$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/af654061-1034-3ea0-91ea-d6d38a6e397c.roa File: af654061-1034-3ea0-91ea-d6d38a6e397c.roa (raw, json) Hash identifier: sgwsYXY81Jp/uCwmBAGKQV1/Jf55Qv3wWXLZ7wTnIUg= Subject key identifier: 06:59:6A:60:FA:C9:23:4D:C2:24:FC:AF:A8:5F:CE:74:B7:43:3D:DE Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F43285849F01A7410562B3DCC18BBAB00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/af654061-1034-3ea0-91ea-d6d38a6e397c.roa Signing time: Thu 22 May 2025 13:01:05 +0000 ROA not before: Thu 22 May 2025 13:01:05 +0000 ROA not after: Wed 20 Aug 2025 13:01:05 +0000 asID: 30036 IP address blocks: 108.178.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f0:1a:74:10:56:2b:3d:cc:18:bb:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: May 22 13:01:05 2025 GMT Not After : Aug 20 13:01:05 2025 GMT Subject: CN=9c75e268-5356-4850-9854-6e233b59baa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9d:24:a2:b8:4f:89:4d:79:91:fb:25:d5:b7: c7:55:5b:3f:85:29:1b:fd:22:f3:0a:ec:5d:92:5c: 88:99:bb:a6:d1:9d:0e:8f:20:64:43:f3:82:e9:c9: a6:4e:cf:fd:8c:59:8c:72:74:f7:cf:1c:55:5d:d1: 57:5e:7f:de:35:f1:d2:e8:7d:63:cf:43:f1:95:41: ff:c2:3c:8d:45:a6:56:20:5b:4b:f5:5e:b0:60:11: f6:8d:9f:b1:2c:7f:9d:f5:e7:58:69:d4:89:b8:af: d6:8d:77:10:18:cd:fb:f8:ad:26:44:5e:e5:d2:80: 6b:8b:37:1c:1e:6c:e2:b0:cc:8e:a9:87:5b:d8:e5: 49:0f:19:12:35:df:21:12:cb:06:3f:cd:82:b2:28: 5c:ff:a5:6c:45:19:c3:99:ff:2f:9b:e4:7c:cf:c3: ed:a5:b2:6d:aa:70:f5:c7:51:8d:66:43:35:b8:b6: e0:ce:1c:ea:1f:fd:12:33:83:b2:7e:88:54:c3:40: e5:55:76:c2:f0:52:67:70:cf:ff:52:06:b3:ae:8f: 31:c8:e7:87:9e:63:76:64:29:ca:ef:2e:e1:40:a8: 1c:4e:60:5e:5e:28:ab:72:67:86:40:74:d6:21:e6: e9:18:2b:86:d5:90:b4:09:0d:9a:f6:b7:4a:b7:61: 8c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:59:6A:60:FA:C9:23:4D:C2:24:FC:AF:A8:5F:CE:74:B7:43:3D:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/af654061-1034-3ea0-91ea-d6d38a6e397c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.178.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:02:b1:31:f3:19:5d:2f:fc:98:b2:34:f2:88:b6:d8:2e:62: 3f:82:fa:a2:ea:44:0c:5f:f1:19:84:06:c8:a8:fc:d1:3d:59: 23:be:80:8b:2a:d6:b5:5d:d9:ec:09:87:99:98:74:5b:33:5d: 7d:4b:3d:c6:22:02:8f:1e:eb:82:53:c9:3b:9b:19:21:d8:eb: db:22:7c:7e:4a:cc:98:99:39:e4:75:c8:7e:e2:eb:22:87:43: 81:79:a9:29:f5:25:62:74:16:0a:f7:19:50:8c:d9:24:8d:02: 83:c6:cb:ae:ad:41:71:2c:c7:d6:ea:75:61:42:a7:a5:11:d7: 26:3f:ef:ec:38:71:a8:2d:b9:bf:ba:1a:b1:25:4b:a6:c4:5b: 5d:2e:61:ff:74:fe:6f:8c:68:bf:61:69:cb:1b:ce:8d:b0:5d: 3c:ae:12:32:f5:16:b5:81:4e:ca:05:79:1c:56:88:0e:90:15: 82:cb:a0:d5:d9:73:a6:8b:d6:2d:55:b1:15:1d:e8:8d:3d:0a: e8:df:38:68:c8:11:6c:fc:1f:e8:d6:fe:3b:c4:63:99:9b:11: 56:0e:6f:78:32:45:72:17:8e:bd:e4:6c:fc:46:78:bf:26:5c: 80:44:63:b6:24:99:9c:16:9e:a4:2a:65:48:6a:6e:49:c4:5e: 54:d6:86:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnwGnQQVis9zBi7qwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk OWM3NWUyNjgtNTM1Ni00ODUwLTk4NTQtNmUyMzNiNTliYWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp0korhPiU15kfsl1bfHVVs/hSkb/SLzCuxd klyImbum0Z0OjyBkQ/OC6cmmTs/9jFmMcnT3zxxVXdFXXn/eNfHS6H1jz0PxlUH/ wjyNRaZWIFtL9V6wYBH2jZ+xLH+d9edYadSJuK/WjXcQGM37+K0mRF7l0oBrizcc HmzisMyOqYdb2OVJDxkSNd8hEssGP82Csihc/6VsRRnDmf8vm+R8z8PtpbJtqnD1 x1GNZkM1uLbgzhzqH/0SM4OyfohUw0DlVXbC8FJncM//Ugazro8xyOeHnmN2ZCnK 7y7hQKgcTmBeXiircmeGQHTWIebpGCuG1ZC0CQ2a9rdKt2GMaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZZamD6ySNNwiT8r6hfznS3Qz3eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYWY2NTQwNjEtMTAzNC0z ZWEwLTkxZWEtZDZkMzhhNmUzOTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLLMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMCsTHzGV0v/JiyNPKIttguYj+C+qLqRAxf8RmEBsio/NE9WSO+gIsq 1rVd2ewJh5mYdFszXX1LPcYiAo8e64JTyTubGSHY69sifH5KzJiZOeR1yH7i6yKH Q4F5qSn1JWJ0Fgr3GVCM2SSNAoPGy66tQXEsx9bqdWFCp6UR1yY/7+w4cagtub+6 GrElS6bEW10uYf90/m+MaL9hacsbzo2wXTyuEjL1FrWBTsoFeRxWiA6QFYLLoNXZ c6aL1i1VsRUd6I09CujfOGjIEWz8H+jW/jvEY5mbEVYOb3gyRXIXjr3kbPxGeL8m XIBEY7YkmZwWnqQqZUhqbknEXlTWhl0= -----END CERTIFICATE-----Generated at Sun Jun 8 12:44:19 2025 by rpki-client