$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34a808d4-f39b-3eaf-802a-46c77c6d1558.roa File: 34a808d4-f39b-3eaf-802a-46c77c6d1558.roa (raw, json) Hash identifier: GosXa5LLPVZ1+2NLFssV5BWNlZPMTmzDH+FILDvAPQA= Subject key identifier: 6F:24:42:45:B8:39:F6:E3:82:9B:70:BD:C0:F8:45:50:FA:C8:47:6E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD23BE457851320EF31C32B00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34a808d4-f39b-3eaf-802a-46c77c6d1558.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 701 IP address blocks: 108.21.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:e4:57:85:13:20:ef:31:c3:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=fe5a0003-af5a-424c-bc89-b7a8a7962e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ef:72:b7:ca:90:d8:83:87:7a:91:28:4d:74: 97:e9:ec:98:5b:9d:eb:50:2e:e3:f0:e3:54:46:24: 66:77:ed:03:69:24:93:39:65:ce:67:1c:e7:1a:2b: bd:c3:ff:68:8f:47:63:e2:da:c4:0c:2a:cb:d5:ad: 12:63:d3:b8:31:4d:1d:06:c2:44:7f:6f:78:4c:e0: 9d:e9:51:43:53:32:14:0e:b3:f4:9d:8a:3a:1f:8f: 37:ee:e6:b8:82:cf:99:f2:4b:f5:00:89:ec:2c:ac: c0:bc:64:54:60:e4:87:36:e1:7e:ad:30:98:ef:69: b8:2b:88:64:79:3c:71:f4:4b:82:75:72:e2:b4:d7: 52:29:cf:d2:03:9b:a7:68:95:c3:55:f0:f1:29:72: 96:9e:5a:a0:cd:de:be:d3:6f:ab:ea:c0:fc:f5:02: 9f:2e:c6:5f:01:c3:92:36:c0:32:d6:45:12:3c:0a: b6:d2:b2:3f:8f:0b:6e:7b:4f:c2:bb:de:12:29:d5: c7:e8:a9:7f:45:c9:a7:29:3a:f1:29:66:46:7f:cf: a0:06:f0:b2:70:67:91:6e:75:d8:93:d9:12:23:66: c8:27:21:39:22:de:2c:d2:48:e2:30:3d:51:58:dd: de:64:78:4d:4b:14:f1:c4:ae:2b:5f:95:5f:54:0e: e6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:24:42:45:B8:39:F6:E3:82:9B:70:BD:C0:F8:45:50:FA:C8:47:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34a808d4-f39b-3eaf-802a-46c77c6d1558.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.21.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:09:27:87:d4:43:43:2e:47:dc:6f:a9:db:53:5b:d5:5d:fc: 7e:e2:c0:9a:9c:a0:a1:48:68:78:28:20:16:0f:9e:29:31:00: 52:d3:b7:1d:1f:5f:2a:f1:1f:7d:06:12:39:db:75:4b:3d:5f: e5:d0:63:ac:84:72:b0:63:0c:73:d0:6c:4e:e0:52:c7:aa:d1: e9:0f:64:dd:13:2e:19:cf:e7:23:fd:14:24:26:f3:29:b0:08: 81:4c:e6:66:f3:a4:a4:0b:ca:ee:b9:d8:07:7c:40:58:21:1a: 07:22:d5:0a:6a:fb:5a:18:79:fa:ab:af:56:20:ac:f9:c0:31: 07:db:6a:d8:34:8b:a4:15:ef:7f:f7:16:6d:ee:94:e9:b1:d2: 07:c4:9a:1f:fa:ed:1d:66:f5:2f:73:fb:a7:b4:0c:76:48:61: c2:37:ed:fe:46:e5:b4:e9:c7:fa:9a:75:11:e3:f2:a6:16:d9: 90:fd:13:64:da:e4:b4:c8:5c:02:09:b4:57:21:14:40:8e:86: 83:a3:49:10:7f:77:46:6b:ae:30:d5:0f:b2:a0:78:b9:bf:31: 69:8b:06:2f:13:ac:a2:83:5c:df:eb:54:99:89:b0:94:65:2a: 24:37:8c:33:0e:f9:6b:18:9e:46:3f:28:df:b9:37:ec:34:e9: 92:20:4e:35 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErSO+RXhRMg7zHDKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZmU1YTAwMDMtYWY1YS00MjRjLWJjODktYjdhOGE3OTYyZTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAye9yt8qQ2IOHepEoTXSX6eyYW53rUC7j8ONU RiRmd+0DaSSTOWXOZxznGiu9w/9oj0dj4trEDCrL1a0SY9O4MU0dBsJEf294TOCd 6VFDUzIUDrP0nYo6H4837ua4gs+Z8kv1AInsLKzAvGRUYOSHNuF+rTCY72m4K4hk eTxx9EuCdXLitNdSKc/SA5unaJXDVfDxKXKWnlqgzd6+02+r6sD89QKfLsZfAcOS NsAy1kUSPAq20rI/jwtue0/Cu94SKdXH6Kl/RcmnKTrxKWZGf8+gBvCycGeRbnXY k9kSI2bIJyE5It4s0kjiMD1RWN3eZHhNSxTxxK4rX5VfVA7m3wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFG8kQkW4OfbjgptwvcD4RVD6yEduMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzRhODA4ZDQtZjM5Yi0z ZWFmLTgwMmEtNDZjNzdjNmQxNTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAbBUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAXQknh9RDQy5H3G+p21Nb1V38fuLAmpygoUhoeCggFg+eKTEAUtO3HR9f KvEffQYSOdt1Sz1f5dBjrIRysGMMc9BsTuBSx6rR6Q9k3RMuGc/nI/0UJCbzKbAI gUzmZvOkpAvK7rnYB3xAWCEaByLVCmr7Whh5+quvViCs+cAxB9tq2DSLpBXvf/cW be6U6bHSB8SaH/rtHWb1L3P7p7QMdkhhwjft/kbltOnH+pp1EePyphbZkP0TZNrk tMhcAgm0VyEUQI6Gg6NJEH93RmuuMNUPsqB4ub8xaYsGLxOsooNc3+tUmYmwlGUq JDeMMw75axieRj8o37k37DTpkiBONQ== -----END CERTIFICATE-----Generated at Sat Aug 23 16:32:20 2025 by rpki-client