$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d447095a-a96a-37fd-b4a7-9413f42785d3.roa File: d447095a-a96a-37fd-b4a7-9413f42785d3.roa (raw, json) Hash identifier: SubAniE+NHlzeAVl870lnU97YIBN0DyDsLdj8SIkUSU= Subject key identifier: 39:AD:72:FA:25:35:04:CA:F1:1E:65:7D:A6:0C:30:9E:E5:8B:D2:15 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD23C0F483FC663A1E8009800 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d447095a-a96a-37fd-b4a7-9413f42785d3.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 701 IP address blocks: 108.8.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:0f:48:3f:c6:63:a1:e8:00:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=ce12bdd3-e548-4131-b477-9faeaed7a9d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f2:db:b6:5d:c3:4b:0d:e4:11:ea:9d:6e:de: 94:81:24:49:b2:f4:6a:65:33:d4:f4:10:bd:a0:2c: 23:fa:b3:76:52:dd:fb:8f:22:df:55:0c:42:d7:0e: 03:89:6c:04:eb:67:b1:15:cf:20:a4:cf:ac:d9:f7: 44:bf:c1:e6:0a:71:20:20:e6:d2:7a:d6:d5:31:62: bf:6a:4e:c5:b9:16:7b:bb:eb:b8:39:ac:e6:0a:49: 3e:d2:2a:3d:2c:1f:d1:78:24:2e:4d:95:04:a4:99: 4e:94:cb:7c:6e:0f:da:c2:92:20:ce:cc:83:48:1b: 0f:ca:d7:ce:35:fe:22:07:68:bc:ca:a1:09:d3:f8: 15:ff:53:8b:97:09:6e:6e:3f:1a:75:2b:d5:cd:82: 43:2a:89:72:40:8a:a0:f4:1c:4c:6b:da:cb:df:ba: 79:2f:9f:a6:46:62:b3:c7:af:6b:96:2d:16:3a:9e: 76:72:c8:8c:cb:8b:f6:99:64:fb:68:4a:3e:ea:38: 97:3c:ce:c3:70:99:55:db:c3:1f:d3:dd:77:b3:88: df:5b:59:a2:90:17:be:9d:ac:e8:8c:b4:ef:61:1d: 97:e8:e0:79:0b:a7:b8:9e:fb:98:eb:ac:f9:75:a8: 06:f7:77:41:3b:aa:8d:b0:ad:91:1b:6b:a0:8e:6b: 47:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:AD:72:FA:25:35:04:CA:F1:1E:65:7D:A6:0C:30:9E:E5:8B:D2:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d447095a-a96a-37fd-b4a7-9413f42785d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.8.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:5d:f3:d1:eb:cf:d3:94:b9:04:4f:b9:bb:44:5b:59:33:a3: 12:bc:8f:57:9e:20:e8:9a:95:48:a8:f8:13:73:56:31:00:2b: 37:7f:8c:e1:4d:32:06:45:af:2f:0e:c0:96:af:48:3a:22:ad: 10:8c:0c:3f:d7:c8:bf:9a:c2:b8:9b:a7:32:35:82:bd:73:ac: d1:76:02:b7:18:9f:35:a3:12:fd:75:d5:df:90:c0:e4:a7:7d: 0a:9e:2b:93:b3:be:68:01:89:df:24:9f:5f:46:a5:55:16:96: bf:44:d6:e8:64:ff:10:9d:5c:f7:a6:c4:9c:34:ca:9b:cf:a8: be:9e:8f:ec:ff:45:64:7c:05:1b:46:7c:bf:bf:55:6c:b5:eb: 75:40:6a:f8:9b:da:88:4e:a7:da:cc:f9:6b:8a:2e:5a:69:d1: 38:00:d6:ae:3d:1e:66:04:1e:f6:bc:81:ef:17:86:e2:1e:dd: 83:a2:30:5f:8c:c5:e8:36:b2:a5:8d:45:3e:49:3b:67:07:84: 74:57:63:7d:c6:eb:3f:4b:63:46:a5:9c:36:5b:3e:07:75:85: 2b:e7:d9:d5:1b:42:14:c4:1f:97:70:aa:18:7a:03:0e:90:64: bc:f5:2b:d9:56:c7:7c:fb:70:38:1f:d7:f3:17:7e:1b:0d:ff: 4c:f8:2e:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSPA9IP8ZjoegAmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk Y2UxMmJkZDMtZTU0OC00MTMxLWI0NzctOWZhZWFlZDdhOWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfLbtl3DSw3kEeqdbt6UgSRJsvRqZTPU9BC9 oCwj+rN2Ut37jyLfVQxC1w4DiWwE62exFc8gpM+s2fdEv8HmCnEgIObSetbVMWK/ ak7FuRZ7u+u4OazmCkk+0io9LB/ReCQuTZUEpJlOlMt8bg/awpIgzsyDSBsPytfO Nf4iB2i8yqEJ0/gV/1OLlwlubj8adSvVzYJDKolyQIqg9BxMa9rL37p5L5+mRmKz x69rli0WOp52csiMy4v2mWT7aEo+6jiXPM7DcJlV28Mf0913s4jfW1mikBe+nazo jLTvYR2X6OB5C6e4nvuY66z5dagG93dBO6qNsK2RG2ugjmtHqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmtcvolNQTK8R5lfaYMMJ7li9IVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDQ0NzA5NWEtYTk2YS0z N2ZkLWI0YTctOTQxM2Y0Mjc4NWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFbAggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpd89Hrz9OUuQRPubtEW1kzoxK8j1eeIOialUio+BNzVjEAKzd/jOFN MgZFry8OwJavSDoirRCMDD/XyL+awribpzI1gr1zrNF2ArcYnzWjEv111d+QwOSn fQqeK5OzvmgBid8kn19GpVUWlr9E1uhk/xCdXPemxJw0ypvPqL6ej+z/RWR8BRtG fL+/VWy163VAavib2ohOp9rM+WuKLlpp0TgA1q49HmYEHva8ge8XhuIe3YOiMF+M xeg2sqWNRT5JO2cHhHRXY33G6z9LY0alnDZbPgd1hSvn2dUbQhTEH5dwqhh6Aw6Q ZLz1K9lWx3z7cDgf1/MXfhsN/0z4Lvg= -----END CERTIFICATE-----Generated at Sat Aug 23 16:27:42 2025 by rpki-client