$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f4147287-cce9-3a3f-9251-9b92391a0868.roa File: f4147287-cce9-3a3f-9251-9b92391a0868.roa (raw, json) Hash identifier: 7El3xsFXuF4FGYhi2JGmQl9nOUSDLBY67qxj0t6brgw= Subject key identifier: 31:70:87:E6:38:87:1D:19:A1:1C:23:9D:36:77:F5:86:AB:85:01:17 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584A9D30F95252ACDE26AF6CCBA0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f4147287-cce9-3a3f-9251-9b92391a0868.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 15169 IP address blocks: 108.177.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:f9:52:52:ac:de:26:af:6c:cb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=bcd72888-d3f7-4791-848f-9dd48cab4be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5d:4b:cc:38:b0:fd:c7:13:5b:a1:70:9d:ac: 1e:74:64:cd:9e:33:da:ea:52:fb:48:17:32:df:3b: a2:15:32:4f:e8:81:37:36:5c:35:13:ac:9f:c3:e4: 99:fd:fb:26:79:a6:b4:02:40:90:bb:c9:c6:22:76: 68:11:ef:48:28:5d:08:29:61:75:2e:3b:8c:5c:44: b0:d9:05:98:d5:bf:63:8c:80:6b:e2:7e:b4:14:19: e4:55:fd:cc:3a:7a:3c:a4:36:af:5d:f9:4f:8b:b5: 0a:c2:59:2b:29:91:55:45:c6:c1:0c:22:30:c2:5d: 8d:0e:41:43:4e:db:e5:98:21:67:8f:42:2c:70:80: 31:b5:bd:84:95:5f:90:a3:99:61:2f:f8:c5:99:9e: 4f:d3:e0:d3:d9:23:a0:eb:f8:c5:02:f4:c7:0f:eb: b2:b3:2a:0e:65:8e:7c:6a:61:80:4e:87:97:09:bb: 86:cb:1a:ec:8a:f1:8a:7d:61:c6:8a:2c:3d:18:8d: c6:82:c7:84:35:2b:1e:f6:ad:bc:0a:b4:c6:a0:b7: ae:52:a0:f1:fe:b7:d0:8d:91:02:87:7a:eb:df:92: 96:8f:21:36:13:9c:8c:28:7f:7e:46:e4:13:b6:99: ae:ca:5f:68:1a:8a:dc:55:fb:1e:9b:12:79:da:48: 85:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:70:87:E6:38:87:1D:19:A1:1C:23:9D:36:77:F5:86:AB:85:01:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f4147287-cce9-3a3f-9251-9b92391a0868.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 108.177.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:58:d2:67:1e:92:5b:da:91:b7:72:de:91:bb:5d:c4:2c:9f: c6:c2:70:eb:ea:0a:f7:e5:08:cd:6b:0c:ed:d6:29:fb:5b:54: 31:c1:b6:a4:9b:5f:2f:58:33:a1:0b:0f:7e:06:ae:1a:c1:60: d8:2c:bc:2c:6b:fa:a9:be:39:b7:cf:3f:7a:fe:a7:7e:34:54: 6e:88:b1:53:07:3f:7e:c9:4a:fc:20:6e:d6:77:65:52:ed:20: 18:84:72:8f:f8:50:de:1d:cb:fe:59:a2:4b:04:80:7d:84:8e: 94:ff:6b:40:36:25:69:09:30:53:97:81:b7:d2:be:e3:f4:52: 95:b8:64:8e:ef:26:a6:d0:cb:94:4d:f7:ab:5b:2d:15:27:88: f2:a1:db:9a:85:c5:18:f9:79:26:72:f1:d7:c0:b1:19:e5:92: a2:24:7c:9b:0e:e7:21:10:4f:e6:f0:de:8e:08:5a:88:b4:b0: 97:f2:25:8f:ff:1a:15:4d:68:8a:d5:94:dc:72:91:b2:99:da: de:dc:3a:05:c4:5b:f0:7b:e6:c0:41:02:3b:e8:d4:e0:2e:23: 99:aa:88:f9:26:c8:f8:69:a1:ec:0c:9e:44:89:dd:70:38:7a: 53:3d:74:34:72:d4:bb:e4:fe:7b:c4:36:c7:80:0f:6b:31:da: ab:e4:1c:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPlSUqzeJq9sy6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk YmNkNzI4ODgtZDNmNy00NzkxLTg0OGYtOWRkNDhjYWI0YmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV1LzDiw/ccTW6FwnawedGTNnjPa6lL7SBcy 3zuiFTJP6IE3Nlw1E6yfw+SZ/fsmeaa0AkCQu8nGInZoEe9IKF0IKWF1LjuMXESw 2QWY1b9jjIBr4n60FBnkVf3MOno8pDavXflPi7UKwlkrKZFVRcbBDCIwwl2NDkFD TtvlmCFnj0IscIAxtb2ElV+Qo5lhL/jFmZ5P0+DT2SOg6/jFAvTHD+uysyoOZY58 amGAToeXCbuGyxrsivGKfWHGiiw9GI3GgseENSse9q28CrTGoLeuUqDx/rfQjZEC h3rr35KWjyE2E5yMKH9+RuQTtpmuyl9oGorcVfsemxJ52kiF6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFwh+Y4hx0ZoRwjnTZ39YarhQEXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjQxNDcyODctY2NlOS0z YTNmLTkyNTEtOWI5MjM5MWEwODY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLFlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpY0mceklvakbdy3pG7XcQsn8bCcOvqCvflCM1rDO3WKftbVDHBtqSb Xy9YM6ELD34GrhrBYNgsvCxr+qm+ObfPP3r+p340VG6IsVMHP37JSvwgbtZ3ZVLt IBiEco/4UN4dy/5ZoksEgH2EjpT/a0A2JWkJMFOXgbfSvuP0UpW4ZI7vJqbQy5RN 96tbLRUniPKh25qFxRj5eSZy8dfAsRnlkqIkfJsO5yEQT+bw3o4IWoi0sJfyJY// GhVNaIrVlNxykbKZ2t7cOgXEW/B75sBBAjvo1OAuI5mqiPkmyPhpoewMnkSJ3XA4 elM9dDRy1Lvk/nvENseAD2sx2qvkHBU= -----END CERTIFICATE-----Generated at Mon Aug 4 22:28:22 2025 by rpki-client