$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba98bb5f-0e3d-39b6-a783-50dfe7237324.roa File: ba98bb5f-0e3d-39b6-a783-50dfe7237324.roa (raw, json) Hash identifier: iXuFI59lgN9r1+yKQDTtQxN9SqBF1ntbFGRQhPF4jnE= Subject key identifier: 65:4C:F2:E1:67:9C:CA:58:98:3A:B9:45:96:E5:13:CB:BB:7F:04:4B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD23C1235ED94C4E63EF8A9CE Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba98bb5f-0e3d-39b6-a783-50dfe7237324.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 701 IP address blocks: 108.39.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:12:35:ed:94:c4:e6:3e:f8:a9:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=dec1d6ec-86d0-4a97-8b56-4f9d217846bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ce:a5:8a:a6:2b:14:96:66:90:b3:9a:c0:f8: eb:98:7e:b7:84:f0:64:77:37:5b:64:e4:5d:b9:4b: d9:0c:a6:89:82:d6:8a:b6:de:6c:c5:6b:91:85:7e: 66:99:0e:bc:c2:15:c5:6f:1b:64:e6:0e:88:6a:4a: bc:e2:b5:64:da:5b:cd:c2:0d:15:22:2f:3a:3b:02: 98:6b:31:56:0f:8a:b2:cd:eb:65:a5:2d:ca:1d:9e: df:7d:16:ca:79:fd:c1:56:40:44:5f:a3:81:31:d7: 32:00:b5:b6:f2:0c:e5:a6:6f:44:99:21:f0:74:47: 2f:88:8c:f9:d2:5a:db:c0:00:1e:7d:ba:40:dd:c1: 8f:ad:34:04:f8:b8:66:df:de:c3:09:53:af:d3:f0: 0b:e8:e8:1e:ae:7e:96:3e:c1:c9:ba:f4:1b:c5:b8: 67:a8:24:ba:ba:eb:75:27:2a:b9:dd:7a:5e:e0:6d: f5:04:0d:11:15:13:0a:c4:1e:01:8f:a1:93:2d:d4: 96:49:03:ab:75:71:d6:bc:65:a3:1f:55:76:c4:fa: 1c:d1:dd:e7:62:b4:f2:e0:17:11:bf:58:c4:67:ab: 21:ad:16:c9:d6:52:44:e5:36:5f:2c:91:08:5d:54: 1a:7f:db:1c:86:c2:23:4b:65:bf:7c:aa:e9:b3:df: 67:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4C:F2:E1:67:9C:CA:58:98:3A:B9:45:96:E5:13:CB:BB:7F:04:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba98bb5f-0e3d-39b6-a783-50dfe7237324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.39.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:dc:76:cb:d1:af:72:67:28:ec:ad:ca:db:9c:28:57:89:1c: 53:45:ea:23:ba:9c:0c:18:ab:df:3c:e2:b2:95:e0:ac:f7:fc: fa:35:8e:45:9c:bb:96:65:54:b2:03:10:61:56:d4:59:33:af: 1f:41:da:87:09:5e:bb:c8:64:b4:56:89:d4:a0:fa:7f:0d:1c: ca:39:44:65:54:f6:6d:1a:d9:3f:05:01:14:af:12:8b:b4:a3: 20:66:70:9f:bb:6b:f2:db:56:2e:6b:14:96:54:cf:46:78:6c: 88:79:8e:4a:e0:de:69:7b:b6:40:a9:69:2c:08:39:a0:7e:2b: 9d:a7:86:80:7c:7e:a2:ec:3c:c1:3a:60:3f:9f:87:26:66:34: 69:e7:13:b2:2b:23:cc:74:4a:be:92:89:f1:c9:cf:8b:b5:71: 80:b3:45:2b:24:c6:a2:fb:cc:f8:47:43:c4:5b:26:f6:fc:0e: 40:7f:ce:ad:02:e5:fd:a0:1b:f9:08:f7:76:d3:fb:c7:42:f0: 5e:0c:f6:67:a3:be:d4:02:34:82:b2:e2:44:cb:f0:d7:76:28: cd:14:36:19:5d:c0:c5:aa:30:c7:29:b3:44:d5:cd:3f:e4:e2: 3a:da:79:4d:77:dd:e5:11:7f:99:77:3b:fa:02:f5:47:38:65: c0:a3:e1:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSPBI17ZTE5j74qc4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZGVjMWQ2ZWMtODZkMC00YTk3LThiNTYtNGY5ZDIxNzg0NmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM6liqYrFJZmkLOawPjrmH63hPBkdzdbZORd uUvZDKaJgtaKtt5sxWuRhX5mmQ68whXFbxtk5g6Iakq84rVk2lvNwg0VIi86OwKY azFWD4qyzetlpS3KHZ7ffRbKef3BVkBEX6OBMdcyALW28gzlpm9EmSHwdEcviIz5 0lrbwAAefbpA3cGPrTQE+Lhm397DCVOv0/AL6Ogern6WPsHJuvQbxbhnqCS6uut1 Jyq53Xpe4G31BA0RFRMKxB4Bj6GTLdSWSQOrdXHWvGWjH1V2xPoc0d3nYrTy4BcR v1jEZ6shrRbJ1lJE5TZfLJEIXVQaf9schsIjS2W/fKrps99nIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVM8uFnnMpYmDq5RZblE8u7fwRLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmE5OGJiNWYtMGUzZC0z OWI2LWE3ODMtNTBkZmU3MjM3MzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHbCcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKncdsvRr3JnKOytytucKFeJHFNF6iO6nAwYq9884rKV4Kz3/Po1jkWc u5ZlVLIDEGFW1Fkzrx9B2ocJXrvIZLRWidSg+n8NHMo5RGVU9m0a2T8FARSvEou0 oyBmcJ+7a/LbVi5rFJZUz0Z4bIh5jkrg3ml7tkCpaSwIOaB+K52nhoB8fqLsPME6 YD+fhyZmNGnnE7IrI8x0Sr6SifHJz4u1cYCzRSskxqL7zPhHQ8RbJvb8DkB/zq0C 5f2gG/kI93bT+8dC8F4M9mejvtQCNIKy4kTL8Nd2KM0UNhldwMWqMMcps0TVzT/k 4jraeU133eURf5l3O/oC9Uc4ZcCj4Tc= -----END CERTIFICATE-----Generated at Sat Aug 23 14:27:06 2025 by rpki-client