$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0372aea9-be0b-3757-96b4-a238d1512e50.roa File: 0372aea9-be0b-3757-96b4-a238d1512e50.roa (raw, json) Hash identifier: cwWYApWLukG0nBUndRt9ZLV8DsvkBiS8I05fhn2fLlc= Subject key identifier: 39:8B:A3:58:35:68:36:7A:99:24:E2:4F:74:31:80:D9:9D:BE:A3:B2 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD23C0F5A22C634E059F34400 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0372aea9-be0b-3757-96b4-a238d1512e50.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 701 IP address blocks: 108.34.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:0f:5a:22:c6:34:e0:59:f3:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=9fa111dc-1aca-4247-9c20-f31bfd59abaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f6:0a:94:89:83:18:53:09:cd:45:ba:d5:7e: 75:4e:7e:2b:47:04:28:b6:02:9b:77:e3:2a:8b:2d: 9b:32:f0:d6:3f:c6:c7:4f:74:b4:e9:b9:44:28:08: 70:2e:e4:7e:9c:e6:b1:8c:54:32:b6:d4:23:6c:9c: 4f:a4:8b:96:b4:af:36:18:9f:78:cf:4b:e3:d5:1a: 8e:b0:20:4f:94:c0:a0:c2:d1:9d:79:81:5b:68:e3: b2:40:3c:a8:b0:88:4b:bb:70:7d:6d:e4:c7:62:fc: 87:c9:31:99:2e:a4:fe:bf:c4:28:00:ff:8a:32:f6: e8:cc:2f:cb:aa:79:89:2b:ad:2b:82:52:b0:ca:43: 51:b6:bd:64:50:e6:cc:45:9e:52:6a:49:41:c9:8d: 67:89:fd:b0:80:d6:7d:dc:97:58:2d:1c:43:75:64: 64:a9:a9:69:e9:06:70:43:6d:b6:b6:da:3a:bb:95: 9b:5a:48:bf:d9:8a:54:51:0c:00:0a:84:46:73:f0: f7:2f:ad:dc:0d:ad:99:b0:de:9e:0a:d7:6e:cb:4f: 41:17:3a:12:ce:06:2f:30:67:a8:9a:8c:c5:65:df: 29:a3:61:ee:d9:38:d5:4b:e9:0c:1b:0c:dc:9c:5a: c6:07:19:0f:52:f7:26:a0:4a:c9:30:9d:b1:c2:67: ca:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:8B:A3:58:35:68:36:7A:99:24:E2:4F:74:31:80:D9:9D:BE:A3:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0372aea9-be0b-3757-96b4-a238d1512e50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.34.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:59:c2:0f:af:07:e7:38:af:12:16:b7:ac:10:44:17:b2:fd: 4f:87:2d:b2:c0:db:60:23:ea:84:20:7a:5e:f7:c0:26:cb:fe: fa:98:96:60:f1:a1:6d:6a:3b:36:3d:81:c9:41:39:7d:94:c8: 48:74:0c:29:97:d9:93:8c:90:92:6d:bc:48:04:41:61:59:69: 61:1b:a3:b3:2f:92:b0:bf:b8:6a:15:c6:e2:23:66:fb:58:c2: e3:dc:b1:e2:ce:9b:fe:bd:cf:76:b2:a1:e7:a9:60:17:85:55: fe:36:61:09:84:45:1d:27:05:1e:21:f8:05:f3:9a:5f:93:bb: 33:41:cd:6f:09:83:25:5c:6b:6a:2e:fe:ae:3d:bc:f6:34:f8: 7b:8c:27:0b:ef:51:66:01:7c:c8:2e:67:73:e9:28:85:f2:f3: b6:37:cf:fd:73:e0:97:88:9d:86:94:32:5b:6b:6a:8a:ae:f4: 3c:14:73:2a:fc:8a:ce:f0:a1:8d:4e:78:82:56:8c:17:2d:3a: 03:e3:6c:99:b7:64:c7:e7:41:1f:ec:02:4b:3a:c7:23:4b:0b: a4:b2:c9:87:bd:23:b1:3e:cb:8b:0b:09:0c:f9:11:11:d4:ab: 2c:63:5f:bc:05:54:87:86:bd:5c:04:91:ea:ba:d7:e1:a2:b6: df:69:96:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSPA9aIsY04FnzRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk OWZhMTExZGMtMWFjYS00MjQ3LTljMjAtZjMxYmZkNTlhYmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPYKlImDGFMJzUW61X51Tn4rRwQotgKbd+Mq iy2bMvDWP8bHT3S06blEKAhwLuR+nOaxjFQyttQjbJxPpIuWtK82GJ94z0vj1RqO sCBPlMCgwtGdeYFbaOOyQDyosIhLu3B9beTHYvyHyTGZLqT+v8QoAP+KMvbozC/L qnmJK60rglKwykNRtr1kUObMRZ5SaklByY1nif2wgNZ93JdYLRxDdWRkqalp6QZw Q222tto6u5WbWki/2YpUUQwACoRGc/D3L63cDa2ZsN6eCtduy09BFzoSzgYvMGeo mozFZd8po2Hu2TjVS+kMGwzcnFrGBxkPUvcmoErJMJ2xwmfKvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmLo1g1aDZ6mSTiT3QxgNmdvqOyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDM3MmFlYTktYmUwYi0z NzU3LTk2YjQtYTIzOGQxNTEyZTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEbCIQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5Zwg+vB+c4rxIWt6wQRBey/U+HLbLA22Aj6oQgel73wCbL/vqYlmDx oW1qOzY9gclBOX2UyEh0DCmX2ZOMkJJtvEgEQWFZaWEbo7MvkrC/uGoVxuIjZvtY wuPcseLOm/69z3ayoeepYBeFVf42YQmERR0nBR4h+AXzml+TuzNBzW8JgyVca2ou /q49vPY0+HuMJwvvUWYBfMguZ3PpKIXy87Y3z/1z4JeInYaUMltraoqu9DwUcyr8 is7woY1OeIJWjBctOgPjbJm3ZMfnQR/sAks6xyNLC6SyyYe9I7E+y4sLCQz5ERHU qyxjX7wFVIeGvVwEkeq61+Gitt9pljI= -----END CERTIFICATE-----Generated at Sat Aug 23 14:16:05 2025 by rpki-client