$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dfd968cd-f41b-3964-8ce9-0b6a4e17d2d2.roa File: dfd968cd-f41b-3964-8ce9-0b6a4e17d2d2.roa (raw, json) Hash identifier: mpIDK388r2jQ+/96qbH7G5xyzgDPEbJs0n9qTD1s/zQ= Subject key identifier: E5:EA:DD:9C:41:8E:D4:84:83:A2:BA:DB:89:A1:1E:08:58:9C:4D:5F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD23BE18D88145B4A5C1E6218 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dfd968cd-f41b-3964-8ce9-0b6a4e17d2d2.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 701 IP address blocks: 108.44.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:e1:8d:88:14:5b:4a:5c:1e:62:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=61106f95-991a-46d4-a6c4-177a727b1038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e7:02:dd:5d:57:8d:65:5e:9b:dc:b7:ef:d8: 9b:ba:25:da:00:41:71:df:31:d7:44:f4:5b:e8:2c: 26:ae:d8:0d:59:f8:17:e3:80:3f:a9:ce:31:74:81: 2e:24:64:3c:aa:fe:4e:a4:20:7f:61:1c:e5:6f:3e: d0:65:f7:40:ec:39:68:35:a6:73:3b:bc:8c:dc:b5: fd:ad:c6:03:60:48:6c:30:df:6f:b8:4c:7e:db:5e: 45:73:c6:4f:2a:74:cf:67:c3:2b:07:00:a9:9b:9f: e7:ff:cf:8d:2d:19:63:f4:33:43:c9:a2:24:57:74: 8f:65:ee:1e:c8:d8:9e:5d:2f:0a:a9:91:e2:84:26: 34:be:61:15:24:98:ce:7f:d7:48:39:60:c9:45:cc: dd:df:2c:ba:d1:4b:37:95:78:6a:54:b9:bd:73:1e: 5e:c4:10:da:25:d9:9b:62:2e:6b:83:1e:7c:56:f5: 82:86:80:5e:62:88:db:e3:40:12:7c:66:3c:ce:1f: b8:cb:a4:58:21:07:26:ef:f4:c3:0c:20:f9:9a:35: 0a:d7:28:ba:a1:bf:86:eb:a1:bd:19:13:16:71:36: 7d:6a:00:c1:1c:4c:ac:d7:a1:26:9e:58:b8:94:9d: 31:aa:72:be:dd:92:25:d3:3f:f7:5a:9d:93:24:51: c0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:EA:DD:9C:41:8E:D4:84:83:A2:BA:DB:89:A1:1E:08:58:9C:4D:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dfd968cd-f41b-3964-8ce9-0b6a4e17d2d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.44.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:9a:bb:f9:40:6a:81:1e:9d:c5:94:36:8d:c9:2b:16:a7:18: b0:05:d3:0b:ae:73:65:70:4c:6e:94:37:bb:f5:38:ef:03:cb: f1:0f:7a:63:da:89:7b:80:4e:ed:36:a8:1f:43:9c:58:11:99: c1:7a:81:2e:2e:a0:11:73:c8:50:1e:d9:67:d2:63:89:06:48: bc:78:c4:09:e6:09:2a:f7:62:0c:d9:e5:96:e8:44:d2:c3:2c: 77:d8:91:fb:40:94:9c:c7:6a:ca:24:95:0c:43:c2:5c:08:7e: 46:5e:ce:78:99:2a:c4:66:0a:98:19:6c:95:eb:99:b2:31:a3: 1b:6d:e6:87:13:50:08:69:7d:a5:3c:03:8a:09:df:c5:61:da: d9:b5:be:7f:43:d6:82:29:04:17:6d:9b:38:73:b6:b3:7a:db: 18:09:cd:13:6d:a9:21:9d:33:fc:8a:67:f1:89:55:bd:6a:cc: bb:d7:a5:26:43:cc:52:2e:07:1f:ef:21:bb:1e:d3:88:3c:04: 86:e3:61:3e:4a:cb:0c:e2:d8:8e:e1:72:f1:96:02:5c:39:87: 38:0d:9e:29:b9:b3:c1:c1:96:40:f5:de:d2:5f:53:dd:a9:c6: a8:f2:93:c1:e8:68:f9:bf:15:22:20:9f:2e:07:ce:ba:6c:a8: d6:20:48:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO+GNiBRbSlweYhgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NjExMDZmOTUtOTkxYS00NmQ0LWE2YzQtMTc3YTcyN2IxMDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+cC3V1XjWVem9y379ibuiXaAEFx3zHXRPRb 6CwmrtgNWfgX44A/qc4xdIEuJGQ8qv5OpCB/YRzlbz7QZfdA7DloNaZzO7yM3LX9 rcYDYEhsMN9vuEx+215Fc8ZPKnTPZ8MrBwCpm5/n/8+NLRlj9DNDyaIkV3SPZe4e yNieXS8KqZHihCY0vmEVJJjOf9dIOWDJRczd3yy60Us3lXhqVLm9cx5exBDaJdmb Yi5rgx58VvWChoBeYojb40ASfGY8zh+4y6RYIQcm7/TDDCD5mjUK1yi6ob+G66G9 GRMWcTZ9agDBHEys16Emnli4lJ0xqnK+3ZIl0z/3Wp2TJFHAdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXq3ZxBjtSEg6K624mhHghYnE1fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGZkOTY4Y2QtZjQxYi0z OTY0LThjZTktMGI2YTRlMTdkMmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGbCwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKaau/lAaoEencWUNo3JKxanGLAF0wuuc2VwTG6UN7v1OO8Dy/EPemPa iXuATu02qB9DnFgRmcF6gS4uoBFzyFAe2WfSY4kGSLx4xAnmCSr3YgzZ5ZboRNLD LHfYkftAlJzHasoklQxDwlwIfkZezniZKsRmCpgZbJXrmbIxoxtt5ocTUAhpfaU8 A4oJ38Vh2tm1vn9D1oIpBBdtmzhztrN62xgJzRNtqSGdM/yKZ/GJVb1qzLvXpSZD zFIuBx/vIbse04g8BIbjYT5Kywzi2I7hcvGWAlw5hzgNnim5s8HBlkD13tJfU92p xqjyk8HoaPm/FSIgny4HzrpsqNYgSOA= -----END CERTIFICATE-----Generated at Sat Aug 23 15:53:24 2025 by rpki-client