$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/0afcc72f-4569-3c7a-a33b-6e304c1f1729.roa File: 0afcc72f-4569-3c7a-a33b-6e304c1f1729.roa (raw, json) Hash identifier: pNGDHUUkPGdXybvZo7JR+/PlIBkEU/lEo93vJ7P/waY= Subject key identifier: 6C:C6:24:63:63:3A:93:EB:93:CA:35:38:AF:FA:F5:60:15:EB:68:74 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584B0E416491FF547B52551CD180 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/0afcc72f-4569-3c7a-a33b-6e304c1f1729.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 397477 IP address blocks: 108.59.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:64:91:ff:54:7b:52:55:1c:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=da7f82b2-37af-4652-8c2b-14a55614aaf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f2:5d:ec:3c:56:d2:79:c7:05:fd:5d:0b:e0: 71:ea:04:cc:04:6f:7e:cd:75:d2:d0:37:ea:f6:ce: a9:74:a1:af:83:cb:ab:1b:b6:cd:fe:03:0b:9f:d9: 1c:34:f1:7c:7d:d6:9f:de:d5:35:21:83:ba:f2:3f: 5c:08:91:9f:52:a9:ce:66:1b:46:8b:b0:36:f8:b3: c0:ad:dc:6d:07:6d:47:2b:03:e1:24:db:e2:14:80: 72:89:38:5c:3c:26:9c:cf:bb:71:c9:4b:da:54:d5: be:62:e9:20:c3:a2:28:a8:ad:09:c8:d3:4e:58:fb: e5:ac:91:03:93:36:72:04:ae:0e:ea:9d:4e:5c:3e: ad:30:50:ed:17:3b:39:51:0c:46:e1:ee:e7:f0:2b: 3f:85:42:b0:a1:35:ea:6a:fc:70:9f:91:95:ff:92: e5:a6:ae:b2:a3:72:07:09:bb:cf:d7:f1:b1:7e:5e: d8:bd:b2:5c:7d:cf:c9:70:f6:ae:96:7c:c5:16:06: e1:75:63:a3:91:c2:d1:6e:50:15:62:23:06:c8:d2: 53:20:33:09:c0:70:b2:32:1b:ca:9f:a6:2d:14:c5: cd:74:ce:30:37:d3:ff:20:15:ad:51:9c:76:b0:4b: c0:1d:ed:5b:d6:e1:b1:08:95:d5:96:4e:4d:bc:86: 2c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C6:24:63:63:3A:93:EB:93:CA:35:38:AF:FA:F5:60:15:EB:68:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/0afcc72f-4569-3c7a-a33b-6e304c1f1729.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 108.59.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:8a:63:73:13:f8:9f:b1:e9:59:76:4a:cc:6a:a2:4a:00:f4: 3f:0a:a1:9c:7e:ba:3a:d2:14:2c:6c:fb:59:53:d0:34:20:39: 57:0c:9f:79:33:94:dc:ee:0d:8e:7e:27:db:35:53:57:bd:78: 91:71:c3:01:73:ea:e5:95:ee:7d:f8:20:ab:7c:63:f1:fb:ab: 1a:30:a6:93:1a:16:43:95:98:46:71:56:6a:ca:f6:4d:25:88: ae:3e:6b:42:85:6b:fa:8d:71:42:d8:c2:e2:a4:b5:a1:93:c5: ea:cd:73:07:d8:d4:a9:dd:49:a2:25:bc:60:b2:cb:ff:3c:ed: f3:09:22:db:d8:6a:b8:64:d9:d4:b8:8a:3b:b2:81:17:ca:47: 9e:bf:43:a2:4f:9b:58:ac:f8:6f:d2:89:6f:13:a1:27:fe:73: 1f:18:d6:8d:62:65:9b:9d:c6:86:3d:05:7d:e8:a1:aa:0f:48: 05:0b:24:65:b8:fd:e6:45:f1:3b:85:67:dc:a3:43:34:0a:70: bc:ce:11:b2:b4:06:10:9c:b4:c7:41:e1:45:db:c2:ac:92:2f: 65:f3:36:54:5b:a3:7c:b3:56:d2:4e:ac:7a:55:ff:37:65:fe: 0a:c8:35:e0:3f:69:c3:cd:7d:92:a4:6b:f9:a0:0d:93:8b:f0: d3:de:dc:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQWSR/1R7UlUc0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZGE3ZjgyYjItMzdhZi00NjUyLThjMmItMTRhNTU2MTRhYWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPJd7DxW0nnHBf1dC+Bx6gTMBG9+zXXS0Dfq 9s6pdKGvg8urG7bN/gMLn9kcNPF8fdaf3tU1IYO68j9cCJGfUqnOZhtGi7A2+LPA rdxtB21HKwPhJNviFIByiThcPCacz7txyUvaVNW+Yukgw6IoqK0JyNNOWPvlrJED kzZyBK4O6p1OXD6tMFDtFzs5UQxG4e7n8Cs/hUKwoTXqavxwn5GV/5Llpq6yo3IH CbvP1/Gxfl7YvbJcfc/JcPaulnzFFgbhdWOjkcLRblAVYiMGyNJTIDMJwHCyMhvK n6YtFMXNdM4wN9P/IBWtUZx2sEvAHe1b1uGxCJXVlk5NvIYsXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzGJGNjOpPrk8o1OK/69WAV62h0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvMGFmY2M3MmYtNDU2OS0z YzdhLWEzM2ItNmUzMDRjMWYxNzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDvxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmKY3MT+J+x6Vl2SsxqokoA9D8KoZx+ujrSFCxs+1lT0DQgOVcMn3kz lNzuDY5+J9s1U1e9eJFxwwFz6uWV7n34IKt8Y/H7qxowppMaFkOVmEZxVmrK9k0l iK4+a0KFa/qNcULYwuKktaGTxerNcwfY1KndSaIlvGCyy/887fMJItvYarhk2dS4 ijuygRfKR56/Q6JPm1is+G/SiW8ToSf+cx8Y1o1iZZudxoY9BX3ooaoPSAULJGW4 /eZF8TuFZ9yjQzQKcLzOEbK0BhCctMdB4UXbwqySL2XzNlRbo3yzVtJOrHpV/zdl /grINeA/acPNfZKka/mgDZOL8NPe3L8= -----END CERTIFICATE-----Generated at Sun Sep 7 15:41:59 2025 by rpki-client