$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/995862e5-8418-3ea5-8c84-7a2f80c0b372.roa File: 995862e5-8418-3ea5-8c84-7a2f80c0b372.roa (raw, json) Hash identifier: 83OhMcdGo6mvBOk11LcmWsXwNrWn6lYiOD41C7mZewk= Subject key identifier: 84:E8:E3:A2:34:1F:39:A9:C9:C4:78:9B:60:91:87:42:0F:B1:52:34 Certificate issuer: /CN=0153231e-bade-4c05-b3fd-55b65671daae Certificate serial: 010D0C9F4328584A730A6A5A117AE564A4271680 Authority key identifier: B9:A6:5D:CA:07:55:7E:11:15:64:29:15:E9:88:AC:27:C6:71:22:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/995862e5-8418-3ea5-8c84-7a2f80c0b372.roa Signing time: Tue 08 Jul 2025 10:39:42 +0000 ROA not before: Tue 08 Jul 2025 10:39:42 +0000 ROA not after: Mon 06 Oct 2025 10:39:42 +0000 asID: 11070 IP address blocks: 107.182.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:0a:6a:5a:11:7a:e5:64:a4:27:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0153231e-bade-4c05-b3fd-55b65671daae Validity Not Before: Jul 8 10:39:42 2025 GMT Not After : Oct 6 10:39:42 2025 GMT Subject: CN=36cf31c0-5d07-4ca1-bd9d-092ebc8e694d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3b:ed:35:25:8d:af:51:d3:a0:69:47:b8:8f: 89:ac:8c:42:de:88:fc:69:74:76:6f:1e:80:f6:42: 1d:16:02:22:75:08:21:10:7e:4c:0e:6c:e0:34:5c: 7e:44:51:22:3c:b3:21:9c:53:4c:48:b1:06:11:80: db:fa:35:37:a9:cd:71:1f:fe:64:66:3c:c5:32:8e: e8:3b:2d:3a:43:e3:8f:8d:ec:aa:c5:ae:d0:fd:9c: 7b:d3:ff:5d:6d:74:15:a7:43:bf:54:ac:25:e8:de: f3:ae:c1:7d:28:47:cf:10:28:92:81:79:24:85:1e: 0e:51:d5:77:b8:41:70:e4:ab:3b:62:1d:4a:3f:e8: 5d:4d:3c:25:16:15:06:88:22:69:8e:0a:d0:93:0c: f9:37:50:02:eb:04:98:80:28:e8:57:26:14:e7:9e: 38:78:28:c1:58:46:74:4a:96:b9:e2:fe:b4:d3:57: 2a:58:3d:ba:a0:b8:59:fb:57:9c:da:14:07:7a:21: 2b:b2:1f:61:ba:04:2e:70:8e:77:ed:95:4b:45:9e: 66:fd:04:bb:7f:d9:08:d5:db:f1:c3:9c:45:37:aa: 55:41:6b:c2:08:51:b6:2b:bb:51:9a:4c:e5:9d:20: d3:0e:4b:af:63:14:13:20:c1:dd:a4:bf:51:c2:30: 65:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E8:E3:A2:34:1F:39:A9:C9:C4:78:9B:60:91:87:42:0F:B1:52:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/995862e5-8418-3ea5-8c84-7a2f80c0b372.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.crl X509v3 Authority Key Identifier: keyid:B9:A6:5D:CA:07:55:7E:11:15:64:29:15:E9:88:AC:27:C6:71:22:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer sbgp-ipAddrBlock: critical IPv4: 107.182.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:40:4c:26:dc:80:a2:bf:a5:87:cb:50:ce:8a:b6:f9:02:d8: a2:f7:62:a4:e3:9b:16:0b:cd:49:62:ea:0b:a1:a6:b9:0e:ce: 0d:31:2b:d4:83:77:cc:9b:b9:ee:00:f4:25:cf:76:74:87:ed: 1e:53:85:52:d8:46:61:81:d8:62:41:92:1c:92:39:9e:f0:4a: 8d:c0:6a:54:c9:b6:b6:60:84:aa:c2:3c:d1:50:76:0d:97:e8: 83:46:aa:ca:75:41:6a:13:3e:01:97:d6:be:a8:1f:85:f8:ef: f3:63:10:b1:c0:73:59:d8:9e:8d:60:3d:08:f1:eb:4b:2f:f0: 54:79:f2:23:1e:99:a8:7f:be:ae:a7:3f:8b:8b:84:76:9f:30: b8:75:49:c3:81:c2:a6:ca:62:7e:6d:f6:11:36:ca:27:c2:b7: 74:92:32:d4:47:52:6a:94:f8:47:57:23:f0:9f:71:71:49:b5: 33:fd:c4:6f:34:fb:66:60:4f:ee:a1:f8:df:11:9d:48:05:4a: 8c:ca:77:77:4b:52:8e:0e:71:62:99:a1:ac:c8:8e:e9:f2:ca: 67:85:28:91:2b:24:f1:44:28:c1:e7:be:e0:09:bc:2a:70:15: 81:33:70:c3:f8:69:42:7b:fd:4b:0c:dd:c0:35:dc:a4:4b:21: 9c:ce:79:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzCmpaEXrlZKQnFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDE1MzIzMWUtYmFkZS00YzA1LWIzZmQtNTViNjU2NzFk YWFlMB4XDTI1MDcwODEwMzk0MloXDTI1MTAwNjEwMzk0MlowLzEtMCsGA1UEAxMk MzZjZjMxYzAtNWQwNy00Y2ExLWJkOWQtMDkyZWJjOGU2OTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jvtNSWNr1HToGlHuI+JrIxC3oj8aXR2bx6A 9kIdFgIidQghEH5MDmzgNFx+RFEiPLMhnFNMSLEGEYDb+jU3qc1xH/5kZjzFMo7o Oy06Q+OPjeyqxa7Q/Zx70/9dbXQVp0O/VKwl6N7zrsF9KEfPECiSgXkkhR4OUdV3 uEFw5Ks7Yh1KP+hdTTwlFhUGiCJpjgrQkwz5N1AC6wSYgCjoVyYU5544eCjBWEZ0 Spa54v6001cqWD26oLhZ+1ec2hQHeiErsh9hugQucI537ZVLRZ5m/QS7f9kI1dvx w5xFN6pVQWvCCFG2K7tRmkzlnSDTDkuvYxQTIMHdpL9RwjBlmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITo46I0HzmpycR4m2CRh0IPsVI0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMTUz MjMxZS1iYWRlLTRjMDUtYjNmZC01NWI2NTY3MWRhYWUvOTk1ODYyZTUtODQxOC0z ZWE1LThjODQtN2EyZjgwYzBiMzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDE1MzIzMWUtYmFkZS00YzA1LWIz ZmQtNTViNjU2NzFkYWFlLzAxNTMyMzFlLWJhZGUtNGMwNS1iM2ZkLTU1YjY1Njcx ZGFhZS5jcmwwHwYDVR0jBBgwFoAUuaZdygdVfhEVZCkV6YisJ8ZxImgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wMTUzMjMxZS1iYWRlLTRjMDUtYjNmZC01NWI2 NTY3MWRhYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa7YOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtATCbcgKK/pYfLUM6KtvkC2KL3YqTjmxYLzUli6guhprkOzg0xK9SD d8ybue4A9CXPdnSH7R5ThVLYRmGB2GJBkhySOZ7wSo3AalTJtrZghKrCPNFQdg2X 6INGqsp1QWoTPgGX1r6oH4X47/NjELHAc1nYno1gPQjx60sv8FR58iMemah/vq6n P4uLhHafMLh1ScOBwqbKYn5t9hE2yifCt3SSMtRHUmqU+EdXI/CfcXFJtTP9xG80 +2ZgT+6h+N8RnUgFSozKd3dLUo4OcWKZoazIjunyymeFKJErJPFEKMHnvuAJvCpw FYEzcMP4aUJ7/UsM3cA13KRLIZzOeTo= -----END CERTIFICATE-----Generated at Wed Jul 9 07:02:43 2025 by rpki-client