$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1e6f3af3-c888-3c7a-940f-384ddaaaf66a.roa File: 1e6f3af3-c888-3c7a-940f-384ddaaaf66a.roa (raw, json) Hash identifier: aOL/MKKl8Z5bf2RRlrVymmEmOtIImD7NGbAiTejnG5c= Subject key identifier: 47:6C:3F:BD:F6:40:59:2F:99:8A:DD:B0:2C:5F:68:0F:6B:30:37:0F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A3B7B0854564FD3902EF31600 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1e6f3af3-c888-3c7a-940f-384ddaaaf66a.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 701 IP address blocks: 108.22.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:08:54:56:4f:d3:90:2e:f3:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=85b96a35-6c41-42a3-baab-18a668e5692c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5c:3a:0b:23:5f:2f:f1:6e:f7:2e:82:e7:a6: ea:c4:92:6f:f7:a3:56:c9:34:fd:f7:b0:76:6c:23: c1:78:05:1f:b7:cc:74:0d:ae:c3:99:19:89:02:17: f8:9b:0c:e3:c4:81:c5:9b:44:be:07:92:b6:eb:8f: f1:63:90:d5:0f:01:36:40:18:da:fe:f2:ca:d8:7b: 61:e9:d2:fc:55:fa:8f:48:ee:00:91:e3:44:ba:e4: 1b:df:7f:0a:5b:98:d7:54:26:31:65:e2:d2:46:d2: d3:0b:4b:21:2c:7c:a4:a9:34:9c:93:7d:ec:7c:56: 4c:c4:85:28:4f:8c:f7:fc:c5:78:4c:d2:71:78:59: d0:05:57:ea:77:ba:18:51:87:b2:d0:a8:d3:f8:b8: 24:b3:30:92:d0:a6:e9:89:5d:24:55:2b:0b:58:97: c8:78:09:73:b2:8b:36:75:e4:12:d3:40:49:d4:b1: 92:32:dc:36:56:af:ff:cd:79:3d:d8:b5:71:61:ce: 97:e7:25:95:3d:4a:f9:ea:51:eb:cd:64:90:0d:b6: b7:f5:c4:d4:08:a6:ba:74:7b:a9:cb:e7:ad:2b:b9: 23:56:f9:d7:03:c7:00:81:de:0e:5f:ab:ae:43:c9: f4:27:0d:d6:cd:53:e2:7b:0a:60:a9:06:df:d5:3b: ad:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:6C:3F:BD:F6:40:59:2F:99:8A:DD:B0:2C:5F:68:0F:6B:30:37:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1e6f3af3-c888-3c7a-940f-384ddaaaf66a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.22.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:be:56:75:a9:03:3b:91:3b:ad:d2:6d:cd:ac:1e:a1:fb:0e: cf:a1:36:b2:36:03:c7:06:0b:26:e8:f1:a5:b1:0b:99:a0:c2: de:ce:aa:3e:b7:98:08:e7:47:8f:40:1c:c8:10:1a:64:24:a4: 83:60:97:0d:15:e1:b7:69:af:2d:2f:13:83:0e:89:15:0e:71: d8:25:c5:44:0c:a7:01:37:17:d2:e1:aa:e5:97:2e:f8:7d:aa: 33:9d:fc:a3:37:16:9d:5e:a7:8c:0a:a8:d4:21:b1:5f:16:59: be:45:0d:09:64:18:2d:00:a2:39:9f:a8:50:3f:27:e5:e2:af: c8:e1:cb:62:44:b2:67:3b:7d:93:8b:ed:74:66:ba:7e:5e:e8: 8e:43:09:ac:bd:15:bb:54:ab:4d:48:4a:1d:c5:6c:ab:b8:79: bf:d3:8f:40:3f:67:10:9a:05:0b:f8:cb:95:c0:57:e9:c5:7a: 2c:a5:87:ea:f4:48:d9:16:9d:f0:93:4f:9b:8e:cc:e1:2d:31: 49:01:8a:d7:4a:8c:45:80:9f:c6:16:53:0e:cd:65:4b:2f:02: d6:60:e4:37:ac:93:8d:14:bb:75:68:b8:02:81:85:85:9b:6e: e9:5b:34:b6:e5:13:60:8a:5c:ef:28:00:67:ed:9c:23:4d:1b: f6:61:32:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ewhUVk/TkC7zFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk ODViOTZhMzUtNmM0MS00MmEzLWJhYWItMThhNjY4ZTU2OTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVw6CyNfL/Fu9y6C56bqxJJv96NWyTT997B2 bCPBeAUft8x0Da7DmRmJAhf4mwzjxIHFm0S+B5K264/xY5DVDwE2QBja/vLK2Hth 6dL8VfqPSO4AkeNEuuQb338KW5jXVCYxZeLSRtLTC0shLHykqTSck33sfFZMxIUo T4z3/MV4TNJxeFnQBVfqd7oYUYey0KjT+LgkszCS0KbpiV0kVSsLWJfIeAlzsos2 deQS00BJ1LGSMtw2Vq//zXk92LVxYc6X5yWVPUr56lHrzWSQDba39cTUCKa6dHup y+etK7kjVvnXA8cAgd4OX6uuQ8n0Jw3WzVPiewpgqQbf1TutrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdsP732QFkvmYrdsCxfaA9rMDcPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWU2ZjNhZjMtYzg4OC0z YzdhLTk0MGYtMzg0ZGRhYWFmNjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbBYEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEm+VnWpAzuRO63Sbc2sHqH7Ds+hNrI2A8cGCybo8aWxC5mgwt7Oqj63 mAjnR49AHMgQGmQkpINglw0V4bdpry0vE4MOiRUOcdglxUQMpwE3F9LhquWXLvh9 qjOd/KM3Fp1ep4wKqNQhsV8WWb5FDQlkGC0AojmfqFA/J+Xir8jhy2JEsmc7fZOL 7XRmun5e6I5DCay9FbtUq01ISh3FbKu4eb/Tj0A/ZxCaBQv4y5XAV+nFeiylh+r0 SNkWnfCTT5uOzOEtMUkBitdKjEWAn8YWUw7NZUsvAtZg5Desk40Uu3VouAKBhYWb bulbNLblE2CKXO8oAGftnCNNG/ZhMrw= -----END CERTIFICATE-----Generated at Tue Jul 1 12:30:50 2025 by rpki-client