$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7e5d6e5-8bcf-305a-88fd-3ad4a3683502.roa File: e7e5d6e5-8bcf-305a-88fd-3ad4a3683502.roa (raw, json) Hash identifier: stE5Dme2vmCb200idw9Lzyb+HZjmDxelKsI8Xdd6WmA= Subject key identifier: C7:33:E1:E2:13:A2:89:9F:93:12:86:ED:1D:97:58:3D:10:9D:F7:78 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A7E7B9B7141337D6C0886A820 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7e5d6e5-8bcf-305a-88fd-3ad4a3683502.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 15169 IP address blocks: 108.177.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:9b:71:41:33:7d:6c:08:86:a8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=5b007712-742c-4788-8dc6-0d97ab097782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d9:e0:21:97:c7:e1:6d:8b:9d:e3:e6:a3:d0: 64:14:29:59:93:bd:d1:4a:92:a0:f0:40:00:02:b8: 01:e2:4c:50:6b:57:83:9c:d4:6d:c9:37:d5:40:8c: 35:9f:fe:1d:08:a9:55:7b:b4:06:04:c8:f4:04:09: b1:0f:97:f5:5c:47:5f:fe:ee:9c:cc:f3:e7:1a:55: 5a:52:ac:23:3a:6b:92:27:a4:4b:aa:10:f1:e4:92: 67:fe:40:8f:0f:e5:97:7a:3e:df:18:4c:01:dc:0b: df:a4:d2:f3:f2:b6:1e:95:8b:cb:39:2b:40:cb:23: 19:9c:ed:6b:98:48:62:41:c6:26:7e:c9:02:c4:34: b2:42:f7:96:4a:ea:f2:4c:a7:99:56:0b:73:a1:de: 31:5b:b9:23:3e:f2:44:f5:7a:7e:2a:ea:69:65:e9: ce:02:68:d2:52:ef:c5:2d:8d:76:cd:c5:28:af:63: 14:7b:af:93:76:e1:a3:26:cf:6e:76:82:59:62:ed: ca:16:d0:ea:c0:d5:89:d4:ba:3b:15:0d:94:0e:02: ed:0b:0f:55:1e:ad:8b:6b:68:7f:25:dd:44:68:db: a7:57:65:a2:79:c6:fb:6e:ac:0f:e3:08:b4:62:56: 12:fa:48:53:1b:e9:e7:7a:10:76:8a:ca:aa:a3:ff: 9d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:33:E1:E2:13:A2:89:9F:93:12:86:ED:1D:97:58:3D:10:9D:F7:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e7e5d6e5-8bcf-305a-88fd-3ad4a3683502.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:21:08:3d:56:30:c4:23:7f:16:2a:a6:2b:4f:93:fc:a9:b6: 94:e1:fb:71:c0:94:b5:d3:c5:96:2b:d9:23:2c:26:bb:33:f0: 22:79:01:45:af:94:cf:db:28:05:e1:63:b1:29:ab:03:a2:2f: fb:7d:05:47:46:a5:da:c7:a9:63:cf:6b:7f:91:e9:77:a7:73: 42:8c:af:e0:b1:47:d0:77:29:ec:8e:ba:77:14:99:8a:71:ef: 35:78:74:f6:ab:27:fe:f6:09:4c:de:d3:a3:17:83:3f:80:df: 63:29:89:ce:2d:30:8c:06:10:f0:90:d9:11:f6:a0:a0:67:f0: 65:e0:1a:bf:03:38:fc:58:c1:54:a5:0b:65:df:ec:9b:eb:88: ed:86:96:01:2c:ce:96:2c:15:15:64:59:25:36:07:65:64:ba: 0e:f7:8e:4f:e8:59:94:b4:48:d4:ad:3a:81:58:5e:61:a3:39: 89:73:97:ba:04:7b:dc:14:22:7b:9f:bc:01:29:69:26:06:b8: c7:07:9a:9d:c1:e1:b2:62:e0:29:a7:69:9b:bb:0c:e3:36:f7: a9:fd:11:43:c9:53:93:61:b9:86:4b:4a:86:0f:04:66:15:09: 14:c1:d0:8f:2c:dd:f3:21:4a:0e:19:54:b1:0f:74:06:9b:45: 83:b3:fe:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e5txQTN9bAiGqCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk NWIwMDc3MTItNzQyYy00Nzg4LThkYzYtMGQ5N2FiMDk3NzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNngIZfH4W2LnePmo9BkFClZk73RSpKg8EAA ArgB4kxQa1eDnNRtyTfVQIw1n/4dCKlVe7QGBMj0BAmxD5f1XEdf/u6czPPnGlVa UqwjOmuSJ6RLqhDx5JJn/kCPD+WXej7fGEwB3AvfpNLz8rYelYvLOStAyyMZnO1r mEhiQcYmfskCxDSyQveWSuryTKeZVgtzod4xW7kjPvJE9Xp+KuppZenOAmjSUu/F LY12zcUor2MUe6+TduGjJs9udoJZYu3KFtDqwNWJ1Lo7FQ2UDgLtCw9VHq2La2h/ Jd1EaNunV2Wiecb7bqwP4wi0YlYS+khTG+nnehB2isqqo/+dSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcz4eIToomfkxKG7R2XWD0Qnfd4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTdlNWQ2ZTUtOGJjZi0z MDVhLTg4ZmQtM2FkNGEzNjgzNTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbLEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFghCD1WMMQjfxYqpitPk/yptpTh+3HAlLXTxZYr2SMsJrsz8CJ5AUWv lM/bKAXhY7EpqwOiL/t9BUdGpdrHqWPPa3+R6Xenc0KMr+CxR9B3KeyOuncUmYpx 7zV4dParJ/72CUze06MXgz+A32Mpic4tMIwGEPCQ2RH2oKBn8GXgGr8DOPxYwVSl C2Xf7JvriO2GlgEszpYsFRVkWSU2B2Vkug73jk/oWZS0SNStOoFYXmGjOYlzl7oE e9wUInufvAEpaSYGuMcHmp3B4bJi4CmnaZu7DOM296n9EUPJU5NhuYZLSoYPBGYV CRTB0I8s3fMhSg4ZVLEPdAabRYOz/mw= -----END CERTIFICATE-----Generated at Mon Aug 4 14:55:14 2025 by rpki-client