$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ece903d-52be-317b-af18-f2a1344c3da8.roa File: 3ece903d-52be-317b-af18-f2a1344c3da8.roa (raw, json) Hash identifier: n6r1P6lu91LWUqWkljzcTS+S+aQcoGvx+LAT1O+7jmE= Subject key identifier: F6:3C:39:84:B0:99:36:BA:38:B9:63:0E:3D:8D:EC:C1:BF:8C:42:9D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849F17FBFC268E452DF0470F480 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ece903d-52be-317b-af18-f2a1344c3da8.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 701 IP address blocks: 108.22.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:bf:c2:68:e4:52:df:04:70:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=d58b67ab-545a-4e75-a38a-a682eea48c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:56:c1:b4:a3:68:f9:da:b5:41:c3:33:90:19: 9d:48:5f:32:ff:7c:38:c5:15:d8:7d:3b:00:7c:1d: 0a:3e:a0:ed:c9:f6:09:26:17:50:2c:c3:4a:78:27: 30:d1:96:27:cd:80:13:d2:28:df:9e:58:e0:b5:ea: 7f:e5:03:7b:46:6b:5c:bf:91:47:00:13:55:95:59: ef:af:be:f6:29:87:ca:dc:ac:42:e8:58:36:a3:db: 8c:b0:bf:dc:9c:ad:1f:09:dd:df:e5:d9:ec:58:77: 4f:4d:fb:49:62:3c:02:03:7a:99:df:83:62:42:d9: e1:b0:7c:d3:3a:61:92:95:83:43:f5:f8:28:74:93: 08:2e:e1:9a:4d:18:98:6f:78:ab:fd:e6:f9:82:ca: cf:74:5b:17:bd:68:1b:17:d0:d2:d9:d4:a4:ef:29: 4c:27:50:a3:cf:ee:a8:39:9f:39:e2:49:a8:65:bb: 71:9c:f7:ff:00:96:f6:cb:18:da:ff:db:72:7e:62: 59:a0:13:16:1a:ca:20:a0:21:c2:c3:82:d1:3c:f0: 6e:51:b0:38:6d:c5:20:f1:1b:cd:5e:da:fe:a9:81: 8f:30:db:5f:bb:e2:77:b5:0a:b4:ae:b3:4a:fd:ca: 36:ce:9a:31:52:63:97:f8:a6:58:42:a5:f7:4f:e0: bd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3C:39:84:B0:99:36:BA:38:B9:63:0E:3D:8D:EC:C1:BF:8C:42:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ece903d-52be-317b-af18-f2a1344c3da8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.22.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:a2:12:b4:15:19:e4:1a:9d:6f:2e:80:3e:cd:66:d6:af:12: 4a:6e:81:79:85:0e:19:1c:92:88:48:f0:c1:6f:95:11:b4:11: 4b:b3:52:33:02:6b:4b:c5:f8:16:2d:8f:49:1b:01:1f:a2:5c: 5a:cf:7f:9c:b7:a0:ab:78:14:72:25:e6:b5:c3:3e:38:63:ad: 18:6a:0c:ef:6a:52:19:83:f0:63:99:12:4a:dd:14:39:20:3c: 48:0e:0c:eb:6a:b1:6b:15:54:04:63:be:00:98:d7:9b:b1:a5: 33:25:64:b3:1f:fe:fa:8e:6f:61:ef:31:91:3b:00:a6:0a:df: 76:3d:7f:0c:e1:46:b6:3d:71:89:cf:c9:8b:a3:73:a2:da:cd: 94:ca:c9:c6:5e:c7:fd:0e:41:c3:85:84:87:cd:14:d9:73:26: 1a:97:d6:98:e9:a0:ae:23:1a:2f:37:5e:35:6a:b1:1b:0f:35: 37:f2:88:d4:1e:e7:52:c5:87:8f:07:22:d7:4d:59:f1:c8:a2: 95:5b:4c:76:af:53:b0:a9:1d:22:ac:ab:a7:49:27:6f:92:29: 36:79:5d:98:f4:a7:81:47:1c:1e:bc:62:65:e8:57:b8:35:41: 5d:d7:df:57:f6:85:68:27:da:c6:7f:dd:16:a4:68:7e:6c:48: 4a:4c:e3:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf7/CaORS3wRw9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk ZDU4YjY3YWItNTQ1YS00ZTc1LWEzOGEtYTY4MmVlYTQ4YzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplbBtKNo+dq1QcMzkBmdSF8y/3w4xRXYfTsA fB0KPqDtyfYJJhdQLMNKeCcw0ZYnzYAT0ijfnljgtep/5QN7Rmtcv5FHABNVlVnv r772KYfK3KxC6Fg2o9uMsL/cnK0fCd3f5dnsWHdPTftJYjwCA3qZ34NiQtnhsHzT OmGSlYND9fgodJMILuGaTRiYb3ir/eb5gsrPdFsXvWgbF9DS2dSk7ylMJ1Cjz+6o OZ854kmoZbtxnPf/AJb2yxja/9tyfmJZoBMWGsogoCHCw4LRPPBuUbA4bcUg8RvN Xtr+qYGPMNtfu+J3tQq0rrNK/co2zpoxUmOX+KZYQqX3T+C9MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPY8OYSwmTa6OLljDj2N7MG/jEKdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2VjZTkwM2QtNTJiZS0z MTdiLWFmMTgtZjJhMTM0NGMzZGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbBYLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyiErQVGeQanW8ugD7NZtavEkpugXmFDhkckohI8MFvlRG0EUuzUjMC a0vF+BYtj0kbAR+iXFrPf5y3oKt4FHIl5rXDPjhjrRhqDO9qUhmD8GOZEkrdFDkg PEgODOtqsWsVVARjvgCY15uxpTMlZLMf/vqOb2HvMZE7AKYK33Y9fwzhRrY9cYnP yYujc6LazZTKycZex/0OQcOFhIfNFNlzJhqX1pjpoK4jGi83XjVqsRsPNTfyiNQe 51LFh48HItdNWfHIopVbTHavU7CpHSKsq6dJJ2+SKTZ5XZj0p4FHHB68YmXoV7g1 QV3X31f2hWgn2sZ/3RakaH5sSEpM4x0= -----END CERTIFICATE-----Generated at Mon Jun 30 19:45:24 2025 by rpki-client