$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e3c11be6-5b2b-36be-b0de-2021cecfc3af.roa File: e3c11be6-5b2b-36be-b0de-2021cecfc3af.roa (raw, json) Hash identifier: igwTSc6heIqkzkBdONuFA4bdjj/Gu16DJqYvqQXWtmw= Subject key identifier: 56:44:61:9D:C3:32:FF:3D:95:E7:0C:96:2F:D6:EC:0E:C1:87:C1:98 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A7E7B9D026E53E6B659BA5580 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e3c11be6-5b2b-36be-b0de-2021cecfc3af.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 108.170.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:9d:02:6e:53:e6:b6:59:ba:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=1e2ae904-d864-4492-a84e-7099b58e2d89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:df:5e:c7:2a:37:26:8f:77:03:a0:49:bf:b0: 64:1f:a2:5d:51:94:e7:16:cb:9f:44:ec:3a:6d:7c: 88:05:e6:db:44:6d:3b:85:c8:38:52:c0:46:66:83: a6:3a:e3:6b:1a:f5:28:a3:c7:33:1a:31:76:c1:91: 00:96:d6:ac:45:d3:7c:04:f2:69:ef:74:4a:b7:ba: af:04:a2:82:4e:d4:41:9e:5c:48:6e:c9:14:b2:03: a2:0b:d4:ee:fe:87:bd:15:7e:38:0d:d8:62:e1:11: a5:f6:b4:68:cc:b2:3b:3f:af:73:c5:01:e4:0f:50: 42:84:07:d9:e7:42:c9:0e:1f:70:c2:9e:6f:36:e4: 67:f0:40:83:ac:46:89:dc:11:85:30:7a:4e:9b:7a: 0d:d1:bb:6d:7e:0f:21:d5:1a:bc:6d:72:35:be:20: 9d:8f:c6:4b:72:f8:29:f6:88:e6:24:eb:5b:dd:e0: 06:fe:36:bc:88:51:d6:e0:27:33:b2:bd:16:6e:63: 82:df:65:8d:21:c7:2d:88:19:2a:f4:36:4b:44:d1: 99:58:0d:8a:d0:4f:94:f2:11:c5:ae:54:4a:99:28: 6d:bd:7f:1f:c0:21:b7:7b:0f:2b:db:0a:fd:21:43: 1c:73:cf:58:d4:6d:f2:f3:ea:43:92:7e:20:59:c2: 92:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:44:61:9D:C3:32:FF:3D:95:E7:0C:96:2F:D6:EC:0E:C1:87:C1:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e3c11be6-5b2b-36be-b0de-2021cecfc3af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.170.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:92:25:ee:1b:a9:af:a2:24:48:2c:53:28:31:cf:3b:d8:2f: 8a:81:95:ca:1b:da:3b:40:d0:8f:6d:c0:e5:8d:69:7d:e9:e9: a4:c0:b0:d8:bf:6a:d1:b4:2e:24:f7:42:60:e1:fc:e0:46:03: 24:ce:77:04:5d:e5:88:1b:27:07:65:ff:1d:ac:0c:59:f5:81: ba:cb:32:bf:73:c7:99:ee:7d:b1:e9:76:9d:c3:b7:bf:de:dc: b2:5c:0c:ed:9d:c9:9c:72:18:98:0c:e4:5a:06:37:0e:c6:38: 76:5b:7c:f2:4a:8b:92:44:0b:3e:d1:14:0b:3c:ba:78:e7:b1: 0f:45:49:99:ce:a8:e6:71:25:02:08:08:57:0c:ef:94:10:f8: 23:f6:6f:3d:7c:9f:f7:9c:e7:ff:aa:2e:d1:30:2b:ce:1d:60: 61:a7:81:bc:77:9b:63:d9:aa:ed:b8:27:18:ed:89:62:0d:ff: b8:eb:ba:b2:1a:6d:49:c9:9f:d5:19:61:d5:ed:5a:00:77:dc: 2b:dd:d3:05:77:1e:24:e9:ad:a0:21:70:a8:ab:57:2d:3f:25: 54:88:d2:ad:6b:57:7b:17:cf:c4:ce:b9:55:7f:2b:03:c5:74: 26:91:a3:67:b3:9f:f7:64:a4:9c:b0:bb:b7:9c:36:eb:3b:9e: 44:0a:71:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e50CblPmtlm6VYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MWUyYWU5MDQtZDg2NC00NDkyLWE4NGUtNzA5OWI1OGUyZDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkd9exyo3Jo93A6BJv7BkH6JdUZTnFsufROw6 bXyIBebbRG07hcg4UsBGZoOmOuNrGvUoo8czGjF2wZEAltasRdN8BPJp73RKt7qv BKKCTtRBnlxIbskUsgOiC9Tu/oe9FX44Ddhi4RGl9rRozLI7P69zxQHkD1BChAfZ 50LJDh9wwp5vNuRn8ECDrEaJ3BGFMHpOm3oN0bttfg8h1Rq8bXI1viCdj8ZLcvgp 9ojmJOtb3eAG/ja8iFHW4Cczsr0WbmOC32WNIcctiBkq9DZLRNGZWA2K0E+U8hHF rlRKmShtvX8fwCG3ew8r2wr9IUMcc89Y1G3y8+pDkn4gWcKSqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZEYZ3DMv89lecMli/W7A7Bh8GYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTNjMTFiZTYtNWIyYi0z NmJlLWIwZGUtMjAyMWNlY2ZjM2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKrbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaSJe4bqa+iJEgsUygxzzvYL4qBlcob2jtA0I9twOWNaX3p6aTAsNi/ atG0LiT3QmDh/OBGAyTOdwRd5YgbJwdl/x2sDFn1gbrLMr9zx5nufbHpdp3Dt7/e 3LJcDO2dyZxyGJgM5FoGNw7GOHZbfPJKi5JECz7RFAs8unjnsQ9FSZnOqOZxJQII CFcM75QQ+CP2bz18n/ec5/+qLtEwK84dYGGngbx3m2PZqu24JxjtiWIN/7jrurIa bUnJn9UZYdXtWgB33Cvd0wV3HiTpraAhcKirVy0/JVSI0q1rV3sXz8TOuVV/KwPF dCaRo2ezn/dkpJywu7ecNus7nkQKcX8= -----END CERTIFICATE-----Generated at Mon Aug 4 22:27:20 2025 by rpki-client