$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bdce1d14-a088-393f-b99d-5d7ec72d6ce9.roa File: bdce1d14-a088-393f-b99d-5d7ec72d6ce9.roa (raw, json) Hash identifier: L4hsGy+J5ehwobBT3l9hGfggQEfrIft6md1flLM6VU0= Subject key identifier: 41:59:BF:00:85:9B:E5:B0:7B:F0:5F:A8:A0:F4:A4:56:4E:45:F9:08 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849F1800B252F37DAB063F3E380 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bdce1d14-a088-393f-b99d-5d7ec72d6ce9.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 701 IP address blocks: 108.4.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:80:0b:25:2f:37:da:b0:63:f3:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=48e705b0-3e92-473e-89cf-b31cf270a233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:17:48:5c:bb:6b:fb:2d:3f:d9:be:2a:74:2f: 05:da:0a:3d:1a:59:c6:cb:17:88:e7:03:1a:0f:45: 7d:5d:d1:62:2c:b7:21:eb:fa:56:f1:c5:b3:b4:e4: ce:54:a6:54:54:9e:32:da:fd:66:ac:71:de:36:a2: 2d:d4:01:cb:7e:e5:b9:7a:91:76:08:54:bb:ed:c9: b2:69:d0:e6:be:85:80:b7:ff:4e:16:12:90:8e:53: 54:66:f0:2e:05:7f:cd:09:e3:c4:32:96:6a:da:95: 61:24:98:70:3b:3e:ae:35:88:fb:df:bd:ea:2e:62: 6a:15:48:bc:c6:93:02:73:2d:0a:75:2b:bd:94:06: e5:2f:be:ce:61:83:44:5b:18:a2:a1:56:9f:d3:1e: 53:ba:72:35:29:8a:55:be:50:96:c7:b5:eb:10:a9: a5:63:22:ee:80:39:1b:a9:c2:c1:b1:ab:a0:54:78: 55:8b:20:b5:f5:f3:45:be:4e:23:c0:ef:99:fe:bc: 0d:65:bb:2e:a7:49:5c:e6:b5:83:9c:0a:ce:65:01: 82:ac:dc:5b:40:3e:55:42:91:45:03:5c:70:33:1d: 33:2f:de:a6:16:84:50:f5:ec:8d:31:ee:9b:a2:4b: ab:2f:b9:f4:97:68:b7:ae:6e:e9:d9:e3:48:ef:d0: 68:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:59:BF:00:85:9B:E5:B0:7B:F0:5F:A8:A0:F4:A4:56:4E:45:F9:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bdce1d14-a088-393f-b99d-5d7ec72d6ce9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.4.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:0a:69:fe:17:7c:f0:27:9d:30:5b:ed:9f:23:2b:57:f2:2e: 30:7b:e2:0d:ff:8c:b8:f9:a2:53:a0:37:3a:64:f6:f3:03:06: 05:eb:a1:b7:1d:4e:d4:ad:56:2d:79:07:1b:75:9b:5d:e9:62: 58:46:78:59:d4:0f:e0:ac:c1:ac:ed:aa:81:57:00:17:8b:37: d8:66:6b:be:37:62:d7:43:55:e2:77:c0:40:b3:24:b2:4d:48: b3:dc:4e:c3:c0:bd:1e:a6:0e:b5:23:07:0a:2d:f7:de:e6:7f: 5a:40:4e:f6:53:5e:00:e1:da:37:a2:6d:f2:f8:7f:40:5e:79: 3a:3a:9d:fd:cf:0d:bf:ea:2a:60:c2:52:28:bd:0b:42:de:44: 50:82:84:97:e2:7c:58:9a:f1:ce:8e:de:e3:73:bb:c3:12:38: 88:b3:c1:3c:1c:5c:ca:85:ec:bd:30:68:1f:ad:47:4a:bf:a5: 5a:49:4c:35:48:af:c1:9c:be:7e:aa:a0:d6:e4:2d:e6:62:fd: 17:5f:d5:46:95:6b:f3:7e:16:26:a7:79:88:62:16:fa:e4:37: 20:e9:be:b7:d8:33:3d:6e:b9:ff:69:1d:9b:d4:bc:f5:2e:c5: 92:92:95:ec:dd:20:ff:6b:ac:cf:f8:f5:2a:c3:86:1b:42:47: e1:7b:88:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxgAslLzfasGPz44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk NDhlNzA1YjAtM2U5Mi00NzNlLTg5Y2YtYjMxY2YyNzBhMjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxdIXLtr+y0/2b4qdC8F2go9GlnGyxeI5wMa D0V9XdFiLLch6/pW8cWztOTOVKZUVJ4y2v1mrHHeNqIt1AHLfuW5epF2CFS77cmy adDmvoWAt/9OFhKQjlNUZvAuBX/NCePEMpZq2pVhJJhwOz6uNYj7373qLmJqFUi8 xpMCcy0KdSu9lAblL77OYYNEWxiioVaf0x5TunI1KYpVvlCWx7XrEKmlYyLugDkb qcLBsaugVHhViyC19fNFvk4jwO+Z/rwNZbsup0lc5rWDnArOZQGCrNxbQD5VQpFF A1xwMx0zL96mFoRQ9eyNMe6bokurL7n0l2i3rm7p2eNI79BoUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFZvwCFm+Wwe/BfqKD0pFZORfkIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmRjZTFkMTQtYTA4OC0z OTNmLWI5OWQtNWQ3ZWM3MmQ2Y2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFbASAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcKaf4XfPAnnTBb7Z8jK1fyLjB74g3/jLj5olOgNzpk9vMDBgXrobcd TtStVi15Bxt1m13pYlhGeFnUD+CswaztqoFXABeLN9hma743YtdDVeJ3wECzJLJN SLPcTsPAvR6mDrUjBwot997mf1pATvZTXgDh2jeibfL4f0BeeTo6nf3PDb/qKmDC Uii9C0LeRFCChJfifFia8c6O3uNzu8MSOIizwTwcXMqF7L0waB+tR0q/pVpJTDVI r8Gcvn6qoNbkLeZi/Rdf1UaVa/N+FianeYhiFvrkNyDpvrfYMz1uuf9pHZvUvPUu xZKSlezdIP9rrM/49SrDhhtCR+F7iFc= -----END CERTIFICATE-----Generated at Mon Jun 30 19:56:30 2025 by rpki-client