$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1faa210e-9b6e-341b-b44c-4d52d35e8f28.roa File: 1faa210e-9b6e-341b-b44c-4d52d35e8f28.roa (raw, json) Hash identifier: VQkJiLKBURId4eygwRzf6Gg/pm+wzHjByXp5L+W+Hfo= Subject key identifier: DD:6B:BE:B1:13:B8:A0:AB:55:6F:0A:57:11:43:43:B2:F1:46:9E:0B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AC2E117BA7CA466C6CC264340 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1faa210e-9b6e-341b-b44c-4d52d35e8f28.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 701 IP address blocks: 71.117.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:17:ba:7c:a4:66:c6:cc:26:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=3e467491-dfb5-48de-95ec-dd043e7a5912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ae:be:87:7e:be:57:a4:96:a0:dd:e8:d1:4a: 38:fc:20:9b:83:69:f9:82:c3:54:c6:73:0a:f7:ad: 5b:85:55:d5:62:9c:9d:a5:5c:f2:c6:2f:80:8c:d5: 56:2a:a2:ca:2b:ee:f8:b6:8b:ca:97:0f:4a:05:9a: a1:ea:9c:e4:2d:41:53:20:28:71:a1:4b:62:c8:fd: 7a:e7:3c:2f:92:fc:1f:51:a3:3f:61:63:f1:bd:87: af:5c:29:d1:3d:01:a2:5a:1b:39:90:3f:f9:7a:fd: db:4a:10:45:f7:bc:a5:e4:c8:f6:98:49:ee:36:e9: 52:4a:2c:35:30:f3:50:7c:e9:91:44:c7:0e:9d:ef: 33:1f:92:b6:b3:9a:db:04:4b:8e:3e:18:58:b9:be: 64:5e:40:4d:b2:00:e5:64:9f:1d:c6:03:d9:d4:96: 19:92:bb:45:36:7b:9f:48:7d:8a:95:7f:eb:0c:9c: 63:2b:f9:65:a7:34:69:d0:69:b0:56:91:4d:f4:ef: b4:d7:15:e1:5b:94:ff:9c:ce:61:df:dd:18:00:b0: b0:e8:62:48:ae:62:50:33:f2:fe:91:32:29:35:b6: e9:4c:47:e8:b7:d8:4f:24:4f:66:b5:eb:86:cf:b1: b1:95:d0:2a:0d:6c:7b:4d:5a:e8:39:99:f4:65:fb: be:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6B:BE:B1:13:B8:A0:AB:55:6F:0A:57:11:43:43:B2:F1:46:9E:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1faa210e-9b6e-341b-b44c-4d52d35e8f28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.117.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:fc:20:d8:10:6a:11:57:d3:4e:1e:a5:2f:90:e7:68:f3:15: 27:66:a8:a7:a5:ba:dd:48:4e:53:58:33:8f:90:04:15:e1:17: 76:60:de:da:61:df:a1:f9:ef:1b:60:f5:58:b1:dc:53:26:de: e0:ed:18:7e:5e:01:ae:28:52:e8:b7:d4:c8:47:64:d2:81:fa: 07:d0:f9:86:24:0e:f1:e4:82:7f:39:1a:32:fa:f9:9a:37:32: c1:7e:48:a1:79:64:53:38:f9:f4:26:5b:6d:e0:a2:d2:ce:d2: 57:25:a6:b5:79:06:ca:38:97:24:00:f2:07:40:24:fd:ba:f8: 08:65:83:a5:19:66:32:01:d4:d2:ed:f1:cd:d9:b0:2d:24:26: c0:6b:3c:d1:29:97:76:33:a3:de:42:f1:9b:7d:cb:36:94:79: 4c:52:55:10:e8:e9:76:8f:7f:8e:3d:74:6b:ef:90:2e:1b:2c: 08:0b:ce:e2:99:44:c9:23:52:9c:71:7a:84:e7:eb:ed:04:3c: 54:e9:6b:b5:0b:71:3f:79:9b:31:86:8b:55:c8:b4:90:4d:c2: 2d:07:51:1d:ab:dc:69:12:b9:e5:cb:d1:11:a0:47:be:f0:59: a3:d0:1a:8c:86:8c:72:0e:2b:87:fa:fe:1a:75:4c:1a:bf:20: 49:e8:87:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4Re6fKRmxswmQ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk M2U0Njc0OTEtZGZiNS00OGRlLTk1ZWMtZGQwNDNlN2E1OTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnK6+h36+V6SWoN3o0Uo4/CCbg2n5gsNUxnMK 961bhVXVYpydpVzyxi+AjNVWKqLKK+74tovKlw9KBZqh6pzkLUFTIChxoUtiyP16 5zwvkvwfUaM/YWPxvYevXCnRPQGiWhs5kD/5ev3bShBF97yl5Mj2mEnuNulSSiw1 MPNQfOmRRMcOne8zH5K2s5rbBEuOPhhYub5kXkBNsgDlZJ8dxgPZ1JYZkrtFNnuf SH2KlX/rDJxjK/llpzRp0GmwVpFN9O+01xXhW5T/nM5h390YALCw6GJIrmJQM/L+ kTIpNbbpTEfot9hPJE9mteuGz7GxldAqDWx7TVroOZn0Zfu+AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1rvrETuKCrVW8KVxFDQ7LxRp4LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWZhYTIxMGUtOWI2ZS0z NDFiLWI0NGMtNGQ1MmQzNWU4ZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER3UQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACT8INgQahFX004epS+Q52jzFSdmqKelut1ITlNYM4+QBBXhF3Zg3tph 36H57xtg9Vix3FMm3uDtGH5eAa4oUui31MhHZNKB+gfQ+YYkDvHkgn85GjL6+Zo3 MsF+SKF5ZFM4+fQmW23gotLO0lclprV5Bso4lyQA8gdAJP26+Ahlg6UZZjIB1NLt 8c3ZsC0kJsBrPNEpl3Yzo95C8Zt9yzaUeUxSVRDo6XaPf449dGvvkC4bLAgLzuKZ RMkjUpxxeoTn6+0EPFTpa7ULcT95mzGGi1XItJBNwi0HUR2r3GkSueXL0RGgR77w WaPQGoyGjHIOK4f6/hp1TBq/IEnohxY= -----END CERTIFICATE-----Generated at Sat Aug 9 10:32:39 2025 by rpki-client