$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c271c2f-5fb4-307b-8972-821df3f14259.roa File: 3c271c2f-5fb4-307b-8972-821df3f14259.roa (raw, json) Hash identifier: 5tUT81B/INuirRdzhbTnDqXOc2GDtSiNUdebA/rSw1s= Subject key identifier: F5:06:E2:8B:6D:A1:C8:E5:4E:80:3F:B5:D9:57:1C:00:69:1D:93:62 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD23C13587F4C89E8868CAD38 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c271c2f-5fb4-307b-8972-821df3f14259.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 701 IP address blocks: 108.34.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:13:58:7f:4c:89:e8:86:8c:ad:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=702a6f1a-380d-4fa0-9671-965d0760d7e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:de:e0:6d:5a:ec:bd:0e:b7:33:dd:cc:bb:6a: 31:8b:ad:76:13:5d:41:99:ef:d1:ed:6b:ee:4f:89: a7:f6:4e:5d:42:3b:88:61:e6:19:52:55:67:72:03: 7b:ff:75:92:fb:7c:f9:fe:3e:a3:74:19:48:be:dd: 13:7d:3d:87:7c:cf:0a:40:ac:cc:32:ce:11:65:68: 75:c2:4e:16:ea:e0:57:1c:9c:e9:95:42:ee:c7:02: 35:de:98:31:cd:f4:f0:85:8c:f2:71:40:1d:aa:42: 35:9e:b2:64:50:51:6b:de:67:a6:d2:6a:d5:79:1f: 16:a2:10:97:4a:6b:d1:23:cb:bb:a9:66:7a:4a:1c: a8:c5:44:80:76:dc:b5:fb:b3:a5:b3:7e:44:04:b0: df:c9:90:c5:34:fe:66:c5:8c:8a:76:ea:f7:3c:ff: 72:56:77:54:37:36:3d:49:2d:b4:25:26:2f:01:2e: f1:a7:b5:55:33:79:4f:a4:6b:72:c4:d3:36:bd:56: b0:7e:52:aa:85:2f:ed:cb:b5:ec:62:e0:91:84:56: b4:fd:3a:ef:6b:3d:97:14:07:dc:98:98:95:a9:be: 88:21:e5:84:e4:f6:1c:e2:48:03:9f:73:b9:47:e3: 32:a5:0d:ab:ef:a6:40:bf:96:a5:74:e0:02:64:27: 0d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:06:E2:8B:6D:A1:C8:E5:4E:80:3F:B5:D9:57:1C:00:69:1D:93:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c271c2f-5fb4-307b-8972-821df3f14259.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.34.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:df:35:d1:f7:93:48:c7:b8:98:0a:d7:b2:01:e3:a5:17:78: 2e:c0:05:17:b1:07:8c:5d:c6:0a:93:f0:ee:e6:87:e2:34:56: 5e:4e:e0:c8:0d:64:6c:91:6e:dd:4a:9b:f2:6b:5c:68:b5:08: 83:36:2a:28:52:18:a2:fb:f6:59:fd:ff:9a:c8:18:89:cf:a0: 43:a0:e6:2d:a2:cc:05:d3:83:86:64:90:53:0e:dc:94:15:94: 02:eb:13:43:d9:13:be:7f:38:97:47:56:1d:ea:1c:d0:9d:40: ec:0f:33:88:f7:a7:88:4c:62:c3:b0:be:cd:ca:fc:96:d6:f5: db:30:2a:74:01:7b:0f:6c:53:7a:a1:87:54:b2:5d:3b:c4:d7: 29:d0:df:9d:a2:47:94:c5:c3:49:8d:2b:c6:55:77:3d:0a:06: 99:e4:2a:f9:c3:33:31:9c:b7:e1:af:a8:a6:cd:ac:01:f8:c7: 3d:11:cf:bc:37:3d:0b:c5:b5:6c:30:c4:ba:13:68:34:35:6d: 97:33:d0:7e:16:82:86:3b:dc:b9:ac:e3:a4:74:49:35:0a:cc: 78:51:aa:f6:63:88:a5:fb:a5:09:58:2d:8c:8b:d1:79:b8:a1: a4:76:d4:a5:4e:e6:3f:6f:d7:0a:a6:d1:26:cc:bc:4f:97:d6: 44:aa:1a:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSPBNYf0yJ6IaMrTgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NzAyYTZmMWEtMzgwZC00ZmEwLTk2NzEtOTY1ZDA3NjBkN2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjt7gbVrsvQ63M93Mu2oxi612E11Bme/R7Wvu T4mn9k5dQjuIYeYZUlVncgN7/3WS+3z5/j6jdBlIvt0TfT2HfM8KQKzMMs4RZWh1 wk4W6uBXHJzplULuxwI13pgxzfTwhYzycUAdqkI1nrJkUFFr3mem0mrVeR8WohCX SmvRI8u7qWZ6ShyoxUSAdty1+7Ols35EBLDfyZDFNP5mxYyKdur3PP9yVndUNzY9 SS20JSYvAS7xp7VVM3lPpGtyxNM2vVawflKqhS/ty7XsYuCRhFa0/Trvaz2XFAfc mJiVqb6IIeWE5PYc4kgDn3O5R+MypQ2r76ZAv5aldOACZCcNAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUG4ottocjlToA/tdlXHABpHZNiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2MyNzFjMmYtNWZiNC0z MDdiLTg5NzItODIxZGYzZjE0MjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHbCKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzfNdH3k0jHuJgK17IB46UXeC7ABRexB4xdxgqT8O7mh+I0Vl5O4MgN ZGyRbt1Km/JrXGi1CIM2KihSGKL79ln9/5rIGInPoEOg5i2izAXTg4ZkkFMO3JQV lALrE0PZE75/OJdHVh3qHNCdQOwPM4j3p4hMYsOwvs3K/JbW9dswKnQBew9sU3qh h1SyXTvE1ynQ352iR5TFw0mNK8ZVdz0KBpnkKvnDMzGct+GvqKbNrAH4xz0Rz7w3 PQvFtWwwxLoTaDQ1bZcz0H4WgoY73Lms46R0STUKzHhRqvZjiKX7pQlYLYyL0Xm4 oaR21KVO5j9v1wqm0SbMvE+X1kSqGn0= -----END CERTIFICATE-----Generated at Sat Aug 23 14:33:42 2025 by rpki-client