$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2df5ee8-fbd6-3920-9ac0-62198f04d5e7.roa File: f2df5ee8-fbd6-3920-9ac0-62198f04d5e7.roa (raw, json) Hash identifier: 4iWm3XySht7WRAdLvjOgRXucuKsK/Ltqh/pMmIjqGK8= Subject key identifier: CA:7E:B1:18:37:86:BA:E3:BA:30:65:D1:4B:55:8B:2B:BC:87:DD:7F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD23BDE628C566C089F8196E0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2df5ee8-fbd6-3920-9ac0-62198f04d5e7.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 701 IP address blocks: 108.8.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:de:62:8c:56:6c:08:9f:81:96:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=d435b396-737c-4471-b714-5c2a6d4d9e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cb:93:b8:5e:51:3a:34:5c:cc:e7:33:9c:3f: 2c:e6:a8:4f:e5:de:66:d8:0b:5a:32:b1:5f:e4:c0: 0d:d8:6a:c0:62:bc:fa:c2:19:01:1f:00:80:e9:cc: 3e:91:4b:95:c7:67:54:55:be:47:05:b0:de:13:18: 2d:a2:89:0d:83:d5:4b:aa:3d:ca:a5:ab:8d:74:66: 4f:56:07:1e:d7:95:bf:c5:a6:bc:55:a6:83:f0:79: d7:12:58:e3:f9:ae:86:b8:86:e2:48:44:0f:e5:77: 66:bf:c6:e7:94:46:19:ac:43:cf:f6:46:e0:80:13: 38:6a:7a:70:ba:80:9c:4e:c0:ae:44:1f:c0:f9:f2: 33:10:d4:f0:e6:5f:94:b5:e2:d9:17:b4:f6:02:d1: f4:47:51:1a:00:43:ff:b3:50:89:2d:82:55:44:4b: ea:40:f0:cb:9a:52:ee:d2:6c:2a:48:5a:b1:d2:17: 9a:d8:57:b8:51:c2:2f:57:4f:a1:77:50:83:8c:de: a6:a2:84:32:3a:89:b4:f5:5a:fb:90:95:6d:a3:0e: 11:8f:b9:ad:49:a4:b5:82:da:31:cf:18:c1:11:30: 6b:a4:d2:36:28:b4:2c:d0:17:ac:da:5b:b3:d0:63: d2:00:d2:75:dc:17:46:16:d3:3f:28:70:bf:ce:44: 37:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:7E:B1:18:37:86:BA:E3:BA:30:65:D1:4B:55:8B:2B:BC:87:DD:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f2df5ee8-fbd6-3920-9ac0-62198f04d5e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.8.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:26:11:0a:1a:5f:5b:d5:d4:88:d0:94:0b:b1:51:9c:41:72: a8:a1:73:fe:a2:68:cb:c0:b0:e6:a7:ef:1d:45:91:61:1b:34: 8f:31:9a:95:55:12:04:34:64:13:25:2c:7d:1c:b4:8e:da:a4: 8d:fd:a7:27:30:62:0f:07:0d:c3:fc:34:4f:1b:54:b9:df:9a: d5:3a:e7:c6:8a:4f:b4:c5:9e:15:b6:b8:4b:75:5c:66:42:ae: bf:3f:00:93:5e:bf:9d:c4:da:3d:b7:7c:ba:d6:be:6c:ee:c2: 44:e8:15:ff:ef:6a:3c:70:bd:fc:2e:9b:bf:94:fd:d5:ec:b1: 81:7c:a7:5c:d5:f0:4d:d1:a7:7c:de:d4:72:7b:2d:25:7b:6e: f5:80:16:77:26:91:76:4b:d1:29:9a:5b:5f:cc:e9:d1:8c:3c: 88:51:b8:b4:04:f3:2d:2c:01:d2:2c:d8:28:15:27:70:16:0b: 42:55:07:db:dc:d6:39:ac:fa:1e:b5:d4:da:ef:bc:c4:31:85: 9a:e7:2c:8a:7f:b2:8c:12:0c:84:72:9f:bc:64:7c:1d:50:af: 64:64:a2:45:13:98:8e:67:92:6d:60:48:5e:69:7f:6e:37:8a: fa:85:e3:15:bd:2c:96:5e:df:ac:99:01:f1:83:28:f6:07:74: 45:d9:ff:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO95ijFZsCJ+BluAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZDQzNWIzOTYtNzM3Yy00NDcxLWI3MTQtNWMyYTZkNGQ5ZTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMuTuF5ROjRczOcznD8s5qhP5d5m2AtaMrFf 5MAN2GrAYrz6whkBHwCA6cw+kUuVx2dUVb5HBbDeExgtookNg9VLqj3KpauNdGZP Vgce15W/xaa8VaaD8HnXEljj+a6GuIbiSEQP5Xdmv8bnlEYZrEPP9kbggBM4anpw uoCcTsCuRB/A+fIzENTw5l+UteLZF7T2AtH0R1EaAEP/s1CJLYJVREvqQPDLmlLu 0mwqSFqx0hea2Fe4UcIvV0+hd1CDjN6mooQyOom09Vr7kJVtow4Rj7mtSaS1gtox zxjBETBrpNI2KLQs0Bes2luz0GPSANJ13BdGFtM/KHC/zkQ3HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMp+sRg3hrrjujBl0UtViyu8h91/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjJkZjVlZTgtZmJkNi0z OTIwLTlhYzAtNjIxOThmMDRkNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFbAgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEImEQoaX1vV1IjQlAuxUZxBcqihc/6iaMvAsOan7x1FkWEbNI8xmpVV EgQ0ZBMlLH0ctI7apI39pycwYg8HDcP8NE8bVLnfmtU658aKT7TFnhW2uEt1XGZC rr8/AJNev53E2j23fLrWvmzuwkToFf/vajxwvfwum7+U/dXssYF8p1zV8E3Rp3ze 1HJ7LSV7bvWAFncmkXZL0SmaW1/M6dGMPIhRuLQE8y0sAdIs2CgVJ3AWC0JVB9vc 1jms+h611NrvvMQxhZrnLIp/sowSDIRyn7xkfB1Qr2RkokUTmI5nkm1gSF5pf243 ivqF4xW9LJZe36yZAfGDKPYHdEXZ/wg= -----END CERTIFICATE-----Generated at Sat Aug 23 14:26:22 2025 by rpki-client