$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5db54f0f-0d83-308c-8072-e00a60e20012.roa File: 5db54f0f-0d83-308c-8072-e00a60e20012.roa (raw, json) Hash identifier: n6LZ8rhST5AOHOIsL7bqGDOzJFmc3HWrULzE5vqZqkQ= Subject key identifier: 07:07:CE:7B:81:D8:D7:76:96:C3:5E:81:D0:72:5D:D2:5A:7B:3A:54 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A3B7B088CACBCE4DA1F258AC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5db54f0f-0d83-308c-8072-e00a60e20012.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 701 IP address blocks: 108.22.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:08:8c:ac:bc:e4:da:1f:25:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=4a26c7ee-3b04-47a9-a0d0-6b1951c2afb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:95:e6:1a:3f:19:c3:0e:19:b7:1a:60:b3:b1: 3e:d1:f1:f2:02:98:08:6a:4c:ec:1d:f1:cb:87:0f: 6d:c2:0b:da:c1:16:d7:a1:42:89:22:1b:a9:a3:d9: f9:45:59:63:da:aa:db:98:9c:29:fc:e1:5a:1f:16: 51:c8:41:8a:2b:84:5d:ac:a1:1f:db:f6:b2:38:82: cd:fb:2c:85:59:c7:cd:e6:21:34:0d:29:5c:57:83: bf:62:3b:b6:63:95:83:bc:0f:93:cf:8a:6c:ae:51: fb:25:1d:68:28:c9:ec:af:a0:5d:cf:00:bc:49:4a: 0d:cd:f3:54:b0:8a:13:40:90:c1:6d:b5:c8:b0:34: 0f:91:12:a2:02:fd:b9:ea:ca:45:ec:69:58:a4:31: 72:f9:4f:bd:47:ed:ae:b7:d2:60:cb:02:6b:7d:09: d3:19:c9:8f:e4:81:b1:34:32:6a:4f:e2:14:68:23: 62:e1:1f:49:63:68:c3:a4:e9:ee:ae:1c:de:7a:b4: 0d:dc:61:c8:c3:d5:dc:73:67:28:07:7e:4a:3d:d0: ad:5d:b6:3e:89:a1:4d:fb:cc:3c:68:fc:ab:3b:4c: 9a:03:55:fe:80:13:9c:b4:b8:8e:3b:2d:62:64:f5: e9:35:67:9e:78:fa:c2:3a:44:ea:36:5c:57:3e:b5: c6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:07:CE:7B:81:D8:D7:76:96:C3:5E:81:D0:72:5D:D2:5A:7B:3A:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5db54f0f-0d83-308c-8072-e00a60e20012.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.22.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:7b:02:b2:31:e5:57:9b:c6:b3:6a:5b:1b:0d:ae:47:83:f6: 3d:07:35:a8:16:ff:23:ec:bd:09:35:4a:09:6a:b4:96:59:0e: b2:37:24:58:f2:ec:21:7c:0f:01:98:73:36:f4:5b:bc:82:91: da:94:c9:07:ae:f5:1b:1b:13:ee:9c:6c:ca:ae:80:be:15:6f: 39:a7:0d:0e:83:6f:01:7d:a7:b3:10:c7:a0:fb:9f:8d:1c:0b: 47:31:e0:c9:37:bc:23:fc:11:46:0a:f6:86:b3:91:1d:cd:92: e1:74:33:1f:ae:54:5e:23:93:68:e6:1f:bc:74:c9:29:d0:58: 29:0a:8f:59:31:d7:f1:d0:86:08:80:51:a7:51:22:8b:6b:b9: d5:b0:8f:7c:b4:c3:93:1c:8e:5b:81:1d:6c:0e:8a:87:2b:de: fc:02:79:87:56:2f:61:15:51:48:8b:f4:87:c8:7c:c7:2f:3e: 95:fb:e0:f1:d1:52:84:f7:81:75:66:89:90:28:df:e4:ef:49: 1f:04:25:17:08:78:df:8d:0c:cc:72:6e:42:c8:72:10:1a:67: 1d:a6:66:d4:ad:78:59:51:c6:56:f0:38:38:c6:f7:b9:bb:33: 26:8d:ba:03:96:bb:01:ab:51:b9:2b:0c:23:2c:b9:8d:f1:57: 87:5f:20:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ewiMrLzk2h8lisAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk NGEyNmM3ZWUtM2IwNC00N2E5LWEwZDAtNmIxOTUxYzJhZmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZXmGj8Zww4Ztxpgs7E+0fHyApgIakzsHfHL hw9twgvawRbXoUKJIhupo9n5RVlj2qrbmJwp/OFaHxZRyEGKK4RdrKEf2/ayOILN +yyFWcfN5iE0DSlcV4O/Yju2Y5WDvA+Tz4psrlH7JR1oKMnsr6BdzwC8SUoNzfNU sIoTQJDBbbXIsDQPkRKiAv256spF7GlYpDFy+U+9R+2ut9JgywJrfQnTGcmP5IGx NDJqT+IUaCNi4R9JY2jDpOnurhzeerQN3GHIw9Xcc2coB35KPdCtXbY+iaFN+8w8 aPyrO0yaA1X+gBOctLiOOy1iZPXpNWeeePrCOkTqNlxXPrXGRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAcHznuB2Nd2lsNegdByXdJaezpUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWRiNTRmMGYtMGQ4My0z MDhjLTgwNzItZTAwYTYwZTIwMDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbBYIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJ7ArIx5VebxrNqWxsNrkeD9j0HNagW/yPsvQk1SglqtJZZDrI3JFjy 7CF8DwGYczb0W7yCkdqUyQeu9RsbE+6cbMqugL4VbzmnDQ6DbwF9p7MQx6D7n40c C0cx4Mk3vCP8EUYK9oazkR3NkuF0Mx+uVF4jk2jmH7x0ySnQWCkKj1kx1/HQhgiA UadRIotrudWwj3y0w5McjluBHWwOiocr3vwCeYdWL2EVUUiL9IfIfMcvPpX74PHR UoT3gXVmiZAo3+TvSR8EJRcIeN+NDMxybkLIchAaZx2mZtSteFlRxlbwODjG97m7 MyaNugOWuwGrUbkrDCMsuY3xV4dfIEc= -----END CERTIFICATE-----Generated at Mon Jun 30 19:45:27 2025 by rpki-client