$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/af654061-1034-3ea0-91ea-d6d38a6e397c.roa File: af654061-1034-3ea0-91ea-d6d38a6e397c.roa (raw, json) Hash identifier: A1q68KSNe3l4dhN8DLH/aVp+jtc8Tf/hGSpk039ukrQ= Subject key identifier: 38:94:5D:86:7B:B8:F2:4A:CF:2C:39:4B:E5:4F:37:B6:BE:F2:32:71 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584AD0D666DEC9C9E6E5442FBA40 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/af654061-1034-3ea0-91ea-d6d38a6e397c.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 30036 IP address blocks: 108.178.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:66:de:c9:c9:e6:e5:44:2f:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=8a1b7552-fbe6-42f7-bb1a-37172864e47e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d1:ff:51:b8:44:58:40:b0:e9:08:a3:67:c5: 4f:8c:fb:3c:8f:73:bb:cc:2a:e5:0d:98:e8:b4:ac: 49:be:c7:bb:e6:c9:54:13:21:ac:99:81:47:1e:57: d7:d2:eb:95:ca:d2:f8:7c:09:84:2f:0d:61:e0:81: 47:63:7e:e0:6f:93:c7:73:bd:f4:0e:39:05:e7:3e: 60:a3:d7:14:a7:35:75:98:da:7e:06:d3:9a:51:e1: 5a:72:4c:06:9f:a0:85:11:93:10:e3:e4:5a:4e:33: fb:2a:0c:05:65:b4:9d:43:36:ca:2f:7c:e7:fc:b5: 4f:63:80:37:42:cb:61:25:96:ff:a3:e6:43:52:ea: c6:98:ad:4f:42:0f:28:8d:b3:a5:e4:6c:1b:8d:e1: ed:b6:32:5d:69:e0:b6:fd:9e:af:6d:e6:48:bc:c7: a9:32:0e:59:05:53:2a:d0:13:f3:6c:7e:70:94:ae: 4b:f7:e4:d8:3a:62:80:37:3c:db:65:14:af:b9:a3: bb:9b:85:8d:47:57:ae:8a:c5:cf:6e:a2:c6:d5:d2: ab:66:ec:7e:51:21:47:9e:a0:7c:37:cb:42:f3:cf: 1d:8b:44:3b:93:7a:6d:3f:36:cd:25:9d:6d:6c:e8: e3:29:d9:9f:6f:a1:49:de:e4:d5:6b:bd:14:f1:fd: fb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:94:5D:86:7B:B8:F2:4A:CF:2C:39:4B:E5:4F:37:B6:BE:F2:32:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/af654061-1034-3ea0-91ea-d6d38a6e397c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 108.178.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:2a:40:7d:08:c2:43:18:4c:f4:5a:36:2a:f3:70:73:70:1e: b8:57:88:0c:27:8b:d3:c5:02:1c:50:ac:a6:78:a1:e5:df:0c: 89:77:54:cf:eb:6d:60:54:c7:22:c1:ea:7b:e8:93:e5:33:ad: 8a:54:44:c0:4e:a8:3c:fb:f9:a8:c6:b1:73:62:87:28:ac:44: 1f:57:17:95:bf:74:8a:e2:f3:95:4a:37:5d:bb:3c:d3:03:24: fe:37:ea:c8:20:47:6a:16:38:38:6c:f0:a1:c2:ff:82:7b:43: ad:9c:18:4c:f4:16:f6:bc:9b:66:5f:41:59:0e:b4:ce:fa:9e: b3:bb:0e:2a:a3:76:ce:cc:64:8a:dc:df:45:5a:50:46:ff:45: 59:11:4c:34:04:ef:61:8e:fd:17:43:0c:79:90:40:21:f5:46: e2:b1:9d:82:6b:e3:b6:5d:21:f2:b2:10:ad:10:12:78:99:74: f1:de:bf:6e:a9:7e:9f:d9:57:4b:9d:e3:8e:33:f5:e9:3f:e9: d9:d0:bf:86:3a:e6:a2:4f:16:18:b5:6a:18:37:6f:75:15:75: 17:bc:f5:36:14:05:5e:ce:95:15:d6:75:20:3e:2f:2a:0a:92: bf:b1:e2:1d:69:5e:2d:e8:8e:ff:a5:f8:fb:32:04:d0:0a:c3: 1a:5a:15:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1mbeycnm5UQvukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk OGExYjc1NTItZmJlNi00MmY3LWJiMWEtMzcxNzI4NjRlNDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdH/UbhEWECw6QijZ8VPjPs8j3O7zCrlDZjo tKxJvse75slUEyGsmYFHHlfX0uuVytL4fAmELw1h4IFHY37gb5PHc730DjkF5z5g o9cUpzV1mNp+BtOaUeFackwGn6CFEZMQ4+RaTjP7KgwFZbSdQzbKL3zn/LVPY4A3 QsthJZb/o+ZDUurGmK1PQg8ojbOl5GwbjeHttjJdaeC2/Z6vbeZIvMepMg5ZBVMq 0BPzbH5wlK5L9+TYOmKANzzbZRSvuaO7m4WNR1euisXPbqLG1dKrZux+USFHnqB8 N8tC888di0Q7k3ptPzbNJZ1tbOjjKdmfb6FJ3uTVa70U8f373QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiUXYZ7uPJKzyw5S+VPN7a+8jJxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYWY2NTQwNjEtMTAzNC0z ZWEwLTkxZWEtZDZkMzhhNmUzOTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLLMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8qQH0IwkMYTPRaNirzcHNwHrhXiAwni9PFAhxQrKZ4oeXfDIl3VM/r bWBUxyLB6nvok+UzrYpURMBOqDz7+ajGsXNihyisRB9XF5W/dIri85VKN127PNMD JP436sggR2oWODhs8KHC/4J7Q62cGEz0Fva8m2ZfQVkOtM76nrO7Diqjds7MZIrc 30VaUEb/RVkRTDQE72GO/RdDDHmQQCH1RuKxnYJr47ZdIfKyEK0QEniZdPHev26p fp/ZV0ud444z9ek/6dnQv4Y65qJPFhi1ahg3b3UVdRe89TYUBV7OlRXWdSA+LyoK kr+x4h1pXi3ojv+l+PsyBNAKwxpaFTc= -----END CERTIFICATE-----Generated at Thu Aug 21 07:19:32 2025 by rpki-client