$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8a7a8245-8209-3c9b-b475-e880a8a009a3.roa File: 8a7a8245-8209-3c9b-b475-e880a8a009a3.roa (raw, json) Hash identifier: JyBJmbXYq6/SMOdqJfC912aTuQNGDdf00C8yC/t5zAo= Subject key identifier: 8E:EB:B1:7A:03:30:94:90:01:48:21:A1:A8:91:50:13:F3:93:0D:FF Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A7A4B370412B673FC4488D180 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8a7a8245-8209-3c9b-b475-e880a8a009a3.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 852 IP address blocks: 108.180.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:37:04:12:b6:73:fc:44:88:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=1f7c4168-18ec-4ddc-9cc2-160f32db2254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8f:22:e9:a5:ad:ca:c4:4b:6b:da:bf:90:1a: a9:a4:d6:61:e8:4d:a0:01:c8:8f:03:97:2b:d8:fb: 01:66:69:bd:9f:99:b8:5d:6c:c1:b6:51:29:30:c6: 72:50:0e:8a:75:18:65:3a:74:3f:b0:eb:ab:84:72: 4f:48:08:94:e4:f2:b6:5c:6f:e5:3b:be:a4:91:49: 77:61:15:35:2d:12:be:0a:a9:a4:f8:fd:97:f1:ab: ac:56:fc:0e:28:03:41:a3:b0:d5:c7:11:93:22:aa: a6:36:8b:ca:aa:a8:fd:7b:ef:55:6b:ba:e1:6f:55: 69:86:92:43:f1:d7:fe:c7:44:a3:c1:87:e7:9f:d8: f1:bd:c4:5f:36:e4:dc:8c:04:1f:f7:96:58:51:54: 0c:c9:2b:1a:ea:67:ee:cf:dc:07:a5:bb:3f:98:f0: fd:9f:25:81:cf:8a:23:ae:8d:a1:50:04:ec:cd:87: 80:17:ca:74:d3:0a:df:4f:09:75:48:8a:b1:21:fe: ec:6d:36:99:a1:28:fc:05:ad:94:1d:56:93:a5:fd: d4:2a:b9:69:06:cf:65:55:b0:55:44:b3:8f:06:97: 41:80:b0:11:7d:10:5f:b8:0a:59:47:8e:dd:b6:18: bc:43:91:df:93:3a:77:ac:25:1e:4f:75:54:f5:73: c8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:EB:B1:7A:03:30:94:90:01:48:21:A1:A8:91:50:13:F3:93:0D:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8a7a8245-8209-3c9b-b475-e880a8a009a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 108.180.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:ce:c8:e4:57:43:6f:c7:ed:bb:be:75:e0:18:0a:3c:9e:f1: fa:25:51:99:14:31:57:7e:d5:50:ff:5d:82:79:5c:57:fb:27: 97:1b:2e:90:49:ea:a8:3d:3b:8d:4a:a8:84:fa:60:d6:be:10: bb:6d:cb:a5:81:e7:9c:58:3f:d9:fb:e6:dd:2b:b1:29:90:3e: b4:5f:44:45:bb:51:54:5c:47:3d:20:e8:c5:8a:fd:81:90:82: c9:74:00:c7:f7:2c:b7:f2:d7:31:e9:fa:65:b0:68:73:b3:b3: bb:8e:ee:84:1d:13:85:9e:9a:68:cb:31:2a:d5:27:1b:19:fb: 04:01:3c:f2:be:aa:c6:40:d3:02:53:5a:34:1b:06:6d:22:2d: ca:1d:5e:e6:7a:64:78:94:aa:a4:04:89:9d:7d:52:39:a3:4f: ce:38:5d:06:1d:36:29:03:dc:89:51:67:f1:1c:86:5c:86:e2: 75:f7:25:ce:98:28:cb:4e:98:82:ef:b6:15:0f:07:7c:79:aa: 4a:95:c4:a7:47:3b:fe:c4:49:1f:01:54:fc:8a:58:19:6d:52: a2:a7:74:f2:60:1e:0f:f5:e6:08:93:d3:99:31:e5:45:0d:be: 2c:70:22:c6:e2:99:a0:65:45:cc:34:65:1d:db:00:08:92:9b: d5:04:86:33 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEp6SzcEErZz/ESI0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk MWY3YzQxNjgtMThlYy00ZGRjLTljYzItMTYwZjMyZGIyMjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlY8i6aWtysRLa9q/kBqppNZh6E2gAciPA5cr 2PsBZmm9n5m4XWzBtlEpMMZyUA6KdRhlOnQ/sOurhHJPSAiU5PK2XG/lO76kkUl3 YRU1LRK+Cqmk+P2X8ausVvwOKANBo7DVxxGTIqqmNovKqqj9e+9Va7rhb1VphpJD 8df+x0SjwYfnn9jxvcRfNuTcjAQf95ZYUVQMySsa6mfuz9wHpbs/mPD9nyWBz4oj ro2hUATszYeAF8p00wrfTwl1SIqxIf7sbTaZoSj8Ba2UHVaTpf3UKrlpBs9lVbBV RLOPBpdBgLARfRBfuApZR47dthi8Q5Hfkzp3rCUeT3VU9XPIJQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFI7rsXoDMJSQAUghoaiRUBPzkw3/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOGE3YTgyNDUtODIwOS0z YzliLWI0NzUtZTg4MGE4YTAwOWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAbLQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAc87I5FdDb8ftu7514BgKPJ7x+iVRmRQxV37VUP9dgnlcV/snlxsukEnq qD07jUqohPpg1r4Qu23LpYHnnFg/2fvm3SuxKZA+tF9ERbtRVFxHPSDoxYr9gZCC yXQAx/cst/LXMen6ZbBoc7Ozu47uhB0ThZ6aaMsxKtUnGxn7BAE88r6qxkDTAlNa NBsGbSItyh1e5npkeJSqpASJnX1SOaNPzjhdBh02KQPciVFn8RyGXIbidfclzpgo y06Ygu+2FQ8HfHmqSpXEp0c7/sRJHwFU/IpYGW1Soqd08mAeD/XmCJPTmTHlRQ2+ LHAixuKZoGVFzDRlHdsACJKb1QSGMw== -----END CERTIFICATE-----Generated at Fri Jul 25 19:35:12 2025 by rpki-client