$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1faa210e-9b6e-341b-b44c-4d52d35e8f28.roa File: 1faa210e-9b6e-341b-b44c-4d52d35e8f28.roa (raw, json) Hash identifier: bdPuAMdtxRgrpQgtTgFWWY/si2Uk+pasWhN40K4WXjk= Subject key identifier: 42:BE:5A:8D:12:51:FA:DC:5E:14:F4:61:2A:B3:F9:A9:94:5A:3F:09 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BA39D330F3104AA7EA14AD380 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1faa210e-9b6e-341b-b44c-4d52d35e8f28.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 701 IP address blocks: 71.117.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:33:0f:31:04:aa:7e:a1:4a:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=1c2b87a9-0746-44d5-bbca-e55de3db5523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:bb:d3:a2:b1:4c:5c:eb:a1:0e:f1:c7:0d:43: 60:80:0a:45:18:68:77:b1:75:b3:b0:a9:28:34:12: 1a:ba:f1:15:c0:32:d8:92:4d:a6:5a:5a:0a:ad:9f: 81:e9:9f:a7:6d:24:92:00:07:30:25:38:9c:6b:32: 27:e3:ff:2b:3e:70:49:3b:90:c8:d2:08:0e:7b:0e: aa:35:d8:98:62:b1:f4:24:30:46:b5:23:1c:a3:a0: 52:3c:04:87:39:14:0c:0f:4a:78:98:5e:95:17:e8: ed:e0:d3:12:26:25:34:50:b3:11:cf:ae:d4:4a:ad: 39:c6:5e:ed:9d:f0:82:35:b3:af:b2:fd:28:2f:24: fe:bc:66:c4:1d:58:a2:ff:d0:63:1b:7b:da:70:5a: 91:c6:eb:a9:5d:11:38:13:c3:d7:c3:a7:89:c3:10: 86:f3:13:17:03:2c:ef:c2:61:a9:f8:2c:2f:52:94: 05:cd:04:ca:ec:bc:33:92:5d:5c:97:e2:a2:be:ed: 86:2b:b3:07:26:97:ca:12:8b:ea:29:16:ab:a3:83: b5:28:48:18:f5:29:9e:88:5f:49:05:8b:3c:1a:d2: 94:3a:49:10:69:2e:4b:3e:c9:b7:3d:02:e3:e2:c5: 8b:dc:ba:a1:c6:e8:ec:70:8d:0a:23:88:25:27:24: f2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BE:5A:8D:12:51:FA:DC:5E:14:F4:61:2A:B3:F9:A9:94:5A:3F:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1faa210e-9b6e-341b-b44c-4d52d35e8f28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.117.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:a3:60:21:ae:8a:55:c4:26:11:8f:e3:6a:24:19:e5:41:56: 30:a6:d6:43:6f:ec:91:98:8e:8a:a6:37:4d:7a:4b:22:3a:c4: bb:a7:37:85:a0:45:a2:67:3b:a1:43:fc:0a:1c:76:42:1c:c0: dd:45:5f:69:e4:24:4c:5b:bd:30:05:d1:2b:53:5c:bf:41:00: 21:c0:d4:a5:df:0f:7a:98:64:91:12:e2:3d:17:0f:73:cc:f2: 35:79:bb:83:83:06:ef:bd:e7:5d:f6:43:b2:e8:81:ed:ba:a9: b0:3f:34:3a:eb:8a:bb:28:03:38:a5:37:0e:85:13:43:d4:3b: 29:02:27:28:8c:d2:00:6a:13:0a:c5:2e:59:ee:31:10:da:1c: de:03:02:65:08:cf:57:72:e8:08:ef:ea:68:48:cf:06:a5:65: 4c:03:a0:52:66:1a:1b:53:36:05:c8:60:73:37:87:98:f0:0a: 34:db:a8:af:e9:4c:fb:ef:27:15:8c:8a:ec:dd:49:0d:58:bc: e5:6e:ae:a3:d1:71:72:6c:03:0c:99:35:20:08:74:e7:5b:ef: 66:1e:bd:d5:27:c4:31:c9:17:5a:39:b4:21:05:bf:d3:3c:d3: aa:88:f9:32:f1:af:cc:84:ec:b7:74:3e:26:e1:e8:43:6b:74: 8c:a9:a1:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTMPMQSqfqFK04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MWMyYjg3YTktMDc0Ni00NGQ1LWJiY2EtZTU1ZGUzZGI1NTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7vTorFMXOuhDvHHDUNggApFGGh3sXWzsKko NBIauvEVwDLYkk2mWloKrZ+B6Z+nbSSSAAcwJTicazIn4/8rPnBJO5DI0ggOew6q NdiYYrH0JDBGtSMco6BSPASHORQMD0p4mF6VF+jt4NMSJiU0ULMRz67USq05xl7t nfCCNbOvsv0oLyT+vGbEHVii/9BjG3vacFqRxuupXRE4E8PXw6eJwxCG8xMXAyzv wmGp+CwvUpQFzQTK7Lwzkl1cl+Kivu2GK7MHJpfKEovqKRaro4O1KEgY9SmeiF9J BYs8GtKUOkkQaS5LPsm3PQLj4sWL3LqhxujscI0KI4glJyTylwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEK+Wo0SUfrcXhT0YSqz+amUWj8JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWZhYTIxMGUtOWI2ZS0z NDFiLWI0NGMtNGQ1MmQzNWU4ZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER3UQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKyjYCGuilXEJhGP42okGeVBVjCm1kNv7JGYjoqmN016SyI6xLunN4Wg RaJnO6FD/AocdkIcwN1FX2nkJExbvTAF0StTXL9BACHA1KXfD3qYZJES4j0XD3PM 8jV5u4ODBu+95132Q7Loge26qbA/NDrrirsoAzilNw6FE0PUOykCJyiM0gBqEwrF LlnuMRDaHN4DAmUIz1dy6Ajv6mhIzwalZUwDoFJmGhtTNgXIYHM3h5jwCjTbqK/p TPvvJxWMiuzdSQ1YvOVurqPRcXJsAwyZNSAIdOdb72YevdUnxDHJF1o5tCEFv9M8 06qI+TLxr8yE7Ld0Pibh6ENrdIypoV8= -----END CERTIFICATE-----Generated at Wed Nov 5 19:44:37 2025 by rpki-client