$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/25e244e3-f519-394a-951d-cdac4dc84db7.roa File: 25e244e3-f519-394a-951d-cdac4dc84db7.roa (raw, json) Hash identifier: gQklaUafHrgGeI63fdvSlf3sD68QfvhHROFFl7sFA+c= Subject key identifier: B4:70:90:6F:C8:A7:E1:61:FF:0C:1F:A0:DB:35:F2:8D:7F:AC:A2:D6 Certificate issuer: /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Certificate serial: 010D0C9F4328584ADECBBF31A30C4EF05AB90F40 Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/25e244e3-f519-394a-951d-cdac4dc84db7.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 8014 IP address blocks: 108.60.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:bf:31:a3:0c:4e:f0:5a:b9:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=77b359d5-1907-4444-a2e8-e9b883f51b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:52:5c:0f:37:6a:34:08:3e:57:87:60:11:83: f8:a6:08:2c:c7:1e:34:fa:08:7f:a0:1f:66:42:88: a6:1e:af:63:dc:98:40:05:02:25:c0:cf:98:85:d6: e4:c9:61:48:6d:24:6f:80:34:b0:7e:ed:43:a9:29: 9d:15:16:c3:94:9a:ad:76:df:f3:69:01:ec:ba:c3: 0d:00:66:5a:9e:09:19:47:ac:30:7f:3c:a8:e1:ed: 6c:e5:22:12:07:71:f0:c3:e7:3f:48:79:08:06:aa: 98:e1:25:f6:a5:75:5c:a7:12:b3:68:d8:94:29:6d: 1a:68:e4:37:19:1c:b2:9f:56:14:e5:e0:63:03:c8: 5d:5e:f9:d0:3d:bb:c3:bb:a5:61:1b:77:3a:98:0b: 68:7c:69:7f:a8:f8:6e:21:df:ec:ce:78:56:bf:0e: d4:08:c8:08:61:39:50:bd:68:44:50:95:cd:f6:56: 23:11:5a:24:92:b3:f1:0d:ac:8a:23:25:c1:5d:42: 8a:87:fb:89:41:3c:c8:24:98:a1:43:d1:eb:f0:53: e0:11:ba:0e:b9:dc:73:8e:87:ac:a2:57:30:50:2c: 5f:e6:f6:24:9b:04:45:0b:da:01:fa:ab:c9:f6:b0: bf:38:83:10:7f:e9:c3:6b:27:9c:79:42:19:9d:93: fa:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:70:90:6F:C8:A7:E1:61:FF:0C:1F:A0:DB:35:F2:8D:7F:AC:A2:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/25e244e3-f519-394a-951d-cdac4dc84db7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl X509v3 Authority Key Identifier: keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer sbgp-ipAddrBlock: critical IPv4: 108.60.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:21:42:0a:0b:c9:6f:62:e7:86:51:e6:1a:b6:04:23:f6:fc: 23:32:77:66:f7:d0:6a:bb:86:f0:6a:cf:87:04:bb:44:fb:88: 09:d5:e2:f6:f1:fa:2e:11:b9:37:67:59:54:06:22:4f:52:77: 03:0a:1e:15:a5:8d:46:7f:cf:9e:ba:8d:e0:fa:03:61:9f:51: e3:e1:f5:e8:77:6f:03:73:d2:c0:93:59:e8:93:23:d1:3a:a1: c3:90:c0:46:85:1a:5d:ec:64:7b:96:97:33:4a:06:f2:ea:78: 0a:d8:3b:5d:11:e3:75:2f:71:1d:15:8a:62:42:b7:49:93:5c: 14:7d:b8:94:3a:5d:eb:89:30:1b:3a:d7:e2:2e:0e:9e:a1:51: e9:8a:45:d2:3d:ff:42:9b:e0:05:2f:09:9a:19:4b:24:2d:6f: 51:6c:e6:fc:f3:cb:2a:e2:36:ca:50:c1:bc:64:09:df:95:ab: 78:cf:52:0c:dd:ff:0f:ca:d4:14:bc:f3:b4:96:d3:e0:19:fb: 7b:88:32:66:ed:cc:e5:be:e6:03:1d:0e:f0:7d:e6:cb:5a:5d: de:74:91:9e:86:06:c4:35:94:3d:f8:a7:73:cb:d6:6d:07:4f: e3:a4:87:c4:6e:48:1d:f9:7d:11:00:48:1f:65:55:b6:45:76: 6d:a3:fa:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey78xowxO8Fq5D0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNiZDMwM2ItNzM4ZC00Yzc3LTljNTUtMzIwZmNmYTkz Zjc1MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk NzdiMzU5ZDUtMTkwNy00NDQ0LWEyZTgtZTliODgzZjUxYjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVJcDzdqNAg+V4dgEYP4pggsxx40+gh/oB9m QoimHq9j3JhABQIlwM+YhdbkyWFIbSRvgDSwfu1DqSmdFRbDlJqtdt/zaQHsusMN AGZangkZR6wwfzyo4e1s5SISB3Hww+c/SHkIBqqY4SX2pXVcpxKzaNiUKW0aaOQ3 GRyyn1YU5eBjA8hdXvnQPbvDu6VhG3c6mAtofGl/qPhuId/sznhWvw7UCMgIYTlQ vWhEUJXN9lYjEVokkrPxDayKIyXBXUKKh/uJQTzIJJihQ9Hr8FPgEboOudxzjoes olcwUCxf5vYkmwRFC9oB+qvJ9rC/OIMQf+nDayeceUIZnZP6wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRwkG/Ip+Fh/wwfoNs18o1/rKLWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lM2Jk MzAzYi03MzhkLTRjNzctOWM1NS0zMjBmY2ZhOTNmNzUvMjVlMjQ0ZTMtZjUxOS0z OTRhLTk1MWQtY2RhYzRkYzg0ZGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTNiZDMwM2ItNzM4ZC00Yzc3LTlj NTUtMzIwZmNmYTkzZjc1L2UzYmQzMDNiLTczOGQtNGM3Ny05YzU1LTMyMGZjZmE5 M2Y3NS5jcmwwHwYDVR0jBBgwFoAUDvcTBpHWvRytSMfJLYkdltxTTVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lM2JkMzAzYi03MzhkLTRjNzctOWM1NS0zMjBm Y2ZhOTNmNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFbDzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkhQgoLyW9i54ZR5hq2BCP2/CMyd2b30Gq7hvBqz4cEu0T7iAnV4vbx +i4RuTdnWVQGIk9SdwMKHhWljUZ/z566jeD6A2GfUePh9eh3bwNz0sCTWeiTI9E6 ocOQwEaFGl3sZHuWlzNKBvLqeArYO10R43UvcR0VimJCt0mTXBR9uJQ6XeuJMBs6 1+IuDp6hUemKRdI9/0Kb4AUvCZoZSyQtb1Fs5vzzyyriNspQwbxkCd+Vq3jPUgzd /w/K1BS887SW0+AZ+3uIMmbtzOW+5gMdDvB95staXd50kZ6GBsQ1lD34p3PL1m0H T+Okh8RuSB35fREASB9lVbZFdm2j+nk= -----END CERTIFICATE-----Generated at Sun Aug 24 04:23:50 2025 by rpki-client