$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df0f12d4-87c9-3563-b9bd-ebecf732394b.roa File: df0f12d4-87c9-3563-b9bd-ebecf732394b.roa (raw, json) Hash identifier: UbM13lmpfgFtI/P10ua1N+rUvYJd0dhdVmzoriO3cNA= Subject key identifier: AB:59:AE:92:D4:1A:04:D2:7D:77:72:E4:CD:42:F8:E6:29:4F:02:18 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A7E7B8DDA107580B7183F3700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df0f12d4-87c9-3563-b9bd-ebecf732394b.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 108.177.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:8d:da:10:75:80:b7:18:3f:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=c4f6aad4-3422-49f8-b161-b9927caaeb76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cd:8a:3a:07:41:67:61:74:49:a0:93:16:37: 8f:8c:de:f3:00:55:34:57:98:ff:03:08:0f:04:3e: 1f:0d:ff:15:ec:a8:f5:49:b8:d3:35:eb:fc:8f:ca: eb:ed:45:91:53:d0:ec:00:a2:60:51:0b:b8:77:67: 1f:26:a7:f0:38:cd:55:64:d7:c3:65:39:13:c6:f2: f1:30:ab:78:37:5f:0b:f3:26:51:88:14:f3:0c:ca: 74:6f:db:28:de:b5:9f:8b:17:8f:03:26:18:e5:3b: 52:83:c2:10:bb:f3:e3:23:d7:ef:cb:d5:c8:a7:7e: ba:cb:27:0c:16:64:68:a1:b3:3d:9a:70:06:6f:ac: 2d:1b:1e:f9:2a:8c:50:ff:bf:eb:9e:d9:e0:28:5e: e9:f8:8d:74:14:71:d4:dc:92:e4:96:a9:12:b1:74: fa:22:ea:ee:43:01:6b:f9:97:e1:3a:9b:13:4e:48: c7:6d:21:a9:ee:28:ef:ee:f0:c1:65:7c:1b:36:cf: b1:ac:b6:0d:95:8d:09:36:a8:a9:6e:0e:ef:08:80: 56:c9:bb:20:ca:7c:d5:28:38:3b:3b:35:95:81:54: c5:a4:fe:ee:f7:90:d7:79:b9:4b:e5:a0:56:29:55: 73:0e:cf:07:7a:d3:6e:54:ea:59:aa:b6:cf:71:79: bd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:59:AE:92:D4:1A:04:D2:7D:77:72:E4:CD:42:F8:E6:29:4F:02:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df0f12d4-87c9-3563-b9bd-ebecf732394b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:6f:bc:8a:3b:56:53:1b:b2:e7:4c:b8:b4:1d:d0:37:36:01: 22:88:83:46:9e:00:d4:96:2f:54:61:e0:28:72:ec:12:1a:57: e0:f9:ed:c4:09:a9:0d:14:c3:b8:d6:ab:73:af:a3:af:8c:e3: 71:36:e7:22:40:e7:8a:c7:7f:69:be:d7:0b:ee:ba:d4:7c:ef: 44:81:b8:ec:ff:14:5c:fe:de:62:00:24:5f:2f:09:16:22:c7: ca:05:e0:0e:de:cb:e1:3d:98:f9:8d:8c:5e:d3:3d:d9:bd:c9: d1:40:2d:18:8f:49:23:cd:f1:81:09:3b:f7:bf:fb:6c:c1:3e: c4:c5:09:48:1b:20:3e:03:c4:26:6e:8f:ee:37:e0:66:d4:3d: 54:bb:ac:70:ee:b1:02:d3:7c:55:43:95:a1:a0:58:aa:4f:c7: 45:f3:43:61:74:13:4b:59:97:64:04:5e:a8:63:28:04:34:2a: 11:3d:4d:1a:61:cc:80:22:d1:79:75:4c:de:d1:dd:d8:cf:e7: e9:bb:ac:d4:74:c4:56:1f:bb:ba:de:ff:82:41:a3:61:35:00: d3:e5:8c:c7:b2:2a:70:de:22:f0:3c:69:d4:64:2f:a2:61:b7: 8f:b9:f4:7a:f4:8d:8d:33:dc:81:e6:fd:30:46:40:5c:98:0f: c1:91:b2:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e43aEHWAtxg/NwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk YzRmNmFhZDQtMzQyMi00OWY4LWIxNjEtYjk5MjdjYWFlYjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlc2KOgdBZ2F0SaCTFjePjN7zAFU0V5j/AwgP BD4fDf8V7Kj1SbjTNev8j8rr7UWRU9DsAKJgUQu4d2cfJqfwOM1VZNfDZTkTxvLx MKt4N18L8yZRiBTzDMp0b9so3rWfixePAyYY5TtSg8IQu/PjI9fvy9XIp366yycM FmRoobM9mnAGb6wtGx75KoxQ/7/rntngKF7p+I10FHHU3JLklqkSsXT6IuruQwFr +ZfhOpsTTkjHbSGp7ijv7vDBZXwbNs+xrLYNlY0JNqipbg7vCIBWybsgynzVKDg7 OzWVgVTFpP7u95DXeblL5aBWKVVzDs8HetNuVOpZqrbPcXm92wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtZrpLUGgTSfXdy5M1C+OYpTwIYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGYwZjEyZDQtODdjOS0z NTYzLWI5YmQtZWJlY2Y3MzIzOTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLEWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVvvIo7VlMbsudMuLQd0Dc2ASKIg0aeANSWL1Rh4Chy7BIaV+D57cQJ qQ0Uw7jWq3Ovo6+M43E25yJA54rHf2m+1wvuutR870SBuOz/FFz+3mIAJF8vCRYi x8oF4A7ey+E9mPmNjF7TPdm9ydFALRiPSSPN8YEJO/e/+2zBPsTFCUgbID4DxCZu j+434GbUPVS7rHDusQLTfFVDlaGgWKpPx0XzQ2F0E0tZl2QEXqhjKAQ0KhE9TRph zIAi0Xl1TN7R3djP5+m7rNR0xFYfu7re/4JBo2E1ANPljMeyKnDeIvA8adRkL6Jh t4+59Hr0jY0z3IHm/TBGQFyYD8GRsn4= -----END CERTIFICATE-----Generated at Wed Aug 6 07:49:32 2025 by rpki-client