$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/a6c2ce00-62a3-3a65-8ea6-fc714e76be82.roa File: a6c2ce00-62a3-3a65-8ea6-fc714e76be82.roa (raw, json) Hash identifier: evOgOEaBaRsOUIn0uEqbkhFTAroHEi+5M6kFpKLsSOo= Subject key identifier: DD:86:C0:93:D2:33:96:07:29:E2:C2:70:83:7A:EB:EF:BF:53:6A:1E Certificate issuer: /CN=af3da563-8689-4ebd-a553-31a2f310113a Certificate serial: 010D0C9F4328584A9ADFFEF3D36728217AD06820 Authority key identifier: A6:AF:DB:BC:B6:BD:07:C4:FC:50:80:BB:DA:6D:DC:37:E0:69:92:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/a6c2ce00-62a3-3a65-8ea6-fc714e76be82.roa Signing time: Tue 22 Jul 2025 17:06:34 +0000 ROA not before: Tue 22 Jul 2025 17:06:34 +0000 ROA not after: Mon 20 Oct 2025 17:06:34 +0000 asID: 399688 IP address blocks: 108.174.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/af3da563-8689-4ebd-a553-31a2f310113a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/af3da563-8689-4ebd-a553-31a2f310113a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:df:fe:f3:d3:67:28:21:7a:d0:68:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af3da563-8689-4ebd-a553-31a2f310113a Validity Not Before: Jul 22 17:06:34 2025 GMT Not After : Oct 20 17:06:34 2025 GMT Subject: CN=fd8478df-9603-4009-90dc-a33af7c47351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:77:12:4b:6c:3f:c1:ac:2f:da:31:d5:c2:d5: ff:fe:a3:a0:19:90:b5:26:b4:b0:3f:85:e1:a3:73: b3:e6:1d:f6:c2:c9:25:99:f4:9b:3d:7b:9c:bf:81: 75:f2:99:31:50:e3:a0:65:33:4c:d3:14:15:3e:85: b0:e8:b5:bb:a7:7d:c3:49:72:4b:09:61:e8:f5:24: 8c:4b:6e:7c:f2:b8:f7:48:43:dd:d8:32:7a:c4:87: 7f:f1:d7:e6:53:ca:35:04:60:67:f8:ce:86:42:8a: 67:cd:44:26:6d:a5:09:53:77:ab:61:75:d6:34:2f: 71:6c:31:fe:8f:25:a3:62:21:6d:06:d4:d1:4b:9c: 20:fa:3c:fe:b1:d2:e4:a0:7b:69:47:b3:c9:d3:29: 6c:12:2e:48:9b:ba:c3:0a:55:cd:05:d3:a7:c6:b8: 01:61:62:38:f7:f1:04:72:2e:b9:ce:9c:5a:7d:ec: a7:ba:3b:09:45:db:8e:c6:ab:85:bc:71:b0:d5:76: f3:81:0c:b6:02:74:1f:1d:cf:11:1f:50:51:d9:de: a5:db:02:0d:4b:5d:e7:3d:1b:45:89:2c:2c:47:6e: a9:dc:07:b7:ea:4f:47:2f:97:f2:34:89:17:5d:4c: 82:50:65:28:c5:f3:fb:6a:fd:d4:4d:2c:50:20:b5: 4b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:86:C0:93:D2:33:96:07:29:E2:C2:70:83:7A:EB:EF:BF:53:6A:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/a6c2ce00-62a3-3a65-8ea6-fc714e76be82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/af3da563-8689-4ebd-a553-31a2f310113a.crl X509v3 Authority Key Identifier: keyid:A6:AF:DB:BC:B6:BD:07:C4:FC:50:80:BB:DA:6D:DC:37:E0:69:92:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a.cer sbgp-ipAddrBlock: critical IPv4: 108.174.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:39:79:c2:32:9c:68:d9:8f:79:a1:82:b5:fc:0f:45:b2:18: 7d:ca:3d:68:f1:a0:e4:4c:7a:d4:82:05:ab:fe:ac:f3:85:15: 6f:48:de:04:25:42:60:a4:0f:12:7d:6e:3c:96:a5:a1:5c:60: 13:f4:48:82:2f:60:9a:22:69:e6:93:ff:1b:0b:fd:01:2d:83: 4c:9a:7e:10:e6:ab:b9:30:e2:41:bb:30:39:17:2e:a1:b8:56: e6:63:b6:f3:14:13:7d:c5:d7:c3:a3:f4:01:c2:72:b7:6b:50: 65:95:a1:41:71:1c:bd:d8:ae:a5:ce:ba:f2:0d:60:e8:3e:17: 5e:c1:99:1d:53:4a:28:14:c7:98:31:ae:db:02:6c:97:57:d8: 02:52:6b:71:d6:cf:f1:8b:09:e2:93:f8:3f:3e:9f:b5:ae:82: 78:39:5b:10:06:41:80:fa:bc:24:1f:28:5e:01:f1:4c:e5:4d: 15:79:5e:ca:80:44:4b:e1:98:26:18:7e:67:f6:48:15:69:39: 17:d7:8a:db:c4:05:b7:7c:1a:8b:12:f6:37:c7:5d:8f:2c:7b: 80:d1:9f:1b:0d:4b:99:12:55:16:ce:5b:47:80:d6:be:4f:0c: 63:bf:46:31:2f:31:35:c7:a9:90:ac:7d:b8:51:ad:0c:4c:6b: d8:b6:29:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqa3/7z02coIXrQaCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWYzZGE1NjMtODY4OS00ZWJkLWE1NTMtMzFhMmYzMTAx MTNhMB4XDTI1MDcyMjE3MDYzNFoXDTI1MTAyMDE3MDYzNFowLzEtMCsGA1UEAxMk ZmQ4NDc4ZGYtOTYwMy00MDA5LTkwZGMtYTMzYWY3YzQ3MzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13cSS2w/wawv2jHVwtX//qOgGZC1JrSwP4Xh o3Oz5h32wsklmfSbPXucv4F18pkxUOOgZTNM0xQVPoWw6LW7p33DSXJLCWHo9SSM S2588rj3SEPd2DJ6xId/8dfmU8o1BGBn+M6GQopnzUQmbaUJU3erYXXWNC9xbDH+ jyWjYiFtBtTRS5wg+jz+sdLkoHtpR7PJ0ylsEi5Im7rDClXNBdOnxrgBYWI49/EE ci65zpxafeynujsJRduOxquFvHGw1XbzgQy2AnQfHc8RH1BR2d6l2wINS13nPRtF iSwsR26p3Ae36k9HL5fyNIkXXUyCUGUoxfP7av3UTSxQILVLJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2GwJPSM5YHKeLCcIN66++/U2oeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hZjNk YTU2My04Njg5LTRlYmQtYTU1My0zMWEyZjMxMDExM2EvYTZjMmNlMDAtNjJhMy0z YTY1LThlYTYtZmM3MTRlNzZiZTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWYzZGE1NjMtODY4OS00ZWJkLWE1 NTMtMzFhMmYzMTAxMTNhL2FmM2RhNTYzLTg2ODktNGViZC1hNTUzLTMxYTJmMzEw MTEzYS5jcmwwHwYDVR0jBBgwFoAUpq/bvLa9B8T8UIC72m3cN+BpkuAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hZjNkYTU2My04Njg5LTRlYmQtYTU1My0zMWEy ZjMxMDExM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbK5GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGo5ecIynGjZj3mhgrX8D0WyGH3KPWjxoORMetSCBav+rPOFFW9I3gQl QmCkDxJ9bjyWpaFcYBP0SIIvYJoiaeaT/xsL/QEtg0yafhDmq7kw4kG7MDkXLqG4 VuZjtvMUE33F18Oj9AHCcrdrUGWVoUFxHL3YrqXOuvINYOg+F17BmR1TSigUx5gx rtsCbJdX2AJSa3HWz/GLCeKT+D8+n7Wugng5WxAGQYD6vCQfKF4B8UzlTRV5XsqA REvhmCYYfmf2SBVpORfXitvEBbd8GosS9jfHXY8se4DRnxsNS5kSVRbOW0eA1r5P DGO/RjEvMTXHqZCsfbhRrQxMa9i2KQg= -----END CERTIFICATE-----Generated at Sat Aug 9 10:37:48 2025 by rpki-client