$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/acfaa87f-57bc-3e3b-bfc3-53e9681dd022.roa File: acfaa87f-57bc-3e3b-bfc3-53e9681dd022.roa (raw, json) Hash identifier: dMgp4A/mf9JcQ9VZBWZfcGB+NsFkRT+gnLKWkxVq4vM= Subject key identifier: 50:E2:A4:DA:47:68:A6:B8:11:BB:37:37:E0:F4:C1:98:81:A8:01:62 Certificate issuer: /CN=0153231e-bade-4c05-b3fd-55b65671daae Certificate serial: 010D0C9F4328584A6E40A3E3C076648C42D9DC00 Authority key identifier: B9:A6:5D:CA:07:55:7E:11:15:64:29:15:E9:88:AC:27:C6:71:22:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/acfaa87f-57bc-3e3b-bfc3-53e9681dd022.roa Signing time: Sun 06 Jul 2025 17:29:55 +0000 ROA not before: Sun 06 Jul 2025 17:29:55 +0000 ROA not after: Sat 04 Oct 2025 17:29:55 +0000 asID: 395153 IP address blocks: 107.182.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6e:40:a3:e3:c0:76:64:8c:42:d9:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0153231e-bade-4c05-b3fd-55b65671daae Validity Not Before: Jul 6 17:29:55 2025 GMT Not After : Oct 4 17:29:55 2025 GMT Subject: CN=3a11d09b-dab5-435b-903d-5248760a6c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b3:ee:4b:d4:96:ed:54:21:0a:4e:1b:e4:9b: 86:ba:a1:66:db:ae:10:07:2a:15:5e:6b:d3:8a:d5: e8:24:44:c7:9a:16:e5:d5:f2:7c:f2:21:a2:05:5d: b0:15:b2:44:de:4b:c7:fb:67:3c:6f:79:c0:cb:12: 3b:39:73:b4:e5:f3:ce:39:57:38:04:f5:29:40:8f: 20:58:65:a1:f2:8f:7c:2a:f6:6b:a6:e7:75:d5:ec: ec:a6:2b:77:1f:bc:a2:4f:b6:7b:4c:9c:16:4b:ae: 04:d1:98:1a:a9:d6:ee:00:5b:d9:49:06:f2:32:db: 87:a2:4e:c2:93:5c:7e:b1:ad:af:bd:d7:eb:bd:03: f0:d0:9c:2d:66:10:7b:74:4f:4f:3d:75:df:67:9b: b2:84:ec:ee:54:96:12:8b:e1:a1:6f:70:6e:35:9e: 34:76:86:d7:00:20:86:48:61:51:cb:70:88:ac:93: f9:ca:85:cb:ef:a8:de:8e:50:a3:2b:95:21:82:df: af:a0:0a:0a:9d:17:00:e1:77:bc:8f:f3:34:5c:42: a2:40:33:0a:fb:2c:c6:24:2b:67:cd:93:72:64:d4: 22:1f:89:d6:98:49:ef:18:99:69:3b:88:d1:fd:8a: 6b:19:c9:23:d9:64:4c:0e:2a:79:00:41:db:84:fd: 5d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E2:A4:DA:47:68:A6:B8:11:BB:37:37:E0:F4:C1:98:81:A8:01:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/acfaa87f-57bc-3e3b-bfc3-53e9681dd022.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.crl X509v3 Authority Key Identifier: keyid:B9:A6:5D:CA:07:55:7E:11:15:64:29:15:E9:88:AC:27:C6:71:22:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer sbgp-ipAddrBlock: critical IPv4: 107.182.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:91:48:3b:c8:2c:c2:44:b2:44:5e:61:d6:96:1e:89:67:39: 6e:d5:df:70:91:81:a0:ab:cd:23:2f:fd:e4:7d:13:35:2d:3e: 43:db:9d:8a:0d:d9:a5:9b:97:53:cc:6c:b9:64:66:ce:f4:22: 46:81:d7:7c:c7:86:f2:7d:1e:6b:0f:c2:02:dd:ac:d4:e0:c6: d2:dd:69:b8:92:20:ca:23:f9:2d:81:71:60:4a:1a:6a:81:5c: fe:1e:a1:98:c1:da:c2:60:ca:08:18:6a:e0:4e:ce:1b:07:b9: bc:18:4f:23:da:24:86:ad:9c:3f:74:4b:ab:95:23:8f:89:71: f9:34:56:d4:14:d2:9b:9c:1f:6c:c5:ee:2f:03:9a:6d:d2:22: db:0f:b6:0a:f0:14:45:cf:8b:04:4d:05:b9:ff:ff:00:17:f9: db:86:8d:5a:f0:0f:f4:f9:7d:57:67:b0:c4:23:ac:c2:e6:46: 15:cb:66:98:c2:b0:73:3b:ca:ed:2e:25:2f:2c:6d:59:0a:0e: 97:0f:1d:f3:0e:b5:0f:63:ab:1f:a8:02:7f:15:c4:d5:2f:4b: 80:d4:5d:65:97:70:b0:3f:27:b7:12:6f:96:c8:e8:ac:48:8c: b4:96:0c:a1:a7:b1:6a:0c:5b:4b:2d:4b:0c:3d:b5:2e:4c:0d: b9:e4:99:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpuQKPjwHZkjELZ3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDE1MzIzMWUtYmFkZS00YzA1LWIzZmQtNTViNjU2NzFk YWFlMB4XDTI1MDcwNjE3Mjk1NVoXDTI1MTAwNDE3Mjk1NVowLzEtMCsGA1UEAxMk M2ExMWQwOWItZGFiNS00MzViLTkwM2QtNTI0ODc2MGE2YzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrPuS9SW7VQhCk4b5JuGuqFm264QByoVXmvT itXoJETHmhbl1fJ88iGiBV2wFbJE3kvH+2c8b3nAyxI7OXO05fPOOVc4BPUpQI8g WGWh8o98KvZrpud11ezspit3H7yiT7Z7TJwWS64E0ZgaqdbuAFvZSQbyMtuHok7C k1x+sa2vvdfrvQPw0JwtZhB7dE9PPXXfZ5uyhOzuVJYSi+Ghb3BuNZ40dobXACCG SGFRy3CIrJP5yoXL76jejlCjK5Uhgt+voAoKnRcA4Xe8j/M0XEKiQDMK+yzGJCtn zZNyZNQiH4nWmEnvGJlpO4jR/YprGckj2WRMDip5AEHbhP1d4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDipNpHaKa4Ebs3N+D0wZiBqAFiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMTUz MjMxZS1iYWRlLTRjMDUtYjNmZC01NWI2NTY3MWRhYWUvYWNmYWE4N2YtNTdiYy0z ZTNiLWJmYzMtNTNlOTY4MWRkMDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDE1MzIzMWUtYmFkZS00YzA1LWIz ZmQtNTViNjU2NzFkYWFlLzAxNTMyMzFlLWJhZGUtNGMwNS1iM2ZkLTU1YjY1Njcx ZGFhZS5jcmwwHwYDVR0jBBgwFoAUuaZdygdVfhEVZCkV6YisJ8ZxImgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wMTUzMjMxZS1iYWRlLTRjMDUtYjNmZC01NWI2 NTY3MWRhYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa7YIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2RSDvILMJEskReYdaWHolnOW7V33CRgaCrzSMv/eR9EzUtPkPbnYoN 2aWbl1PMbLlkZs70IkaB13zHhvJ9HmsPwgLdrNTgxtLdabiSIMoj+S2BcWBKGmqB XP4eoZjB2sJgyggYauBOzhsHubwYTyPaJIatnD90S6uVI4+Jcfk0VtQU0pucH2zF 7i8Dmm3SItsPtgrwFEXPiwRNBbn//wAX+duGjVrwD/T5fVdnsMQjrMLmRhXLZpjC sHM7yu0uJS8sbVkKDpcPHfMOtQ9jqx+oAn8VxNUvS4DUXWWXcLA/J7cSb5bI6KxI jLSWDKGnsWoMW0stSww9tS5MDbnkmTo= -----END CERTIFICATE-----Generated at Wed Jul 9 18:50:44 2025 by rpki-client