$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f81c6b2-b1dc-36a2-9e84-be75a962123c.roa File: 4f81c6b2-b1dc-36a2-9e84-be75a962123c.roa (raw, json) Hash identifier: +/EskrD1gh+nqGXjfmeVDNeVA1nvM/0J+k+5FBAj9gc= Subject key identifier: 20:CE:62:9B:3D:9A:79:FA:03:BA:3F:20:06:D9:8F:EF:A5:2B:57:7B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD23C1259378454B558326880 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f81c6b2-b1dc-36a2-9e84-be75a962123c.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 701 IP address blocks: 108.39.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:12:59:37:84:54:b5:58:32:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=e48add9b-3a9f-42e9-a3d1-eb202c9d8bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7d:bd:f1:77:9c:e7:9a:4a:96:81:3e:4d:30: 7e:c7:ee:e1:49:a4:ca:b7:6a:9d:f8:e8:31:e9:13: b7:14:d9:a5:f1:c3:c8:64:f0:81:8b:80:0a:a1:12: 15:97:b5:28:8a:31:de:08:05:4b:6d:4d:3b:8e:e2: 3e:d4:19:c6:ec:57:ef:5e:e2:24:39:45:bf:4c:31: 45:48:f6:fa:74:99:9e:a0:6c:52:be:18:f2:d8:d8: 2b:bf:45:0c:c7:38:d0:f1:d6:84:5a:13:a7:cc:2d: 64:a4:2a:f1:c6:7a:24:dd:be:e1:08:d7:08:d4:48: 78:e9:8d:b5:34:42:a1:37:c7:96:b6:fa:07:32:c7: 9e:98:c1:0b:6b:3c:85:d3:41:98:4b:e5:a4:cb:7c: 8a:54:b5:ff:6b:92:5b:3c:12:c4:d2:17:7b:ce:34: 13:ca:b1:bc:22:24:35:ca:59:d5:54:d1:39:16:82: 29:8b:f0:3a:57:34:80:7e:c0:a0:13:48:44:c2:cb: db:35:b9:c4:4a:79:b9:f9:ef:38:b5:68:ec:7d:a2: d2:23:9c:09:0d:84:38:54:35:46:e8:76:63:5b:d2: b7:c1:fb:bd:7e:71:89:61:62:ca:cc:29:54:9d:2e: 66:bf:b3:7e:9f:d8:be:c1:be:c3:95:f4:96:5e:03: 79:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:CE:62:9B:3D:9A:79:FA:03:BA:3F:20:06:D9:8F:EF:A5:2B:57:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f81c6b2-b1dc-36a2-9e84-be75a962123c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.39.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:30:04:7f:61:a4:11:05:a0:3c:fd:38:7d:58:bf:f6:62:23: b1:55:b3:d0:b7:dc:68:90:2a:67:77:31:c8:cc:1c:41:46:b3: f0:df:8f:89:b0:4b:ba:93:9e:6a:ab:8d:55:31:ba:c4:2c:b6: 0d:8a:e5:e7:d1:3d:d1:b9:c5:a5:54:ce:06:0a:ba:4d:a2:de: d8:f4:4c:96:6d:be:77:65:f7:14:da:51:1c:2f:d4:d1:3c:49: 2f:f8:bd:a1:6c:bc:9f:98:82:55:c0:cc:e7:6b:29:34:cd:a8: 35:90:dd:80:37:5d:4a:db:e7:6d:ad:e5:45:f1:84:b3:67:2c: 27:1d:44:65:64:4c:65:62:0e:51:8e:bb:5f:7d:25:96:4c:29: 3b:0e:7c:64:bd:75:af:47:ef:f0:0e:b7:e1:f4:48:64:c1:3b: 7d:95:ec:a6:fa:fe:b9:88:00:29:0c:d1:1a:29:04:0e:1f:0c: 5d:4d:02:a0:d0:4f:49:2f:01:03:ec:6b:38:3d:c4:bb:ef:e6: 44:df:8b:ff:82:35:c6:27:c3:91:1a:96:ba:bc:95:3b:f6:d5: 07:3b:67:e1:dd:d2:b8:29:8a:c4:5b:63:4a:2f:c4:da:a4:c7: 7b:9b:7e:b7:f6:fb:1f:47:33:77:a4:21:74:66:79:4d:a7:33: 3a:d8:bb:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSPBJZN4RUtVgyaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZTQ4YWRkOWItM2E5Zi00MmU5LWEzZDEtZWIyMDJjOWQ4YmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3298Xec55pKloE+TTB+x+7hSaTKt2qd+Ogx 6RO3FNml8cPIZPCBi4AKoRIVl7UoijHeCAVLbU07juI+1BnG7FfvXuIkOUW/TDFF SPb6dJmeoGxSvhjy2Ngrv0UMxzjQ8daEWhOnzC1kpCrxxnok3b7hCNcI1Eh46Y21 NEKhN8eWtvoHMseemMELazyF00GYS+Wky3yKVLX/a5JbPBLE0hd7zjQTyrG8IiQ1 ylnVVNE5FoIpi/A6VzSAfsCgE0hEwsvbNbnESnm5+e84tWjsfaLSI5wJDYQ4VDVG 6HZjW9K3wfu9fnGJYWLKzClUnS5mv7N+n9i+wb7DlfSWXgN5aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDOYps9mnn6A7o/IAbZj++lK1d7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGY4MWM2YjItYjFkYy0z NmEyLTllODQtYmU3NWE5NjIxMjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHbCeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALEwBH9hpBEFoDz9OH1Yv/ZiI7FVs9C33GiQKmd3McjMHEFGs/Dfj4mw S7qTnmqrjVUxusQstg2K5efRPdG5xaVUzgYKuk2i3tj0TJZtvndl9xTaURwv1NE8 SS/4vaFsvJ+YglXAzOdrKTTNqDWQ3YA3XUrb522t5UXxhLNnLCcdRGVkTGViDlGO u199JZZMKTsOfGS9da9H7/AOt+H0SGTBO32V7Kb6/rmIACkM0RopBA4fDF1NAqDQ T0kvAQPsazg9xLvv5kTfi/+CNcYnw5Ealrq8lTv21Qc7Z+Hd0rgpisRbY0ovxNqk x3ubfrf2+x9HM3ekIXRmeU2nMzrYu7o= -----END CERTIFICATE-----Generated at Sat Aug 23 18:40:15 2025 by rpki-client