$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c59f4222-5684-3766-ad99-c3dde30ed32e.roa File: c59f4222-5684-3766-ad99-c3dde30ed32e.roa (raw, json) Hash identifier: rrtTUTkqJ1XeRUt6Op8jV404hvKsGHTGL55FvR0Xow0= Subject key identifier: 0D:AC:6D:F9:41:B8:77:B0:D1:BF:85:E7:39:A5:7D:24:6C:5B:25:11 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B6FF7458B06078703FB1E4A00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c59f4222-5684-3766-ad99-c3dde30ed32e.roa Signing time: Tue 07 Oct 2025 01:00:29 +0000 ROA not before: Tue 07 Oct 2025 01:00:29 +0000 ROA not after: Mon 05 Jan 2026 02:00:29 +0000 asID: 30036 IP address blocks: 108.178.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:f7:45:8b:06:07:87:03:fb:1e:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 7 01:00:29 2025 GMT Not After : Jan 5 02:00:29 2026 GMT Subject: CN=8e3fdc6c-8510-436e-8bdd-e86d061fe8df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8d:4f:0a:45:41:3e:fc:fe:a2:dd:84:ac:b6: 93:04:a5:0b:4b:15:8d:f6:64:39:3e:21:a9:32:df: d4:e7:bd:c0:80:1c:02:41:c5:94:76:e5:ca:55:cb: 53:d3:05:3e:0e:95:ae:d4:5c:ea:d2:1a:55:2a:98: e2:e8:b9:5c:99:4a:ee:93:dd:a2:bf:4a:82:c0:ff: 6d:df:f4:73:03:2c:2e:ae:30:94:3a:d1:af:1b:bb: 84:fe:9a:47:35:3a:2d:c7:6a:fa:39:2c:ed:b4:33: 24:ee:23:68:3a:f6:61:3c:41:7a:74:ba:24:76:e8: 15:cf:3c:94:30:37:c1:51:3e:ab:55:56:70:fa:0e: d6:00:1c:42:99:71:17:4c:a5:5c:d7:f5:34:74:c4: 4c:81:6a:68:67:bd:f4:a0:2a:7e:56:ff:00:47:c5: 4d:b0:0a:5e:a7:20:27:8c:46:fb:17:d0:2e:50:b7: 2d:73:7f:f9:18:14:6d:86:e3:cb:27:85:f0:19:19: 03:c0:36:66:5b:3f:f6:10:71:d3:1e:ce:1b:53:98: d3:29:02:c6:ef:ff:13:e0:a5:0b:bf:da:b9:0b:7e: f6:b8:86:30:4e:c9:11:38:b8:79:65:16:8e:ef:c5: 57:26:cb:55:19:93:47:ac:17:fa:5c:b2:aa:9b:10: b7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:AC:6D:F9:41:B8:77:B0:D1:BF:85:E7:39:A5:7D:24:6C:5B:25:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c59f4222-5684-3766-ad99-c3dde30ed32e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.178.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:f1:e6:80:43:7a:62:35:59:42:0f:42:7d:fb:de:6b:29:60: 8b:01:63:f1:f5:79:d7:68:94:f5:cd:de:87:db:8e:aa:43:7a: af:6c:ad:b3:6e:74:84:50:3b:88:18:d8:a0:f8:5b:de:7c:24: af:7e:a2:c5:69:ab:b2:30:04:51:1f:60:11:cf:c4:9a:59:73: a0:39:08:e0:c9:2f:5a:ee:d9:14:a7:69:4c:d3:36:4c:9c:52: ff:e0:a3:bc:0a:c0:fd:6d:fa:b5:c9:2c:6f:a7:c0:7b:39:56: 05:df:63:4f:ec:ec:05:60:b8:b3:81:d7:43:03:6b:28:76:f9: b1:8c:a0:92:ec:1f:2f:d7:d9:4b:0a:9f:a9:a2:42:42:44:72: fd:cd:4b:80:05:1f:31:a4:91:58:fb:a4:84:98:00:67:6f:8e: 7a:8b:fc:c5:f9:ef:4a:3b:45:61:40:5e:7f:58:4f:8c:af:56: 6b:8c:9a:db:83:4c:70:9b:70:d3:35:2c:c4:a3:38:14:33:ca: f9:83:6a:31:77:03:da:a4:a6:04:fc:27:1e:07:6e:0c:7a:af: 4e:0d:6a:ea:a8:3a:57:f3:f4:23:ce:c6:85:02:4c:73:c5:3d: 09:a6:47:67:1f:b2:8b:0e:47:44:45:63:2a:5f:42:59:39:cc: b5:4d:73:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtv90WLBgeHA/seSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAwNzAxMDAyOVoXDTI2MDEwNTAyMDAyOVowLzEtMCsGA1UEAxMk OGUzZmRjNmMtODUxMC00MzZlLThiZGQtZTg2ZDA2MWZlOGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlY1PCkVBPvz+ot2ErLaTBKULSxWN9mQ5PiGp Mt/U573AgBwCQcWUduXKVctT0wU+DpWu1Fzq0hpVKpji6LlcmUruk92iv0qCwP9t 3/RzAywurjCUOtGvG7uE/ppHNTotx2r6OSzttDMk7iNoOvZhPEF6dLokdugVzzyU MDfBUT6rVVZw+g7WABxCmXEXTKVc1/U0dMRMgWpoZ730oCp+Vv8AR8VNsApepyAn jEb7F9AuULctc3/5GBRthuPLJ4XwGRkDwDZmWz/2EHHTHs4bU5jTKQLG7/8T4KUL v9q5C372uIYwTskROLh5ZRaO78VXJstVGZNHrBf6XLKqmxC3NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2sbflBuHew0b+F5zmlfSRsWyURMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYzU5ZjQyMjItNTY4NC0z NzY2LWFkOTktYzNkZGUzMGVkMzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGbLLAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvx5oBDemI1WUIPQn373mspYIsBY/H1eddolPXN3ofbjqpDeq9srbNu dIRQO4gY2KD4W958JK9+osVpq7IwBFEfYBHPxJpZc6A5CODJL1ru2RSnaUzTNkyc Uv/go7wKwP1t+rXJLG+nwHs5VgXfY0/s7AVguLOB10MDayh2+bGMoJLsHy/X2UsK n6miQkJEcv3NS4AFHzGkkVj7pISYAGdvjnqL/MX570o7RWFAXn9YT4yvVmuMmtuD THCbcNM1LMSjOBQzyvmDajF3A9qkpgT8Jx4Hbgx6r04NauqoOlfz9CPOxoUCTHPF PQmmR2cfsosOR0RFYypfQlk5zLVNc8s= -----END CERTIFICATE-----Generated at Sat Oct 11 07:16:29 2025 by rpki-client