$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/872f476c-b7cb-3c95-8fef-940a071d7450.roa File: 872f476c-b7cb-3c95-8fef-940a071d7450.roa (raw, json) Hash identifier: tZjRYybadXcW4HgHPIuZ2Vd5b9Zcn/W62zZqmfTNEHc= Subject key identifier: 40:63:76:70:D3:80:CD:67:A0:DA:CD:46:FB:D3:26:A0:39:BE:EB:75 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849F17FE02D6CD9F11114C9F400 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/872f476c-b7cb-3c95-8fef-940a071d7450.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 701 IP address blocks: 108.44.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:e0:2d:6c:d9:f1:11:14:c9:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=690861f1-df1c-4500-b4de-2e58978b5201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e9:10:76:06:af:ae:18:35:38:0c:8c:ce:07: c2:b6:c8:99:88:6c:74:63:65:c2:2b:25:1d:88:c6: c7:e1:30:7e:be:23:38:a2:57:a0:1c:cf:0f:10:ae: 35:43:10:e5:01:4b:8a:64:55:a3:70:98:c2:44:77: 14:b1:a4:38:9b:6a:9c:cb:8e:62:dd:73:6c:11:47: 2c:b1:97:89:d3:9c:ed:c4:1f:d3:cb:98:8d:cc:ca: 8e:9c:e3:30:a6:50:d2:fe:e1:56:73:38:a7:6e:58: 4e:01:c8:cb:41:1d:94:74:b6:87:bb:56:e1:cb:d6: a3:16:de:31:db:72:96:1d:88:63:57:96:02:25:a9: b8:d7:06:54:63:a7:e1:ea:96:a9:ae:85:db:8d:77: 75:6d:75:72:a0:c3:5e:8c:b5:da:29:7b:6f:49:04: 37:00:fb:08:a1:c0:15:3e:64:62:35:3f:37:d4:f9: ab:4c:d3:38:4c:a7:2f:1a:9c:28:b5:b0:f8:46:26: 5a:16:cf:f2:87:a1:58:b2:9f:96:a4:dc:4d:5d:10: f1:d6:a9:21:c1:50:f2:a6:07:2d:c6:ba:10:73:bf: 67:da:14:08:28:60:a0:57:25:ae:ac:11:6b:0a:3d: 6d:3f:ed:ce:7e:00:0b:c5:20:73:85:2b:8a:e4:02: c6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:63:76:70:D3:80:CD:67:A0:DA:CD:46:FB:D3:26:A0:39:BE:EB:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/872f476c-b7cb-3c95-8fef-940a071d7450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.44.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:2a:48:a8:a4:37:3d:49:f0:b9:23:48:f5:a9:68:91:27:d6: 7f:8a:27:2e:c5:95:63:c6:34:8d:aa:10:5e:e6:2c:75:ab:e4: bd:49:c1:38:da:ba:e4:cb:60:9f:a3:d7:af:d9:b7:83:33:e3: fd:f4:a8:ec:48:95:f8:f3:ab:b8:cd:3c:21:3d:02:1a:15:03: 10:61:82:91:e4:ca:ea:76:3b:fa:ff:d6:93:79:1f:ef:49:6f: b4:ce:25:64:39:e0:71:9d:cd:98:49:7a:55:43:6d:2e:12:bc: ea:53:bc:cb:30:a0:65:b4:da:04:03:08:23:41:59:79:bc:c3: 17:76:4d:31:d0:3b:86:fa:ac:56:5e:d4:57:32:a5:71:68:b9: 8d:e1:ee:51:18:67:3a:9f:ed:2e:79:4b:0b:f5:10:a1:f7:19: 06:c7:d4:81:de:18:56:dc:89:d7:03:74:79:11:88:4d:c2:af: 70:e7:4b:0f:82:89:9a:a9:c5:8f:0d:57:9e:32:99:08:46:09: b8:22:b5:2d:8e:36:34:57:e5:3b:19:b6:31:65:66:ad:96:a8: b5:aa:02:1a:62:be:39:ea:9e:04:28:65:9b:14:a0:c3:0a:d3: 29:d4:04:2a:be:28:33:2f:55:45:8f:2e:38:36:a1:fe:9c:78: 0e:ca:13:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf+AtbNnxERTJ9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk NjkwODYxZjEtZGYxYy00NTAwLWI0ZGUtMmU1ODk3OGI1MjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOkQdgavrhg1OAyMzgfCtsiZiGx0Y2XCKyUd iMbH4TB+viM4olegHM8PEK41QxDlAUuKZFWjcJjCRHcUsaQ4m2qcy45i3XNsEUcs sZeJ05ztxB/Ty5iNzMqOnOMwplDS/uFWczinblhOAcjLQR2UdLaHu1bhy9ajFt4x 23KWHYhjV5YCJam41wZUY6fh6paproXbjXd1bXVyoMNejLXaKXtvSQQ3APsIocAV PmRiNT831PmrTNM4TKcvGpwotbD4RiZaFs/yh6FYsp+WpNxNXRDx1qkhwVDypgct xroQc79n2hQIKGCgVyWurBFrCj1tP+3OfgALxSBzhSuK5ALGdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBjdnDTgM1noNrNRvvTJqA5vut1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODcyZjQ3NmMtYjdjYi0z Yzk1LThmZWYtOTQwYTA3MWQ3NDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHbCyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAqSKikNz1J8LkjSPWpaJEn1n+KJy7FlWPGNI2qEF7mLHWr5L1JwTja uuTLYJ+j16/Zt4Mz4/30qOxIlfjzq7jNPCE9AhoVAxBhgpHkyup2O/r/1pN5H+9J b7TOJWQ54HGdzZhJelVDbS4SvOpTvMswoGW02gQDCCNBWXm8wxd2TTHQO4b6rFZe 1FcypXFouY3h7lEYZzqf7S55Swv1EKH3GQbH1IHeGFbcidcDdHkRiE3Cr3DnSw+C iZqpxY8NV54ymQhGCbgitS2ONjRX5TsZtjFlZq2WqLWqAhpivjnqngQoZZsUoMMK 0ynUBCq+KDMvVUWPLjg2of6ceA7KE2w= -----END CERTIFICATE-----Generated at Fri Jun 6 06:37:55 2025 by rpki-client