$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/2b184cbc-fddf-31e3-a0f0-e99ac4b243f5.roa File: 2b184cbc-fddf-31e3-a0f0-e99ac4b243f5.roa (raw, json) Hash identifier: Btvdj3AFpFmYdJwlZYCVOcAEgNpt9/CDSf6YHqO5JX4= Subject key identifier: 2A:4B:E4:38:2D:F1:1A:9C:A5:6B:26:FE:86:DB:C6:AC:ED:D2:E6:B9 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584A58CB094698892DAD4A7F0060 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/2b184cbc-fddf-31e3-a0f0-e99ac4b243f5.roa Signing time: Sun 29 Jun 2025 01:00:50 +0000 ROA not before: Sun 29 Jun 2025 01:00:50 +0000 ROA not after: Sat 27 Sep 2025 01:00:50 +0000 asID: 62651 IP address blocks: 108.171.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:cb:09:46:98:89:2d:ad:4a:7f:00:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Jun 29 01:00:50 2025 GMT Not After : Sep 27 01:00:50 2025 GMT Subject: CN=e4558045-1355-47d8-ab9d-cd903eb1cd4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6c:df:4d:a1:bb:b8:74:96:71:33:e2:c0:32: 67:8b:58:a9:a4:af:0f:d0:f8:2a:0a:cf:7e:7f:1b: 03:d6:a9:bf:01:c3:a4:4c:a1:80:1d:96:0b:e5:fb: 14:2d:fd:79:d9:d4:c9:2d:7f:9c:b6:0f:b5:c6:51: 08:65:62:6e:7b:07:61:56:d2:ec:ff:66:c1:2c:5f: d3:63:11:06:ee:88:f7:b1:84:66:93:6b:d6:c8:c9: c6:b5:07:e6:ca:37:5c:15:8a:52:6f:4f:42:45:43: 8a:f1:a2:0e:d7:44:a5:84:2b:f9:a8:39:16:bb:0e: a9:c9:6f:0d:f1:21:b1:7b:54:10:ef:61:7c:77:9c: cb:c7:7a:be:3e:28:82:f6:0c:b4:1a:4d:7e:a9:80: 99:0a:ff:4c:e9:82:7c:c0:9a:64:43:0e:fa:4f:c6: 7c:3e:93:bb:4e:cc:0f:67:0a:4a:3c:f1:93:f8:13: ab:ca:0a:13:32:a0:a1:f4:a3:63:0f:39:ed:51:65: b8:0f:92:09:df:9e:38:62:24:be:fc:ed:17:b4:11: c9:51:43:24:c1:ca:ba:f1:c2:ad:91:d6:b6:3d:49: d8:cd:1c:97:af:8e:65:d8:51:4d:12:17:13:b9:94: 61:32:07:4e:4b:a3:20:d9:6c:3a:a0:61:77:57:11: e3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4B:E4:38:2D:F1:1A:9C:A5:6B:26:FE:86:DB:C6:AC:ED:D2:E6:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/2b184cbc-fddf-31e3-a0f0-e99ac4b243f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 108.171.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:c3:dd:57:f5:53:86:6f:1a:18:49:e3:43:a0:00:0f:e5:b2: c1:00:44:6d:9a:7e:1b:12:4d:b5:44:37:8b:05:27:f2:90:7b: ae:34:96:e3:97:a0:f6:e9:3a:9c:47:b1:a2:a6:6d:ba:c2:54: 0c:90:5b:42:16:9e:a0:36:77:47:d9:f4:f9:b4:4e:c0:aa:87: a4:18:ad:f5:b1:0f:ef:3e:fa:34:d6:87:24:b2:3a:b9:1c:ea: 27:78:d5:a8:38:57:41:bb:76:29:41:0d:ee:d7:12:e8:1f:b1: 27:d0:2d:d2:08:44:c9:5e:2a:56:25:64:cc:a4:ac:b1:6c:57: 34:4f:91:7d:1b:b0:95:8e:f8:8f:1d:61:46:91:22:34:45:9b: 8a:41:f8:e0:e6:88:05:1e:48:75:5b:47:26:22:e2:bc:83:05: 89:0e:c1:0b:30:dc:66:d9:33:aa:28:9c:82:f9:e0:6b:d6:ba: 57:16:14:a6:8c:3a:31:d7:43:d5:0c:70:55:44:d2:bd:4c:d9: e9:f2:f9:b8:a1:49:63:d2:c0:d3:af:84:f8:ea:24:a1:03:9e: 98:17:c0:3e:f2:24:05:fd:ba:0f:60:c4:3f:34:ce:00:4d:f0: 8f:db:83:9f:3c:f5:15:82:bf:00:7a:bf:1d:00:1b:74:d5:ff: e6:ea:40:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpYywlGmIktrUp/AGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk ZTQ1NTgwNDUtMTM1NS00N2Q4LWFiOWQtY2Q5MDNlYjFjZDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2zfTaG7uHSWcTPiwDJni1ippK8P0PgqCs9+ fxsD1qm/AcOkTKGAHZYL5fsULf152dTJLX+ctg+1xlEIZWJuewdhVtLs/2bBLF/T YxEG7oj3sYRmk2vWyMnGtQfmyjdcFYpSb09CRUOK8aIO10SlhCv5qDkWuw6pyW8N 8SGxe1QQ72F8d5zLx3q+PiiC9gy0Gk1+qYCZCv9M6YJ8wJpkQw76T8Z8PpO7TswP ZwpKPPGT+BOrygoTMqCh9KNjDzntUWW4D5IJ3544YiS+/O0XtBHJUUMkwcq68cKt kda2PUnYzRyXr45l2FFNEhcTuZRhMgdOS6Mg2Ww6oGF3VxHj/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpL5Dgt8RqcpWsm/obbxqzt0ua5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMmIxODRjYmMtZmRkZi0z MWUzLWEwZjAtZTk5YWM0YjI0M2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbKtoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrD3Vf1U4ZvGhhJ40OgAA/lssEARG2afhsSTbVEN4sFJ/KQe640luOX oPbpOpxHsaKmbbrCVAyQW0IWnqA2d0fZ9Pm0TsCqh6QYrfWxD+8++jTWhySyOrkc 6id41ag4V0G7dilBDe7XEugfsSfQLdIIRMleKlYlZMykrLFsVzRPkX0bsJWO+I8d YUaRIjRFm4pB+ODmiAUeSHVbRyYi4ryDBYkOwQsw3GbZM6oonIL54GvWulcWFKaM OjHXQ9UMcFVE0r1M2eny+bihSWPSwNOvhPjqJKEDnpgXwD7yJAX9ug9gxD80zgBN 8I/bg5889RWCvwB6vx0AG3TV/+bqQPA= -----END CERTIFICATE-----Generated at Wed Jul 23 02:10:02 2025 by rpki-client