$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ece903d-52be-317b-af18-f2a1344c3da8.roa File: 3ece903d-52be-317b-af18-f2a1344c3da8.roa (raw, json) Hash identifier: buPTlztKCPrdiDWei5GNN07alU0Haz8BJazj2VfVAbU= Subject key identifier: C7:08:B4:08:E0:C3:B1:EC:2B:4B:22:A1:D1:1B:7C:B2:63:A0:DB:EE Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD23BBCF3DAC85C1BF0AB5A3C Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ece903d-52be-317b-af18-f2a1344c3da8.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 701 IP address blocks: 108.22.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:bc:f3:da:c8:5c:1b:f0:ab:5a:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=b10b9796-a7df-4749-863f-424b2539018e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:69:7b:56:dd:e7:a0:1a:03:bd:28:30:05:09: 83:ce:6a:63:ac:dc:f4:9e:4f:a0:a1:d6:1d:e0:b7: 20:f9:e0:37:a9:b0:36:8a:eb:9a:d5:d5:33:87:b8: c8:6b:8f:4c:53:e5:93:35:88:6f:d5:fc:89:a7:e7: 8b:43:c9:92:c8:55:89:41:8d:cc:18:66:a9:ae:c4: 0e:70:ed:55:b1:9d:00:2d:04:8c:33:aa:c8:63:55: f7:68:61:54:a5:59:52:92:04:64:0b:a9:1a:ac:68: bf:1b:54:77:6a:91:a8:93:db:f5:99:f7:1b:8c:57: 12:49:48:84:cf:37:f8:d9:53:1d:60:bf:27:fa:a1: a1:60:5b:a4:b8:b4:3e:cd:35:7f:97:8f:2a:30:d4: ab:67:87:96:f9:0c:05:f5:17:e4:69:5c:22:10:96: a3:7b:6e:2e:89:81:c2:65:72:a6:13:dd:27:3c:b3: 83:fa:8c:15:60:3c:cf:fc:ef:e2:d4:03:98:d6:25: f3:e9:a8:56:50:6c:59:e9:9d:52:48:ae:b2:1e:63: 63:19:dd:56:40:19:10:55:de:95:0e:17:8e:cc:8d: 43:3b:33:9c:3e:c2:4e:4c:4c:0e:6f:8d:f5:15:86: 3a:8d:0b:b0:bc:a5:30:a6:8f:f5:43:48:e8:ac:4e: db:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:08:B4:08:E0:C3:B1:EC:2B:4B:22:A1:D1:1B:7C:B2:63:A0:DB:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ece903d-52be-317b-af18-f2a1344c3da8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.22.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:98:08:4e:c9:c1:22:7d:8f:8c:30:25:d0:16:1d:61:94:28: 69:52:ac:05:14:f3:49:4f:3e:99:f7:68:b1:19:c3:b4:f3:5e: bc:1c:63:d1:38:ee:bd:95:ff:10:96:99:6d:d6:a3:46:ed:f5: ce:c4:44:4b:10:e4:0c:c0:c0:2a:3f:97:ca:ca:ce:c3:c1:b7: f1:a6:3d:0a:4b:a5:a3:79:4e:59:b0:73:bd:ee:df:b3:4c:70: 91:6d:d3:06:d1:01:bd:a8:3a:51:21:f6:7a:0e:fb:ee:70:5c: 3f:86:a8:64:57:41:de:df:c0:d5:8d:cd:a1:2b:a0:e0:61:57: ac:9e:9d:3c:1f:94:41:2b:bf:50:bf:a8:e7:57:cb:6e:98:42: e3:4a:43:2a:b4:cc:fb:95:54:ec:23:a8:e1:dc:ae:77:40:a8: 47:5f:90:c4:7d:6c:19:3b:5f:7e:29:73:b1:97:75:66:e2:fb: c6:4a:75:b8:9c:b3:63:cb:9b:83:fa:55:ab:f9:b3:c9:d7:88: fe:75:97:3e:65:61:cb:4e:cf:34:92:cd:18:6f:76:cb:a9:7c: bb:9e:c2:17:a8:e0:6e:5a:f6:3c:cc:f1:e6:3d:74:c1:0d:cf: 5c:39:14:56:69:7b:e0:84:e1:61:78:17:53:6c:03:88:33:ef: 89:64:36:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO7zz2shcG/CrWjwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk YjEwYjk3OTYtYTdkZi00NzQ5LTg2M2YtNDI0YjI1MzkwMThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ml7Vt3noBoDvSgwBQmDzmpjrNz0nk+godYd 4Lcg+eA3qbA2iuua1dUzh7jIa49MU+WTNYhv1fyJp+eLQ8mSyFWJQY3MGGaprsQO cO1VsZ0ALQSMM6rIY1X3aGFUpVlSkgRkC6karGi/G1R3apGok9v1mfcbjFcSSUiE zzf42VMdYL8n+qGhYFukuLQ+zTV/l48qMNSrZ4eW+QwF9RfkaVwiEJaje24uiYHC ZXKmE90nPLOD+owVYDzP/O/i1AOY1iXz6ahWUGxZ6Z1SSK6yHmNjGd1WQBkQVd6V DheOzI1DOzOcPsJOTEwOb431FYY6jQuwvKUwpo/1Q0jorE7blQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcItAjgw7HsK0siodEbfLJjoNvuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2VjZTkwM2QtNTJiZS0z MTdiLWFmMTgtZjJhMTM0NGMzZGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbBYLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyYCE7JwSJ9j4wwJdAWHWGUKGlSrAUU80lPPpn3aLEZw7TzXrwcY9E4 7r2V/xCWmW3Wo0bt9c7EREsQ5AzAwCo/l8rKzsPBt/GmPQpLpaN5Tlmwc73u37NM cJFt0wbRAb2oOlEh9noO++5wXD+GqGRXQd7fwNWNzaEroOBhV6yenTwflEErv1C/ qOdXy26YQuNKQyq0zPuVVOwjqOHcrndAqEdfkMR9bBk7X34pc7GXdWbi+8ZKdbic s2PLm4P6Vav5s8nXiP51lz5lYctOzzSSzRhvdsupfLuewheo4G5a9jzM8eY9dMEN z1w5FFZpe+CE4WF4F1NsA4gz74lkNsE= -----END CERTIFICATE-----Generated at Sat Aug 23 16:16:04 2025 by rpki-client