$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bde6c327-7b42-3611-af47-4dc5ecb72b42.roa File: bde6c327-7b42-3611-af47-4dc5ecb72b42.roa (raw, json) Hash identifier: c0C4entzLkHzEtpvYZNw7I500MmVtvmrC+sDOCwXtbo= Subject key identifier: 2C:CB:E2:04:34:BB:71:E9:54:92:71:43:54:82:10:2A:48:FF:2B:DE Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584A6DBB4179CFFD1F41058F2800 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bde6c327-7b42-3611-af47-4dc5ecb72b42.roa Signing time: Sun 06 Jul 2025 13:01:03 +0000 ROA not before: Sun 06 Jul 2025 13:01:03 +0000 ROA not after: Sat 04 Oct 2025 13:01:03 +0000 asID: 212609 IP address blocks: 108.165.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6d:bb:41:79:cf:fd:1f:41:05:8f:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Jul 6 13:01:03 2025 GMT Not After : Oct 4 13:01:03 2025 GMT Subject: CN=f3aa1998-5e5c-4cc4-9dbb-ebd9af6d67c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9f:d7:55:e5:c2:d2:6e:f3:45:b4:26:4a:d7: b7:71:ee:2a:e2:05:59:ef:25:0a:77:9e:3f:ff:58: c5:01:5f:1f:3f:d6:2b:e3:b8:60:94:29:30:be:e0: 3c:56:33:25:0c:a8:a8:c7:5f:2e:80:d6:60:26:c5: 8b:83:95:3d:a8:fd:72:ef:1a:99:37:b3:d8:59:5b: 90:d9:40:96:8a:01:2a:96:63:fb:d6:9a:da:ed:4a: 81:1a:65:02:c0:14:7f:6c:ad:88:0c:b9:27:1a:5c: 1a:45:0a:5b:6b:8b:5a:dd:39:24:12:d6:79:97:ca: 86:40:6a:05:c7:19:b1:18:4f:e5:74:5b:5d:62:6e: 6c:a6:d8:da:4a:59:2d:d7:5c:32:60:ff:10:de:5e: 97:6c:c4:bc:e1:5f:fe:39:74:f6:95:ef:86:b3:90: b8:ea:6e:1d:b3:9b:26:f2:b5:ec:7d:79:0d:94:d0: e7:47:79:da:4d:dd:ae:68:00:53:1e:93:c1:c4:01: e8:21:a6:31:82:c9:ca:8c:32:5c:bc:fe:4e:42:c9: 49:1a:22:84:cc:b6:75:2c:06:cc:1a:dd:51:29:3d: 41:be:aa:0c:58:cc:0a:fd:c8:3c:25:0a:cd:63:06: d8:e7:d3:47:77:85:19:93:b0:3f:65:8d:42:1d:2a: 92:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:CB:E2:04:34:BB:71:E9:54:92:71:43:54:82:10:2A:48:FF:2B:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/bde6c327-7b42-3611-af47-4dc5ecb72b42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 108.165.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:2c:dd:b3:ec:04:3a:12:93:84:ab:10:c6:c5:79:dc:04:75: 6a:d0:d4:1a:07:42:58:81:6e:66:6d:67:42:0d:de:a1:d6:79: 00:83:c6:4d:b8:3b:7b:c3:53:3f:b4:8e:99:55:36:de:f0:58: c9:40:8d:7e:d5:c8:86:bc:a2:4a:e3:1e:ce:4d:c9:a8:6c:c0: 61:d8:20:5c:98:03:f5:c0:ff:57:1d:7a:dd:74:80:54:82:33: 32:cb:58:9d:c4:6d:cb:3f:d8:d1:67:70:fd:92:c3:c5:6e:e5: 02:ad:a7:dc:8b:74:71:28:d3:ec:90:b3:95:25:40:04:97:fb: f9:df:e6:9f:fd:55:21:48:0d:a5:66:08:60:85:b2:40:57:37: b2:15:38:22:2e:e2:59:5f:58:01:04:5b:78:92:1a:16:ff:5f: c8:73:bf:e7:c6:75:7f:80:03:f8:ca:b5:55:c7:00:43:f7:f1: 49:33:40:96:a9:b1:17:05:07:13:8a:a6:a7:72:51:27:b5:1a: 14:74:8f:b6:ae:9e:a2:e9:2e:88:00:3d:bd:83:6d:df:9a:f7: 1c:1a:52:20:57:80:95:85:20:85:15:1a:24:08:46:f8:ce:53: fc:2e:17:e1:60:8d:a9:c0:8e:52:47:58:4f:d4:5f:1a:33:2e: f3:c3:ac:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptu0F5z/0fQQWPKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk ZjNhYTE5OTgtNWU1Yy00Y2M0LTlkYmItZWJkOWFmNmQ2N2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp/XVeXC0m7zRbQmSte3ce4q4gVZ7yUKd54/ /1jFAV8fP9Yr47hglCkwvuA8VjMlDKiox18ugNZgJsWLg5U9qP1y7xqZN7PYWVuQ 2UCWigEqlmP71pra7UqBGmUCwBR/bK2IDLknGlwaRQpba4ta3TkkEtZ5l8qGQGoF xxmxGE/ldFtdYm5sptjaSlkt11wyYP8Q3l6XbMS84V/+OXT2le+Gs5C46m4ds5sm 8rXsfXkNlNDnR3naTd2uaABTHpPBxAHoIaYxgsnKjDJcvP5OQslJGiKEzLZ1LAbM Gt1RKT1BvqoMWMwK/cg8JQrNYwbY59NHd4UZk7A/ZY1CHSqSzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzL4gQ0u3HpVJJxQ1SCECpI/yveMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvYmRlNmMzMjctN2I0Mi0z NjExLWFmNDctNGRjNWVjYjcyYjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0s3bPsBDoSk4SrEMbFedwEdWrQ1BoHQliBbmZtZ0IN3qHWeQCDxk24 O3vDUz+0jplVNt7wWMlAjX7VyIa8okrjHs5NyahswGHYIFyYA/XA/1cdet10gFSC MzLLWJ3Ebcs/2NFncP2Sw8Vu5QKtp9yLdHEo0+yQs5UlQASX+/nf5p/9VSFIDaVm CGCFskBXN7IVOCIu4llfWAEEW3iSGhb/X8hzv+fGdX+AA/jKtVXHAEP38UkzQJap sRcFBxOKpqdyUSe1GhR0j7aunqLpLogAPb2Dbd+a9xwaUiBXgJWFIIUVGiQIRvjO U/wuF+FgjanAjlJHWE/UXxozLvPDrHI= -----END CERTIFICATE-----Generated at Sun Jul 6 23:16:41 2025 by rpki-client