$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/98da9661-0d10-3896-a771-a2ee1d490a36.roa File: 98da9661-0d10-3896-a771-a2ee1d490a36.roa (raw, json) Hash identifier: qn99h0C8+4ooZoirQ7jS5sJ/2dTb03i22xyTI/sCyEU= Subject key identifier: 9C:F6:D9:CA:0F:46:E9:D1:8D:69:8B:90:AC:E5:FA:57:6D:19:E0:6A Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F4328584A4970652E261DD03C820ED708 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/98da9661-0d10-3896-a771-a2ee1d490a36.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 29867 IP address blocks: 72.10.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:65:2e:26:1d:d0:3c:82:0e:d7:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=e01a50ae-83b0-4e97-ba37-41678c0fc23e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:dc:2b:d9:f6:6e:fd:43:5e:54:18:33:46:80: 9e:44:46:4e:71:4f:63:ba:35:50:3d:ae:7a:69:88: f1:37:ee:f0:85:c7:7d:e3:76:15:09:5a:18:b1:e7: 30:a5:fe:77:b1:29:8d:0d:67:7e:f7:6d:2b:fb:ad: 73:ff:b5:40:61:1a:ef:cc:90:eb:d6:ec:93:8b:e6: da:1a:c2:79:05:ec:9e:bf:fe:85:f5:2b:64:b1:61: 85:4a:83:2d:87:65:aa:32:3b:3b:ed:05:ee:1f:ec: 1a:a7:b0:ad:10:6e:f7:5a:e9:8a:a4:26:3b:fa:5f: 3e:2b:78:46:1d:9e:66:af:09:e8:16:59:75:3d:08: 59:b7:4c:af:b7:a0:00:bf:9e:b5:bb:7c:08:9f:8c: 9d:11:9f:69:c6:4f:ba:9f:f6:e4:19:0f:4e:ef:80: ac:5a:66:4b:29:17:70:7a:9c:1a:24:55:d8:63:de: f4:85:a9:dd:b2:21:44:f9:72:b9:7f:18:47:bb:b0: 41:08:ae:b9:da:15:32:71:7f:56:b9:b8:47:43:24: 3d:c1:3e:3f:e9:47:fe:fd:42:5b:e7:86:d1:5b:c7: 16:ee:05:8f:46:70:71:5f:08:68:18:15:e8:ac:eb: 70:54:01:34:04:08:df:cf:a4:c9:9c:86:b0:77:06: 51:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F6:D9:CA:0F:46:E9:D1:8D:69:8B:90:AC:E5:FA:57:6D:19:E0:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/98da9661-0d10-3896-a771-a2ee1d490a36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 72.10.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:d9:c8:bf:c1:d7:19:88:dd:df:98:28:ee:35:3f:48:fc:5e: 55:bf:60:d8:d9:07:9f:b3:ef:2b:82:59:c9:d0:29:44:52:f6: 01:0e:af:bc:5c:b1:27:65:c2:5d:e2:24:88:05:c0:6f:08:4f: 43:1a:43:db:cd:54:9e:ae:34:d7:44:fb:51:61:49:32:e3:08: f4:a5:40:c4:be:57:a5:36:1f:c9:55:38:43:ca:93:4c:9f:3e: fb:07:b6:8a:37:c1:83:2c:5d:3d:38:d3:b1:b4:8b:dc:7f:91: 54:f1:71:3f:81:f9:b7:fa:d1:ac:34:2e:99:20:fd:71:4a:ce: 1c:59:98:b0:22:99:a2:c4:94:b3:e9:41:57:0b:a7:34:c6:47: 02:7b:5b:0e:8a:a4:f4:18:d4:88:2f:96:d2:56:a2:1c:6d:24: 22:b3:e7:ae:0b:6e:d0:5c:86:25:19:8d:91:89:4c:00:08:1e: 89:9e:63:67:6d:82:6b:d4:14:2b:c1:e8:72:d1:99:de:05:a3: 88:0d:01:bb:cc:1b:43:23:6c:2d:03:6f:18:08:1b:2e:79:5d: 0e:80:94:c4:9c:45:94:7d:e4:4e:b2:a3:b0:7f:c4:5a:c9:15: a1:71:20:7b:89:0a:34:b8:2b:cd:09:c6:81:2e:8a:b8:49:97: 18:c5:93:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcGUuJh3QPIIO1wgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk ZTAxYTUwYWUtODNiMC00ZTk3LWJhMzctNDE2NzhjMGZjMjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9wr2fZu/UNeVBgzRoCeREZOcU9jujVQPa56 aYjxN+7whcd943YVCVoYsecwpf53sSmNDWd+920r+61z/7VAYRrvzJDr1uyTi+ba GsJ5Beyev/6F9StksWGFSoMth2WqMjs77QXuH+wap7CtEG73WumKpCY7+l8+K3hG HZ5mrwnoFll1PQhZt0yvt6AAv561u3wIn4ydEZ9pxk+6n/bkGQ9O74CsWmZLKRdw epwaJFXYY970handsiFE+XK5fxhHu7BBCK652hUycX9WubhHQyQ9wT4/6Uf+/UJb 54bRW8cW7gWPRnBxXwhoGBXorOtwVAE0BAjfz6TJnIawdwZRAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJz22coPRunRjWmLkKzl+ldtGeBqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvOThkYTk2NjEtMGQxMC0z ODk2LWE3NzEtYTJlZTFkNDkwYTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASApsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPZyL/B1xmI3d+YKO41P0j8XlW/YNjZB5+z7yuCWcnQKURS9gEOr7xc sSdlwl3iJIgFwG8IT0MaQ9vNVJ6uNNdE+1FhSTLjCPSlQMS+V6U2H8lVOEPKk0yf PvsHtoo3wYMsXT0407G0i9x/kVTxcT+B+bf60aw0Lpkg/XFKzhxZmLAimaLElLPp QVcLpzTGRwJ7Ww6KpPQY1IgvltJWohxtJCKz564LbtBchiUZjZGJTAAIHomeY2dt gmvUFCvB6HLRmd4Fo4gNAbvMG0MjbC0DbxgIGy55XQ6AlMScRZR95E6yo7B/xFrJ FaFxIHuJCjS4K80JxoEuirhJlxjFk60= -----END CERTIFICATE-----Generated at Mon Jun 30 10:45:45 2025 by rpki-client