RGgikbWjonwivPfh+QKUw2IAUg8rzIyTjzJMbJ76oJ37DnQ/ToyH51RNgx07C5EV yOPts7k2ZlGbL54PBkcQIOf065Q4aGohTTUZyyZb7PEWc3wCDcd8sN59ZE9wbDNX NJCjtHawbW83IzSwEhF8v7hlvE7Q4vGQXr0ksMysVq7Dhrw2nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVBC+fKB2x01lsvMTVk/VwIuxCJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDhhY2VmM2QtZmIyOS0z M2Q1LWI2NTctNTZlN2Y4ZTMyMjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLEVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAX5Y1qL8YH1xj5vj/t73laUTQhUysMJHzbTXGl+tYSdZRbqbWzrlC4 Q4LKLOfFIjtObH7hWtcAYls/CfKnU8VBDtpcHAuuUILQKxjGqSsJy4fsY2zjSZXL xs3Wz8LYuBI3OhKcQLzaEWrGbHhIVBKr4keNbKiuy6qmiVFW3TdmlWRGx7FPcLoP t3cAg28On4YGyVgDgNOov4uvwbBVj2ywb6d6hEJ0kZ0DWpt+WvcKOSmZRDZDeT9Q r+ZntNP49qHrGO0qF+gcAjQuGrbFliZl5+vruEL9iyNiA1cXAx4oZSUC9Mtp6+xI fJ6HE28beCsPwCdm9k8HXQcOA92t5wY= -----END CERTIFICATE-----Generated at Mon Aug 4 22:27:08 2025 by rpki-client