$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b0ab6ac5-65a0-34b1-99a7-a9a11b4e74b5.roa File: b0ab6ac5-65a0-34b1-99a7-a9a11b4e74b5.roa (raw, json) Hash identifier: Lkgq66W+QZRpvXEOW7TXfxKHxTbgsMIoGuzDR/iEKTg= Subject key identifier: E9:E9:FC:AD:D2:24:E9:30:94:8E:71:49:D6:30:2C:1D:BF:E3:59:91 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849F1800C0D3009CD6D2D95B780 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b0ab6ac5-65a0-34b1-99a7-a9a11b4e74b5.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 701 IP address blocks: 108.17.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:80:0c:0d:30:09:cd:6d:2d:95:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=8dad7b1c-2c66-4d26-b9a5-5f667edc0ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:17:aa:c7:07:aa:9a:2a:db:cf:6a:37:6c:71: 22:dd:10:98:d1:d7:62:b8:6e:29:35:9a:cb:91:e1: 7c:a7:2e:df:48:10:9d:55:1e:e2:52:b8:74:9d:f8: 82:09:b7:46:15:e7:ba:3a:b8:5b:06:17:60:f3:1a: 34:e4:c1:3c:81:4c:ee:9d:1d:38:f4:90:d3:31:13: 45:ed:5f:f6:15:5c:82:2c:f1:7d:ea:73:42:e4:53: ec:b3:30:2e:9d:08:6f:0d:a9:5f:64:3e:21:eb:52: 22:14:da:42:1e:99:6e:57:95:b8:1a:f0:a8:90:da: 13:42:e1:b5:25:6a:b0:84:9d:a0:d6:96:62:5c:d9: 60:17:cd:5e:5d:ee:3b:4a:24:87:fd:b8:3e:3a:c2: c6:b2:39:28:12:18:c6:93:c0:31:2e:d4:f5:f2:f6: 93:c4:d3:13:1a:94:dc:1f:e5:1b:c7:00:24:b6:f3: 36:93:3f:93:01:eb:f6:6a:06:ac:91:4e:84:06:9f: 90:d7:87:57:4b:a5:d0:38:4e:8d:3c:ea:e7:58:32: d1:b6:78:73:01:ea:e9:ac:fd:48:94:5d:8a:4e:7e: 1c:28:c1:c4:d2:d8:2c:8f:0f:e7:9a:9d:96:15:f4: fa:23:01:f9:d9:e9:3c:08:7b:ac:eb:20:0d:66:3d: 7a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E9:FC:AD:D2:24:E9:30:94:8E:71:49:D6:30:2C:1D:BF:E3:59:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b0ab6ac5-65a0-34b1-99a7-a9a11b4e74b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.17.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:84:18:ad:5c:1f:17:4d:2a:f8:d3:fa:be:48:2c:6e:88:a7: 2f:16:69:24:5b:b9:d9:69:38:04:f8:bc:61:16:1f:34:46:07: 75:c7:4c:43:f6:28:3e:b5:ac:ff:01:30:7c:24:f6:e6:23:03: f7:09:1b:d7:1c:69:2b:d9:75:a5:69:49:16:3c:c6:ad:42:27: d4:fc:8c:87:0a:04:75:d7:9c:ee:de:48:50:da:b5:77:91:e0: 3e:ad:22:71:8f:94:d2:4c:33:6b:bf:71:74:58:bf:94:a3:59: 30:18:bd:4b:9f:9d:a8:57:9a:5d:10:e2:91:4d:7b:d2:4f:d9: 50:4e:02:cf:e6:d6:dc:39:75:a6:e0:90:c5:2b:75:67:b8:77: 16:6e:09:b4:1e:24:1c:5e:41:b8:49:43:ec:d2:c7:23:1a:a2: 0a:bd:c8:0d:a0:06:fe:0f:ee:ae:80:dd:27:c6:bd:a9:ef:a0: 4c:70:88:55:5b:da:f2:2c:ff:30:07:f3:e8:c0:11:69:fa:8e: 1a:e1:91:da:14:5d:8b:fd:51:f8:4b:a6:22:af:c7:59:8a:5c: 51:3b:31:c9:94:43:d0:1e:63:e7:91:b2:3f:d6:14:5d:05:43: d7:a1:a0:83:0a:91:25:0c:b9:9c:af:0d:6a:99:ff:f9:e4:0c: d7:0c:b0:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxgAwNMAnNbS2Vt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk OGRhZDdiMWMtMmM2Ni00ZDI2LWI5YTUtNWY2NjdlZGMwYWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArReqxweqmirbz2o3bHEi3RCY0ddiuG4pNZrL keF8py7fSBCdVR7iUrh0nfiCCbdGFee6OrhbBhdg8xo05ME8gUzunR049JDTMRNF 7V/2FVyCLPF96nNC5FPsszAunQhvDalfZD4h61IiFNpCHpluV5W4GvCokNoTQuG1 JWqwhJ2g1pZiXNlgF81eXe47SiSH/bg+OsLGsjkoEhjGk8AxLtT18vaTxNMTGpTc H+UbxwAktvM2kz+TAev2agaskU6EBp+Q14dXS6XQOE6NPOrnWDLRtnhzAerprP1I lF2KTn4cKMHE0tgsjw/nmp2WFfT6IwH52ek8CHus6yANZj16UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnp/K3SJOkwlI5xSdYwLB2/41mRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjBhYjZhYzUtNjVhMC0z NGIxLTk5YTctYTlhMTFiNGU3NGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGbBEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2EGK1cHxdNKvjT+r5ILG6Ipy8WaSRbudlpOAT4vGEWHzRGB3XHTEP2 KD61rP8BMHwk9uYjA/cJG9ccaSvZdaVpSRY8xq1CJ9T8jIcKBHXXnO7eSFDatXeR 4D6tInGPlNJMM2u/cXRYv5SjWTAYvUufnahXml0Q4pFNe9JP2VBOAs/m1tw5dabg kMUrdWe4dxZuCbQeJBxeQbhJQ+zSxyMaogq9yA2gBv4P7q6A3SfGvanvoExwiFVb 2vIs/zAH8+jAEWn6jhrhkdoUXYv9UfhLpiKvx1mKXFE7McmUQ9AeY+eRsj/WFF0F Q9ehoIMKkSUMuZyvDWqZ//nkDNcMsOU= -----END CERTIFICATE-----Generated at Mon Jun 16 06:15:31 2025 by rpki-client