$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/57d3021b-d699-3504-9528-d82afc503970.roa File: 57d3021b-d699-3504-9528-d82afc503970.roa (raw, json) Hash identifier: AxfSCnGTbbc630044upJaRhAi6RJ31THx0cpjuvQEM8= Subject key identifier: 33:E9:50:CC:EE:C3:89:4E:EF:5C:52:23:91:E5:94:34:5D:50:98:81 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584B1806C67084C1D5C04DB66870 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/57d3021b-d699-3504-9528-d82afc503970.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 22781 IP address blocks: 108.171.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:c6:70:84:c1:d5:c0:4d:b6:68:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=278c2837-d527-4dba-beb3-c1b103a7aca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cd:88:e6:86:2a:1e:bb:d1:fb:c0:b0:c2:54: 2d:f0:19:f2:24:58:8a:a5:c9:d6:ca:1c:52:09:b5: 17:f8:fa:6a:50:e6:42:ca:95:43:30:3d:c4:40:f3: 8c:2a:2f:af:4a:ba:8c:45:93:67:05:0c:b1:a7:2b: b2:e4:d2:97:00:46:d3:6c:74:84:2a:af:9a:fb:9d: 23:49:0f:92:60:49:04:a3:81:b7:b4:fe:3f:bb:45: 5b:f6:fa:9d:2e:ea:14:24:64:ad:c0:b2:99:bf:49: 5f:26:6c:4a:6b:98:43:bb:82:bb:e6:d9:88:82:7c: 2d:b5:f5:1f:ed:2b:7e:96:69:39:36:aa:0d:7f:44: 0b:f8:e8:58:29:3f:28:87:f3:46:1f:46:99:de:cd: c3:8b:82:0e:2e:13:d2:63:0e:c6:1c:f9:59:9c:4f: 6c:fa:b3:d0:45:3c:6b:08:f3:8e:66:09:8d:5e:76: c3:51:d8:6f:83:0e:67:50:69:cb:9e:a9:e0:44:12: f2:e3:5b:25:9b:1a:ec:b9:b4:33:e9:07:c8:e2:7a: 82:cd:74:60:80:f9:c3:96:1b:1d:3c:84:0e:06:62: 01:54:ef:52:09:ae:b9:32:ee:2d:d7:7d:d3:cb:b6: de:76:7d:c1:9e:3b:a1:03:de:ca:57:f5:a7:f2:d8: d5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E9:50:CC:EE:C3:89:4E:EF:5C:52:23:91:E5:94:34:5D:50:98:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/57d3021b-d699-3504-9528-d82afc503970.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 108.171.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:8f:59:5e:29:d8:e6:27:6e:d4:a1:c6:92:34:37:79:87:0d: 8a:d9:70:e4:15:61:25:0e:6d:d6:82:e9:a5:f5:dd:e2:74:98: 05:62:c8:da:2f:dc:b6:d2:bb:7d:4a:c5:7f:a4:2d:e6:5c:dc: 82:3f:df:3b:e8:07:79:9e:ff:0c:53:86:d2:c4:b2:b0:82:ef: 05:f6:13:7b:c6:b2:be:05:6d:b3:6a:69:e5:c2:bc:58:03:a2: be:23:c8:e6:10:d0:fe:e4:cb:fa:8b:9e:f2:13:53:a9:8f:cc: 84:fa:9f:08:97:ca:cc:da:c5:b1:89:2b:e3:45:bc:ed:41:43: 93:70:e0:00:e3:3c:3c:ba:09:37:77:c0:e3:3a:92:69:b9:25: c6:a3:42:00:3f:51:25:84:4f:f3:14:2c:32:8d:6c:0b:0d:b0: 32:a1:77:21:b4:7c:9f:92:c6:f9:9a:54:84:33:a2:47:84:e5: 7a:f2:79:65:69:f0:38:b8:bd:18:11:59:a3:f7:76:4f:18:e4: f1:3b:38:49:3c:2c:83:1a:65:77:54:29:96:11:1d:f9:75:5c: 5c:1e:24:7d:fe:c7:61:65:db:39:13:d0:03:d1:62:4b:47:f7: c4:8c:73:97:c8:dc:60:ba:ef:39:30:6d:58:46:5f:1b:24:f6: cc:90:47:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBsZwhMHVwE22aHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk Mjc4YzI4MzctZDUyNy00ZGJhLWJlYjMtYzFiMTAzYTdhY2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM2I5oYqHrvR+8CwwlQt8BnyJFiKpcnWyhxS CbUX+PpqUOZCypVDMD3EQPOMKi+vSrqMRZNnBQyxpyuy5NKXAEbTbHSEKq+a+50j SQ+SYEkEo4G3tP4/u0Vb9vqdLuoUJGStwLKZv0lfJmxKa5hDu4K75tmIgnwttfUf 7St+lmk5NqoNf0QL+OhYKT8oh/NGH0aZ3s3Di4IOLhPSYw7GHPlZnE9s+rPQRTxr CPOOZgmNXnbDUdhvgw5nUGnLnqngRBLy41slmxrsubQz6QfI4nqCzXRggPnDlhsd PIQOBmIBVO9SCa65Mu4t133Ty7bedn3BnjuhA97KV/Wn8tjV4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPpUMzuw4lO71xSI5HllDRdUJiBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvNTdkMzAyMWItZDY5OS0z NTA0LTk1MjgtZDgyYWZjNTAzOTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDbKtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCPWV4p2OYnbtShxpI0N3mHDYrZcOQVYSUObdaC6aX13eJ0mAViyNov 3LbSu31KxX+kLeZc3II/3zvoB3me/wxThtLEsrCC7wX2E3vGsr4FbbNqaeXCvFgD or4jyOYQ0P7ky/qLnvITU6mPzIT6nwiXyszaxbGJK+NFvO1BQ5Nw4ADjPDy6CTd3 wOM6kmm5JcajQgA/USWET/MULDKNbAsNsDKhdyG0fJ+SxvmaVIQzokeE5XryeWVp 8Di4vRgRWaP3dk8Y5PE7OEk8LIMaZXdUKZYRHfl1XFweJH3+x2Fl2zkT0APRYktH 98SMc5fI3GC67zkwbVhGXxsk9syQR6U= -----END CERTIFICATE-----Generated at Fri Sep 5 19:59:00 2025 by rpki-client