$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4408a2c6-2b4c-3c08-b37f-b6a63152f7c1.roa File: 4408a2c6-2b4c-3c08-b37f-b6a63152f7c1.roa (raw, json) Hash identifier: vgtSPE8Hq513f+uPz6UlKFw7X4VVS/cSFI7/HvbDtG4= Subject key identifier: 0E:69:DE:D7:0E:63:6F:C3:0F:E8:37:4F:11:5F:20:06:9C:6F:88:04 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD23BE4C6A4C239819287D480 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4408a2c6-2b4c-3c08-b37f-b6a63152f7c1.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 701 IP address blocks: 108.36.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:e4:c6:a4:c2:39:81:92:87:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=7ff97f33-8f9e-4262-96d2-9d10580f2910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:69:c3:17:ab:99:c3:32:4c:89:a3:84:6f:30: 43:70:21:b3:d2:33:f8:1e:0c:28:3e:cb:eb:f0:51: 4d:e2:41:59:87:35:ac:29:fc:8b:15:6f:1e:1c:91: 17:6d:ef:92:cb:09:15:c2:84:08:46:9f:18:b8:2d: 30:47:1e:87:4c:35:ae:d5:12:0f:43:1c:36:12:c9: 38:6b:70:13:66:91:9f:6c:cc:d5:21:ef:21:6a:fd: ce:d2:ce:74:54:49:1a:45:f6:7c:e3:a4:07:35:2c: 21:37:af:58:f8:62:64:6e:2d:2c:67:0f:f2:4b:cf: 24:25:e4:a9:8e:ee:f8:17:0d:0d:8b:03:c7:e4:c9: 7c:7c:31:01:79:94:cd:5a:b4:9c:1b:f8:b4:dc:34: 63:6d:aa:3b:77:61:0b:17:93:4a:4e:14:6f:d4:d7: 2b:b0:ac:ee:54:ac:27:01:1b:d8:a0:4d:8a:6c:ce: 66:50:54:b4:27:a8:ef:0f:f5:28:56:34:25:d7:fc: 3c:59:92:20:83:c8:46:bc:a0:60:4e:11:c5:f4:b5: 83:8e:67:ca:99:11:55:87:93:3b:88:c4:54:8a:6a: 95:6a:57:b5:13:18:f0:a9:07:7a:8c:9d:57:3a:85: cc:ce:19:8f:7e:ba:a2:74:e6:73:92:64:43:66:48: d1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:69:DE:D7:0E:63:6F:C3:0F:E8:37:4F:11:5F:20:06:9C:6F:88:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4408a2c6-2b4c-3c08-b37f-b6a63152f7c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.36.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:53:d0:38:28:f8:67:34:d8:b8:90:28:b3:1c:cb:c9:99:77: f9:87:37:be:e2:5b:92:6c:fa:e2:97:d3:56:45:a8:70:4a:fc: d2:45:15:df:dc:89:98:62:de:cc:89:b6:40:e9:a1:90:f1:52: 8a:e0:fc:05:b8:b3:2c:04:79:d7:32:2e:16:8d:98:e9:a9:6d: 7d:8a:6b:fc:2c:19:9a:85:3a:7f:91:59:24:94:5d:09:de:38: f8:f9:59:8c:cb:37:cf:fa:d0:f0:64:76:cb:06:f2:49:18:f8: e5:bd:8a:be:d3:74:7d:ac:6e:d8:b5:47:bf:3b:b3:4a:0a:06: e8:16:3e:c7:90:73:2c:23:8a:ee:93:90:7a:a1:0f:02:14:32: 04:a6:c6:6b:c0:30:4f:63:c0:b1:4a:a3:f1:7b:66:c3:17:6e: 42:54:98:ff:a5:51:c8:62:d1:2a:b7:30:83:e4:6c:05:d6:d4: 1f:54:cf:a3:58:90:82:5f:1b:5c:93:9f:85:e3:93:5c:db:a2: 23:67:ac:11:59:42:e4:0d:49:8c:bc:84:b6:33:ef:7c:1c:da: 25:e0:df:1b:d9:45:f0:26:08:40:ec:a3:8a:63:25:9c:41:d9: 8d:2b:a9:f1:4d:b0:92:8a:bd:42:fe:7f:4e:da:fa:09:0b:51: ec:39:42:8b -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErSO+TGpMI5gZKH1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk N2ZmOTdmMzMtOGY5ZS00MjYyLTk2ZDItOWQxMDU4MGYyOTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGnDF6uZwzJMiaOEbzBDcCGz0jP4HgwoPsvr 8FFN4kFZhzWsKfyLFW8eHJEXbe+SywkVwoQIRp8YuC0wRx6HTDWu1RIPQxw2Esk4 a3ATZpGfbMzVIe8hav3O0s50VEkaRfZ846QHNSwhN69Y+GJkbi0sZw/yS88kJeSp ju74Fw0NiwPH5Ml8fDEBeZTNWrScG/i03DRjbao7d2ELF5NKThRv1NcrsKzuVKwn ARvYoE2KbM5mUFS0J6jvD/UoVjQl1/w8WZIgg8hGvKBgThHF9LWDjmfKmRFVh5M7 iMRUimqVale1ExjwqQd6jJ1XOoXMzhmPfrqidOZzkmRDZkjReQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFA5p3tcOY2/DD+g3TxFfIAacb4gEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDQwOGEyYzYtMmI0Yy0z YzA4LWIzN2YtYjZhNjMxNTJmN2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAbCQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAUVPQOCj4ZzTYuJAosxzLyZl3+Yc3vuJbkmz64pfTVkWocEr80kUV39yJ mGLezIm2QOmhkPFSiuD8BbizLAR51zIuFo2Y6altfYpr/CwZmoU6f5FZJJRdCd44 +PlZjMs3z/rQ8GR2ywbySRj45b2KvtN0faxu2LVHvzuzSgoG6BY+x5BzLCOK7pOQ eqEPAhQyBKbGa8AwT2PAsUqj8XtmwxduQlSY/6VRyGLRKrcwg+RsBdbUH1TPo1iQ gl8bXJOfheOTXNuiI2esEVlC5A1JjLyEtjPvfBzaJeDfG9lF8CYIQOyjimMlnEHZ jSup8U2wkoq9Qv5/Ttr6CQtR7DlCiw== -----END CERTIFICATE-----Generated at Sat Aug 23 17:37:34 2025 by rpki-client