$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec746d80-d81f-3751-90d6-a60bf5998941.roa File: ec746d80-d81f-3751-90d6-a60bf5998941.roa (raw, json) Hash identifier: hayXvz3dqC8YCHqCebYm9ZuaZ1/oEvMfaWH3UYI4lYg= Subject key identifier: 08:C2:09:A6:23:3E:1C:A6:08:7C:F6:BF:B5:21:41:E0:DE:CE:5C:EF Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849F17FE1D3294F32A8285D3700 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec746d80-d81f-3751-90d6-a60bf5998941.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 701 IP address blocks: 108.16.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:e1:d3:29:4f:32:a8:28:5d:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=d8a842f9-4bf9-45e3-9266-d9d10aa29ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:97:a6:09:09:f0:f1:9d:f0:b9:cc:79:20:0a: ef:f8:2e:29:9d:17:b7:c0:da:6c:9a:f2:f3:21:23: 44:ad:47:c4:ec:70:86:65:06:37:12:3c:8f:cf:ec: cd:6e:2c:ca:3f:8b:20:b6:ff:00:03:2a:f0:56:e1: b1:3f:38:aa:28:c0:56:09:6c:5e:ad:fb:f0:a3:62: 51:27:03:31:86:fc:e1:0e:1e:e9:55:6a:18:71:87: b7:be:4c:47:73:1a:7a:65:0e:d8:dc:cb:3f:56:0b: e9:9e:be:27:4f:48:ef:dd:0f:3d:2f:07:bf:c7:04: 30:81:6c:2d:59:48:8e:a0:aa:8b:95:4a:8f:7e:90: e9:f6:1b:22:5e:af:3f:39:ff:77:30:28:5f:58:24: b0:91:01:1c:d8:9d:31:b5:85:f4:4d:5b:36:24:75: 44:c8:47:56:67:65:e9:3a:85:e3:64:1a:cb:f8:60: 30:e3:85:79:1f:cc:b9:f5:c3:86:e0:6e:04:b0:7b: 01:6a:08:dc:c6:bd:3b:9a:9a:1b:43:e9:a4:bc:00: 2c:51:be:9b:fa:20:ce:1a:f6:60:f4:de:92:80:3d: 82:fe:79:2e:49:40:fb:4a:6d:79:66:e1:2e:68:7b: d5:50:de:3e:a3:dd:20:3d:35:5a:0f:5d:06:ef:50: 2f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C2:09:A6:23:3E:1C:A6:08:7C:F6:BF:B5:21:41:E0:DE:CE:5C:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ec746d80-d81f-3751-90d6-a60bf5998941.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.16.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:30:cf:9b:8e:1d:3c:16:15:c4:bc:8b:77:1c:08:83:7d:15: b6:49:60:96:bf:16:81:d7:43:c6:ef:c8:2c:e8:cd:7e:a9:5a: f3:07:39:b9:23:5c:68:14:1a:0c:4d:d8:7d:9c:29:9d:18:d9: 17:f0:a7:69:d0:0b:0f:78:cc:65:ad:22:60:b5:b6:d2:54:1f: 7c:03:7a:5b:11:64:0f:b4:c1:5e:07:ae:9f:d6:e4:14:2d:c6: 17:7f:72:32:85:b5:27:3d:11:aa:f8:bb:78:cf:1e:c2:6e:8c: 37:b5:a9:df:0b:21:fe:f1:39:c4:15:76:dd:8c:7e:90:df:94: 1a:6e:30:98:b7:81:d6:95:12:3d:bb:a3:5e:92:62:e6:8b:e7: a7:79:de:35:e1:6b:82:30:83:c9:22:f4:5e:2f:41:7e:9d:68: ec:b3:0f:6d:d2:0b:da:18:e1:0c:e5:0c:96:8a:54:ab:0a:92: 68:75:0e:1e:6c:69:52:b3:95:58:cd:ba:36:39:11:e4:d0:5f: 78:b2:ab:84:87:52:f3:66:06:54:35:a7:55:a4:a0:49:b4:0e: a0:b4:ce:0a:1e:5d:65:99:95:0e:aa:40:5c:86:6e:0a:07:e1: 71:a4:b2:39:f5:4f:15:9a:c8:90:d4:77:72:b5:39:cd:c3:0d: 2a:6f:b6:78 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEnxf+HTKU8yqChdNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk ZDhhODQyZjktNGJmOS00NWUzLTkyNjYtZDlkMTBhYTI5ZWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpemCQnw8Z3wucx5IArv+C4pnRe3wNpsmvLz ISNErUfE7HCGZQY3EjyPz+zNbizKP4sgtv8AAyrwVuGxPziqKMBWCWxerfvwo2JR JwMxhvzhDh7pVWoYcYe3vkxHcxp6ZQ7Y3Ms/Vgvpnr4nT0jv3Q89Lwe/xwQwgWwt WUiOoKqLlUqPfpDp9hsiXq8/Of93MChfWCSwkQEc2J0xtYX0TVs2JHVEyEdWZ2Xp OoXjZBrL+GAw44V5H8y59cOG4G4EsHsBagjcxr07mpobQ+mkvAAsUb6b+iDOGvZg 9N6SgD2C/nkuSUD7Sm15ZuEuaHvVUN4+o90gPTVaD10G71AvHwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFAjCCaYjPhymCHz2v7UhQeDezlzvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZWM3NDZkODAtZDgxZi0z NzUxLTkwZDYtYTYwYmY1OTk4OTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAbBAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAgTDPm44dPBYVxLyLdxwIg30Vtklglr8WgddDxu/ILOjNfqla8wc5uSNc aBQaDE3YfZwpnRjZF/CnadALD3jMZa0iYLW20lQffAN6WxFkD7TBXgeun9bkFC3G F39yMoW1Jz0Rqvi7eM8ewm6MN7Wp3wsh/vE5xBV23Yx+kN+UGm4wmLeB1pUSPbuj XpJi5ovnp3neNeFrgjCDySL0Xi9Bfp1o7LMPbdIL2hjhDOUMlopUqwqSaHUOHmxp UrOVWM26NjkR5NBfeLKrhIdS82YGVDWnVaSgSbQOoLTOCh5dZZmVDqpAXIZuCgfh caSyOfVPFZrIkNR3crU5zcMNKm+2eA== -----END CERTIFICATE-----Generated at Mon Jun 16 10:25:12 2025 by rpki-client