$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/872f476c-b7cb-3c95-8fef-940a071d7450.roa File: 872f476c-b7cb-3c95-8fef-940a071d7450.roa (raw, json) Hash identifier: pB12ZrvegiCeaztZIbhReCQfP+rXnxSElWhWwFBFgpY= Subject key identifier: 85:A6:CD:88:AD:1B:0C:D5:B7:1B:6F:56:A1:C5:82:D6:C3:0D:37:01 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD23BE24E9109B0E12EB61E00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/872f476c-b7cb-3c95-8fef-940a071d7450.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 701 IP address blocks: 108.44.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:e2:4e:91:09:b0:e1:2e:b6:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=08632618-31b7-477f-9745-693a6bd9d35c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:bd:97:f6:a0:68:73:9f:da:d0:fc:63:78:7b: e6:78:cc:8e:5f:66:38:18:cc:84:7e:d9:1f:74:b8: bf:3d:80:47:2a:cc:40:e0:bf:dc:9d:71:8d:36:4e: a8:9a:cf:e8:c9:05:31:a6:d2:3a:03:4a:19:d9:99: a4:b4:6d:71:3d:aa:05:68:7b:9b:43:bb:f6:01:51: 1f:b5:8a:47:d9:8e:7e:d7:55:f9:f1:87:c6:96:19: 5d:1b:11:40:ca:c1:f4:11:b4:8c:da:40:4c:09:36: e4:bd:b0:4f:27:3c:ff:38:4b:d5:7b:cb:21:62:28: f8:f0:bb:c1:63:71:5b:71:a7:2d:24:5f:32:b3:a8: ec:ab:f3:ed:f9:d8:31:71:8f:51:7e:8e:70:8f:d9: e3:c7:f7:a4:71:e4:6f:66:17:4c:1c:b0:af:30:b0: 90:25:42:36:79:01:46:5e:f2:c1:5b:d2:05:8f:21: 29:ba:5f:26:b0:94:23:f9:3a:4e:84:73:1a:ac:65: a0:97:fd:a7:0c:16:13:3b:d1:92:31:61:87:75:72: f0:f4:a2:13:47:4d:8a:17:9e:f8:50:b9:9c:f5:10: bf:4a:9a:a4:ae:b2:c4:81:74:2e:ba:ca:9b:a0:fe: 65:49:34:e3:1c:c3:12:d7:f0:95:98:c1:de:7b:fd: 5c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A6:CD:88:AD:1B:0C:D5:B7:1B:6F:56:A1:C5:82:D6:C3:0D:37:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/872f476c-b7cb-3c95-8fef-940a071d7450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.44.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:ed:e4:96:62:6e:98:7f:3e:24:b6:3f:e2:3c:27:fd:8a:1b: f6:0a:44:d6:08:be:de:82:02:05:fe:a3:07:ea:65:d0:af:7b: 97:df:ab:3d:b2:96:de:40:c7:c2:c0:dc:39:3f:27:e4:3a:73: de:b1:90:f6:76:89:e7:a6:87:1c:af:d8:67:3d:98:c9:6c:d5: b6:3c:88:e5:24:17:25:8e:d0:09:df:ef:33:eb:8a:f1:fa:20: 22:fa:6a:6f:82:0b:2f:9a:0e:09:19:fd:ec:88:6e:f4:8a:1b: bf:3c:33:e2:64:ef:c1:1b:ab:23:2d:e2:fc:77:0c:57:ee:62: fb:a9:ef:eb:00:f0:ab:4e:12:58:b0:c5:1c:e6:0a:81:d5:91: 1c:6f:55:27:b3:75:26:ba:2d:61:3e:33:36:e7:75:12:1d:91: 95:f6:18:a9:b7:2e:ca:62:d6:4f:18:fe:fc:89:b2:91:37:70: fb:c8:13:95:1b:23:c3:fd:8e:6a:e2:68:e6:1b:20:5f:a1:70: f3:19:88:a1:bc:31:f6:f4:b7:5c:ad:4d:df:db:9d:36:5a:05: d4:3d:dd:2b:43:01:f3:17:6f:ea:6a:a2:0c:f7:89:84:04:a0: 6c:5d:f6:67:6b:96:15:50:bb:b2:64:16:46:4f:97:94:03:42: 31:f8:a8:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO+JOkQmw4S62HgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MDg2MzI2MTgtMzFiNy00NzdmLTk3NDUtNjkzYTZiZDlkMzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAir2X9qBoc5/a0PxjeHvmeMyOX2Y4GMyEftkf dLi/PYBHKsxA4L/cnXGNNk6oms/oyQUxptI6A0oZ2ZmktG1xPaoFaHubQ7v2AVEf tYpH2Y5+11X58YfGlhldGxFAysH0EbSM2kBMCTbkvbBPJzz/OEvVe8shYij48LvB Y3FbcactJF8ys6jsq/Pt+dgxcY9Rfo5wj9njx/ekceRvZhdMHLCvMLCQJUI2eQFG XvLBW9IFjyEpul8msJQj+TpOhHMarGWgl/2nDBYTO9GSMWGHdXLw9KITR02KF574 ULmc9RC/SpqkrrLEgXQuusqboP5lSTTjHMMS1/CVmMHee/1c1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWmzYitGwzVtxtvVqHFgtbDDTcBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODcyZjQ3NmMtYjdjYi0z Yzk1LThmZWYtOTQwYTA3MWQ3NDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHbCyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvt5JZibph/PiS2P+I8J/2KG/YKRNYIvt6CAgX+owfqZdCve5ffqz2y lt5Ax8LA3Dk/J+Q6c96xkPZ2ieemhxyv2Gc9mMls1bY8iOUkFyWO0Anf7zPrivH6 ICL6am+CCy+aDgkZ/eyIbvSKG788M+Jk78EbqyMt4vx3DFfuYvup7+sA8KtOEliw xRzmCoHVkRxvVSezdSa6LWE+MzbndRIdkZX2GKm3Lspi1k8Y/vyJspE3cPvIE5Ub I8P9jmriaOYbIF+hcPMZiKG8Mfb0t1ytTd/bnTZaBdQ93StDAfMXb+pqogz3iYQE oGxd9mdrlhVQu7JkFkZPl5QDQjH4qBc= -----END CERTIFICATE-----Generated at Sat Aug 23 14:27:58 2025 by rpki-client