$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4f4c453-9edf-3fe7-b56e-6348d4db1839.roa File: d4f4c453-9edf-3fe7-b56e-6348d4db1839.roa (raw, json) Hash identifier: C0R08WC45t4R5bJf8XRMXA6jyFEB/iQ400eYOt0ccU4= Subject key identifier: F9:39:55:D8:89:A1:EF:B0:3B:89:B5:93:53:6D:20:87:D2:56:34:37 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849F1800AAE70D823424F483E50 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4f4c453-9edf-3fe7-b56e-6348d4db1839.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 701 IP address blocks: 108.17.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:80:0a:ae:70:d8:23:42:4f:48:3e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=4bc0f1e5-a640-41da-b741-d1d6fa524e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:43:41:89:52:95:e4:db:84:9c:e7:c8:14:d9: 3c:18:b7:4e:16:77:e7:a7:e6:de:2d:c2:b8:20:52: 9d:bf:3b:69:42:4a:3a:b1:a4:47:72:64:bd:71:e7: e3:a4:79:4b:c6:2b:6e:fa:ea:fb:9c:4b:98:89:c1: 81:f6:d5:d8:fe:a4:3b:7d:bb:ae:91:36:40:0d:be: 97:21:47:2d:b9:24:d1:df:09:b1:47:31:4c:c3:76: 76:b7:e7:a3:67:1e:54:08:ec:7c:e0:26:75:9c:18: cd:07:84:d2:eb:43:c8:7d:b0:9b:fb:49:f4:b7:40: 5f:b1:54:f7:3c:55:54:c4:a6:37:aa:a6:8a:52:26: 87:95:67:83:48:eb:11:92:ee:b7:89:9a:1a:d6:58: 38:a9:5f:51:93:07:2a:cd:d7:f8:62:08:3d:f3:d4: 71:6e:23:c7:64:82:15:ee:3b:8d:61:47:3f:b6:25: f1:19:d0:7d:df:79:00:fe:4e:ae:6f:8a:f8:34:6b: aa:81:61:70:b0:a4:8e:c7:97:92:b5:cb:e6:81:75: 0f:a3:ed:6d:e8:f8:86:fe:d9:22:cd:87:5f:9c:59: 26:96:8a:98:23:b6:cc:3d:02:c5:84:81:0b:d4:b0: 78:1c:81:ae:f3:05:6f:e0:c2:12:fa:ef:34:ba:53: 05:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:39:55:D8:89:A1:EF:B0:3B:89:B5:93:53:6D:20:87:D2:56:34:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4f4c453-9edf-3fe7-b56e-6348d4db1839.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.17.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:a0:1e:f4:c2:33:74:39:61:82:60:ff:5d:74:a2:f3:af:f1: 5c:01:70:f4:80:68:28:a2:60:37:b1:88:5f:cf:f5:64:05:0a: 2c:44:4e:e9:e5:e1:9f:39:ae:c5:28:d5:0f:06:97:e3:db:d9: 10:8c:20:33:bf:a5:d8:a8:46:f7:0c:01:1f:a7:de:82:cd:f2: 36:35:98:c6:c9:f1:72:fe:0d:b4:11:1c:02:76:c1:5c:75:6b: ac:6d:20:48:1c:95:d9:d9:94:62:63:02:0f:a1:5f:df:4e:d8: bd:97:a5:ea:f6:61:73:c7:8f:de:cf:70:ff:87:61:02:9d:49: 5e:1d:15:4e:d1:90:6a:54:bf:9b:f9:db:ab:6c:9c:18:35:66: 5e:78:3c:46:86:b5:34:d4:e9:20:d5:40:4e:70:22:b4:51:4c: 46:0b:b0:14:7f:52:2b:9f:15:7d:23:bf:6b:c1:b2:16:06:fa: 19:33:8a:7b:1b:be:82:18:8d:09:4d:7e:b5:fc:52:47:4e:00: d5:c8:f8:95:f2:85:eb:8d:96:7e:fa:75:13:20:6c:b5:4c:92: d3:d2:4a:64:52:70:c0:b7:86:59:4f:73:05:84:e0:ab:15:1b: 58:3c:9d:de:d6:84:b1:e1:e5:19:35:4d:d2:49:95:95:ea:26: 13:e8:9b:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxgAqucNgjQk9IPlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk NGJjMGYxZTUtYTY0MC00MWRhLWI3NDEtZDFkNmZhNTI0ZTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0NBiVKV5NuEnOfIFNk8GLdOFnfnp+beLcK4 IFKdvztpQko6saRHcmS9cefjpHlLxitu+ur7nEuYicGB9tXY/qQ7fbuukTZADb6X IUctuSTR3wmxRzFMw3Z2t+ejZx5UCOx84CZ1nBjNB4TS60PIfbCb+0n0t0BfsVT3 PFVUxKY3qqaKUiaHlWeDSOsRku63iZoa1lg4qV9Rkwcqzdf4Ygg989RxbiPHZIIV 7juNYUc/tiXxGdB933kA/k6ub4r4NGuqgWFwsKSOx5eStcvmgXUPo+1t6PiG/tki zYdfnFkmloqYI7bMPQLFhIEL1LB4HIGu8wVv4MIS+u80ulMFoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPk5VdiJoe+wO4m1k1NtIIfSVjQ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDRmNGM0NTMtOWVkZi0z ZmU3LWI1NmUtNjM0OGQ0ZGIxODM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFbBGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGagHvTCM3Q5YYJg/110ovOv8VwBcPSAaCiiYDexiF/P9WQFCixETunl 4Z85rsUo1Q8Gl+Pb2RCMIDO/pdioRvcMAR+n3oLN8jY1mMbJ8XL+DbQRHAJ2wVx1 a6xtIEgcldnZlGJjAg+hX99O2L2Xper2YXPHj97PcP+HYQKdSV4dFU7RkGpUv5v5 26tsnBg1Zl54PEaGtTTU6SDVQE5wIrRRTEYLsBR/UiufFX0jv2vBshYG+hkzinsb voIYjQlNfrX8UkdOANXI+JXyheuNln76dRMgbLVMktPSSmRScMC3hllPcwWE4KsV G1g8nd7WhLHh5Rk1TdJJlZXqJhPom7U= -----END CERTIFICATE-----Generated at Mon Jun 30 21:07:28 2025 by rpki-client