$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9e2d9d2-614f-3c2e-afe1-812335cb7a4a.roa File: f9e2d9d2-614f-3c2e-afe1-812335cb7a4a.roa (raw, json) Hash identifier: 0D8XXhOosDb8UGutj1fNe/b3YRbxFlyBwNp3CXQN7b8= Subject key identifier: 76:07:A4:79:89:55:87:16:EF:CD:69:8E:D0:60:1C:AC:7F:3D:CE:4B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849F1800E266DAC5B0ED998F780 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9e2d9d2-614f-3c2e-afe1-812335cb7a4a.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 701 IP address blocks: 108.20.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:80:0e:26:6d:ac:5b:0e:d9:98:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=3dcd4d6b-616a-45b1-8628-fd96ec565982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:24:45:81:e2:f9:2b:46:6f:09:39:9a:63:ae: 04:ad:b4:8d:1f:2f:38:03:23:45:ad:06:d6:9d:60: b3:50:45:98:bc:3e:f9:9b:c7:1d:01:76:1a:78:41: b8:81:31:d0:4a:ef:ee:e4:5f:f2:36:e2:53:90:bd: 65:71:1b:fe:12:50:98:b8:53:f5:36:18:5d:43:e6: d9:83:b9:25:97:4e:c1:cc:51:aa:8f:9a:11:7b:dd: 1a:17:b3:7d:a6:51:20:9e:87:b1:e4:bf:84:86:a6: 07:80:df:f9:57:70:b5:a0:ba:4a:92:68:1f:b5:f2: a5:35:4b:49:70:40:53:61:28:b5:49:26:15:37:6d: 3d:14:2c:c1:67:c9:47:96:72:02:70:2c:2e:30:85: 76:e4:17:a6:a2:06:47:02:2c:b7:c0:0f:36:d4:c6: 68:5d:94:a5:26:b3:d5:5c:ad:32:0f:80:37:65:dc: 79:d8:19:26:bc:e1:d2:95:b7:a8:7d:e0:7f:63:a3: db:70:23:2e:65:03:06:de:fb:f4:4b:03:3f:80:a7: cb:1b:d8:d8:cd:46:ff:ef:66:fb:0c:58:5d:37:36: df:d3:74:49:f8:32:b4:e4:03:f1:71:63:ee:27:f0: f7:01:e2:12:a5:47:59:92:e1:f5:1e:32:92:ca:6b: 1a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:07:A4:79:89:55:87:16:EF:CD:69:8E:D0:60:1C:AC:7F:3D:CE:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9e2d9d2-614f-3c2e-afe1-812335cb7a4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.20.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:83:86:bd:ae:8e:ea:46:79:76:5e:4a:6f:4a:bd:32:60:52: 8b:b0:dd:47:a5:04:c7:44:36:2f:b6:78:ae:80:c1:da:e6:77: 15:30:24:ce:c9:6c:4f:1b:38:a1:ca:f3:97:4a:7b:dc:51:0c: 30:ed:e6:ce:12:fe:90:c5:fe:a7:84:68:1b:82:78:e6:32:bc: fb:b8:c7:88:5b:db:02:a2:33:25:5d:8d:eb:4d:a0:ec:23:65: 5d:e8:6b:83:c8:42:34:6f:65:a1:60:2d:e4:97:b1:bf:86:13: 03:c9:c4:8a:7c:73:d7:47:70:6e:7e:ea:c9:28:72:07:92:8a: 63:52:2b:6a:30:37:07:db:cc:f9:f5:35:8a:0b:ef:77:7c:cf: 59:f1:b9:82:d0:12:62:15:8e:b2:61:a5:dd:8c:53:c2:68:2a: 26:58:90:3b:97:d6:5e:60:58:5b:c5:ce:a1:67:1d:f3:88:af: cf:0b:c7:b8:67:3e:43:39:2d:0e:ac:b9:ae:ec:e3:74:ea:5d: 21:71:b8:48:da:68:e6:0e:27:b9:e2:4c:10:62:e7:0c:71:20: 41:6f:ca:de:4e:35:86:e4:43:cc:7f:8f:14:6b:12:95:d3:c9: 3a:ba:99:10:23:76:8e:36:1a:0e:e7:4b:37:47:87:1b:b3:ca: 3f:1c:c4:e6 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEnxgA4mbaxbDtmY94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk M2RjZDRkNmItNjE2YS00NWIxLTg2MjgtZmQ5NmVjNTY1OTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSRFgeL5K0ZvCTmaY64ErbSNHy84AyNFrQbW nWCzUEWYvD75m8cdAXYaeEG4gTHQSu/u5F/yNuJTkL1lcRv+ElCYuFP1NhhdQ+bZ g7kll07BzFGqj5oRe90aF7N9plEgnoex5L+EhqYHgN/5V3C1oLpKkmgftfKlNUtJ cEBTYSi1SSYVN209FCzBZ8lHlnICcCwuMIV25BemogZHAiy3wA821MZoXZSlJrPV XK0yD4A3Zdx52BkmvOHSlbeofeB/Y6PbcCMuZQMG3vv0SwM/gKfLG9jYzUb/72b7 DFhdNzbf03RJ+DK05APxcWPuJ/D3AeISpUdZkuH1HjKSymsaywIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHYHpHmJVYcW781pjtBgHKx/Pc5LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjllMmQ5ZDItNjE0Zi0z YzJlLWFmZTEtODEyMzM1Y2I3YTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAbBQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEACIOGva6O6kZ5dl5Kb0q9MmBSi7DdR6UEx0Q2L7Z4roDB2uZ3FTAkzsls Txs4ocrzl0p73FEMMO3mzhL+kMX+p4RoG4J45jK8+7jHiFvbAqIzJV2N602g7CNl Xehrg8hCNG9loWAt5Jexv4YTA8nEinxz10dwbn7qyShyB5KKY1IrajA3B9vM+fU1 igvvd3zPWfG5gtASYhWOsmGl3YxTwmgqJliQO5fWXmBYW8XOoWcd84ivzwvHuGc+ QzktDqy5ruzjdOpdIXG4SNpo5g4nueJMEGLnDHEgQW/K3k41huRDzH+PFGsSldPJ OrqZECN2jjYaDudLN0eHG7PKPxzE5g== -----END CERTIFICATE-----Generated at Tue Jul 1 06:34:19 2025 by rpki-client