$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5db54f0f-0d83-308c-8072-e00a60e20012.roa File: 5db54f0f-0d83-308c-8072-e00a60e20012.roa (raw, json) Hash identifier: 0OqHDJdYAD7BWlIBszSoAQCUfkiQwkL7f5BDq5BZ3JM= Subject key identifier: A6:1E:B4:33:4F:EE:14:F2:24:5B:57:06:BA:78:BF:79:42:1E:76:60 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B1C36D864935C3438BA2D6380 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5db54f0f-0d83-308c-8072-e00a60e20012.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 701 IP address blocks: 108.22.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:d8:64:93:5c:34:38:ba:2d:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=bc16f619-4b52-4398-ab0f-66fd892145f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7e:f8:0e:43:b7:e0:32:0a:23:54:62:c2:78: 3d:2d:fa:01:0d:33:ad:e2:4c:15:3f:84:95:4b:d4: 5e:46:05:df:c9:2e:e4:73:94:63:5e:ab:79:7b:54: 14:4d:cc:ab:be:3e:4f:7c:84:11:10:7d:eb:33:6f: bf:a4:7e:26:3c:78:e2:f8:a5:a3:21:dc:ac:42:cb: a6:96:cc:a3:17:3f:56:3c:7a:37:21:40:c2:23:20: 06:e1:dd:cb:b8:7a:32:b3:ad:e7:cc:aa:af:18:0e: c7:23:da:d3:dd:fc:5b:1f:34:4c:43:37:12:2b:f1: b7:79:95:ab:31:0a:43:24:56:35:5a:30:bc:5a:8d: ed:db:f4:7f:24:3e:72:7f:86:72:42:5c:83:47:c8: d6:22:8b:70:77:c8:b1:74:77:33:e5:ef:3a:00:21: 89:27:ab:73:62:e4:c6:47:7f:27:16:b2:24:fe:31: ba:2c:a8:0b:4a:8a:49:b3:89:60:09:d7:cf:18:ad: fd:7d:86:74:ee:23:0c:92:74:aa:35:e6:c3:69:8e: d0:36:3d:85:9d:cf:ac:8f:70:41:3e:32:93:e1:b7: 30:51:47:c7:35:70:17:a0:65:7e:90:c3:fc:3d:70: 5d:bf:03:6f:74:9a:32:28:a4:fd:99:a8:f2:16:9b: 75:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:1E:B4:33:4F:EE:14:F2:24:5B:57:06:BA:78:BF:79:42:1E:76:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5db54f0f-0d83-308c-8072-e00a60e20012.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.22.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:b1:a5:c3:67:d7:f4:43:ba:64:a3:23:50:0d:b8:20:53:b3: 1e:25:72:66:9d:00:10:df:36:19:92:53:bf:18:85:f0:50:7d: 48:4a:d3:8b:67:5e:2d:27:07:8c:be:6c:67:79:63:dc:31:3e: b0:1b:78:9a:62:bf:f0:d1:1f:eb:78:83:5f:a4:5a:37:1b:f1: 32:bc:71:43:f0:9f:e5:f0:df:94:68:bf:dc:fe:88:ed:3d:b3: 7c:67:31:2f:c5:49:6c:37:0d:fc:42:8e:b1:cd:93:19:7d:ca: 2f:a5:b0:68:02:58:5e:f6:a2:43:e0:96:bd:9f:04:0a:92:73: dc:c5:dd:54:f4:f5:42:6b:8b:6b:91:ed:bb:81:dc:e6:01:16: 51:b2:ef:6f:c7:81:b5:7a:64:86:d4:81:a2:46:0f:59:02:15: c5:38:a0:e5:36:f4:3a:b0:71:54:00:a3:66:ee:c5:d5:1a:e0: 18:43:1c:be:9e:1c:54:44:5e:89:3a:18:7e:e8:a7:ab:ba:18: 63:43:8a:5d:07:1e:1a:d2:4e:94:f9:a7:9e:31:19:9e:a9:d6: 19:d0:a1:89:c5:76:c0:1d:19:da:92:e1:d3:44:b1:64:43:d0: 8c:be:2c:8c:27:cd:f6:56:04:0b:54:65:9a:eb:8b:b6:68:7d: fa:8c:28:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNthkk1w0OLotY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk YmMxNmY2MTktNGI1Mi00Mzk4LWFiMGYtNjZmZDg5MjE0NWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApX74DkO34DIKI1Riwng9LfoBDTOt4kwVP4SV S9ReRgXfyS7kc5RjXqt5e1QUTcyrvj5PfIQREH3rM2+/pH4mPHji+KWjIdysQsum lsyjFz9WPHo3IUDCIyAG4d3LuHoys63nzKqvGA7HI9rT3fxbHzRMQzcSK/G3eZWr MQpDJFY1WjC8Wo3t2/R/JD5yf4ZyQlyDR8jWIotwd8ixdHcz5e86ACGJJ6tzYuTG R38nFrIk/jG6LKgLSopJs4lgCdfPGK39fYZ07iMMknSqNebDaY7QNj2Fnc+sj3BB PjKT4bcwUUfHNXAXoGV+kMP8PXBdvwNvdJoyKKT9majyFpt1rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYetDNP7hTyJFtXBrp4v3lCHnZgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWRiNTRmMGYtMGQ4My0z MDhjLTgwNzItZTAwYTYwZTIwMDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbBYIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCxpcNn1/RDumSjI1ANuCBTsx4lcmadABDfNhmSU78YhfBQfUhK04tn Xi0nB4y+bGd5Y9wxPrAbeJpiv/DRH+t4g1+kWjcb8TK8cUPwn+Xw35Rov9z+iO09 s3xnMS/FSWw3DfxCjrHNkxl9yi+lsGgCWF72okPglr2fBAqSc9zF3VT09UJri2uR 7buB3OYBFlGy72/HgbV6ZIbUgaJGD1kCFcU4oOU29DqwcVQAo2buxdUa4BhDHL6e HFREXok6GH7op6u6GGNDil0HHhrSTpT5p54xGZ6p1hnQoYnFdsAdGdqS4dNEsWRD 0Iy+LIwnzfZWBAtUZZrri7ZoffqMKF0= -----END CERTIFICATE-----Generated at Fri Oct 10 22:06:47 2025 by rpki-client