$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4955241c-3f7d-3e61-94b3-0fbf05b92e7f.roa File: 4955241c-3f7d-3e61-94b3-0fbf05b92e7f.roa (raw, json) Hash identifier: 7XA2Cwu8pdMTqmSDlAKojbr10z68vIV+bRoFSk521Do= Subject key identifier: 34:15:B9:1A:48:D5:EB:A2:F7:77:92:FD:49:65:18:FE:F0:F4:93:52 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849F17FDD3CFE52AC138C6CF300 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4955241c-3f7d-3e61-94b3-0fbf05b92e7f.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 701 IP address blocks: 108.22.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:dd:3c:fe:52:ac:13:8c:6c:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=0f2e91bf-b877-4aec-9911-b3dfef56152c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d3:bc:43:43:4c:13:c0:df:2c:0e:b0:e4:04: 6f:5e:5a:c9:0f:84:c5:68:e0:6a:75:dc:2d:aa:8d: 6c:00:d1:56:59:ff:ba:0c:59:46:dd:38:e8:e0:b6: 5f:a2:03:bf:a6:1e:88:20:53:67:be:60:b3:34:c9: 72:54:30:1d:5e:45:52:c4:cb:7d:4c:71:5f:78:83: ec:ec:1a:fc:0d:d6:03:da:96:38:43:b9:b4:a0:c0: f2:b6:f2:fa:9c:3e:f5:e3:e1:22:a1:46:2d:58:c3: de:10:1d:d5:e3:fc:d1:5a:0d:1b:33:d6:1c:2a:6e: 12:e8:cd:2b:33:64:42:74:0d:c7:2d:3c:30:04:cd: eb:1f:30:38:ec:b6:13:43:80:6c:a0:44:39:66:5c: 08:1e:cd:a5:30:44:73:00:f0:7e:eb:20:fb:f8:59: c8:98:49:fd:32:72:44:bc:ae:e5:97:ee:ad:27:27: cb:cf:28:7f:0c:ea:9c:a4:20:ae:50:cf:2b:a6:42: 4f:72:64:9f:c2:7b:e1:71:76:88:68:d5:53:e1:f1: bf:4c:3b:f3:52:e7:bb:69:b0:b8:4a:6d:5a:fd:5f: 00:08:76:68:e5:d9:c0:54:e6:fa:da:c4:b0:bf:97: 27:44:0a:14:3b:2b:1f:68:32:61:38:8a:ab:ad:33: d6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:15:B9:1A:48:D5:EB:A2:F7:77:92:FD:49:65:18:FE:F0:F4:93:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4955241c-3f7d-3e61-94b3-0fbf05b92e7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.22.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:7a:32:f9:ae:aa:63:5b:c3:58:4b:fd:72:90:9d:58:3b:1f: 13:dd:86:e8:27:4f:cb:71:7d:2f:cb:9f:5c:71:5d:0c:b1:b7: ae:6f:c9:c7:20:a5:b8:21:4e:5e:d7:6f:ed:ad:ff:47:5e:63: c3:46:d8:69:9a:9a:2c:ad:0d:63:6a:f6:56:a0:da:62:c3:73: a0:e7:4b:68:27:c9:8d:e6:35:fa:c2:4c:e7:ad:4b:1b:46:1e: 69:29:f2:30:27:b7:98:b8:50:90:fd:ef:ce:d2:26:85:29:3d: 59:65:59:7f:3b:5a:79:ba:45:fe:36:a5:2e:eb:14:94:24:ce: 95:28:24:69:45:2b:f7:fa:ac:7f:f9:cf:ac:cd:9d:38:95:6f: 11:8e:0d:12:98:89:d0:a9:86:ef:68:07:a3:dd:d6:f3:0f:89: 48:02:dd:9d:06:ab:59:05:fe:c9:77:7f:61:f9:6e:08:b6:a7: b2:ee:5e:bb:2e:ad:79:25:5c:e8:55:7a:bf:88:87:cb:7e:9b: 6e:a5:95:2c:0b:23:7f:0e:07:c3:da:27:35:c3:b7:93:65:5b: c7:72:63:4e:2b:ea:02:e9:3b:51:d9:d4:1d:3b:d1:07:14:63: d3:f1:22:a5:cb:9c:17:8e:d8:fa:8f:df:2b:cd:bf:45:0a:d5: 26:35:9b:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf908/lKsE4xs8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk MGYyZTkxYmYtYjg3Ny00YWVjLTk5MTEtYjNkZmVmNTYxNTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdO8Q0NME8DfLA6w5ARvXlrJD4TFaOBqddwt qo1sANFWWf+6DFlG3Tjo4LZfogO/ph6IIFNnvmCzNMlyVDAdXkVSxMt9THFfeIPs 7Br8DdYD2pY4Q7m0oMDytvL6nD714+EioUYtWMPeEB3V4/zRWg0bM9YcKm4S6M0r M2RCdA3HLTwwBM3rHzA47LYTQ4BsoEQ5ZlwIHs2lMERzAPB+6yD7+FnImEn9MnJE vK7ll+6tJyfLzyh/DOqcpCCuUM8rpkJPcmSfwnvhcXaIaNVT4fG/TDvzUue7abC4 Sm1a/V8ACHZo5dnAVOb62sSwv5cnRAoUOysfaDJhOIqrrTPWawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQVuRpI1eui93eS/UllGP7w9JNSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDk1NTI0MWMtM2Y3ZC0z ZTYxLTk0YjMtMGZiZjA1YjkyZTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFbBYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB16MvmuqmNbw1hL/XKQnVg7HxPdhugnT8txfS/Ln1xxXQyxt65vyccg pbghTl7Xb+2t/0deY8NG2GmamiytDWNq9lag2mLDc6DnS2gnyY3mNfrCTOetSxtG Hmkp8jAnt5i4UJD9787SJoUpPVllWX87Wnm6Rf42pS7rFJQkzpUoJGlFK/f6rH/5 z6zNnTiVbxGODRKYidCphu9oB6Pd1vMPiUgC3Z0Gq1kF/sl3f2H5bgi2p7LuXrsu rXklXOhVer+Ih8t+m26llSwLI38OB8PaJzXDt5NlW8dyY04r6gLpO1HZ1B070QcU Y9PxIqXLnBeO2PqP3yvNv0UK1SY1m40= -----END CERTIFICATE-----Generated at Mon Jun 30 19:56:20 2025 by rpki-client