$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/228fabbc-0b44-3b16-9877-0d67187805d1.roa File: 228fabbc-0b44-3b16-9877-0d67187805d1.roa (raw, json) Hash identifier: yVMzMmEcSajby8LyGGkFdfJhiHjPKVF5+s87MVRV7Zg= Subject key identifier: 4E:A5:A6:E6:A2:8D:69:8D:C5:7B:81:F0:6C:00:E0:BF:89:8E:47:29 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584ACB4108818309473208BDE580 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/228fabbc-0b44-3b16-9877-0d67187805d1.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 701 IP address blocks: 71.254.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:08:81:83:09:47:32:08:bd:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=a4cb8183-2e66-4924-ae7a-f83bdc7ae86e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:75:7b:96:ea:07:4e:91:ef:79:8a:9e:3d:b2: f4:7c:1e:3d:e4:72:12:e6:03:71:e5:c3:f9:b3:ce: 1b:a5:c8:f8:7c:ad:5d:5f:0c:ec:f8:d5:af:eb:f8: f2:b4:47:97:e5:58:79:6e:3f:6d:1c:66:d4:16:ce: 52:98:dc:d7:6f:ab:70:9f:17:21:b6:2d:40:62:83: 5f:20:b9:fe:0a:68:3b:d7:a3:13:f3:d4:ed:ad:a6: 57:8d:3c:f9:d8:2a:2e:56:1c:fc:6f:bb:02:37:be: 14:71:23:ec:06:58:38:02:8b:47:a6:a1:18:b2:86: 34:2d:05:01:46:7e:d9:bf:e3:7a:c3:cc:ec:e5:6b: ec:17:d1:99:65:c2:54:0b:7d:92:50:72:f5:d2:50: 2d:e9:49:c8:51:0b:b8:3c:ba:4d:06:81:1e:dd:c3: bc:1f:38:38:bf:0d:71:a4:85:53:19:b1:4a:db:6f: 46:f6:d3:c6:a5:99:44:7f:14:19:1d:f1:49:56:71: e5:e4:ea:5c:05:64:8a:fa:d6:27:4e:84:28:e0:b4: d0:64:d2:53:d2:8a:45:67:ff:3b:64:81:d9:04:49: aa:a5:8d:f9:5c:f8:63:a5:84:5e:c7:c3:19:ba:ab: 46:1a:48:06:f3:22:e7:1d:ca:f3:7c:3d:25:cd:fa: ce:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A5:A6:E6:A2:8D:69:8D:C5:7B:81:F0:6C:00:E0:BF:89:8E:47:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/228fabbc-0b44-3b16-9877-0d67187805d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.254.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:ab:6c:00:56:59:d9:0d:77:0b:56:6c:ae:8e:66:bf:1a:9a: 48:72:99:0b:55:29:7a:0f:7c:1a:4e:28:b1:e7:eb:d6:35:3b: d2:3a:0d:ac:0c:ac:7e:7f:9f:5c:88:e5:5c:6b:3b:e0:16:0a: bb:40:5e:a5:74:23:ce:19:66:54:0a:15:00:b7:db:ac:ec:9a: 09:db:6a:d6:03:e1:9e:30:46:50:75:e1:f5:45:2f:e4:a3:c5: 6d:d0:39:ba:03:f9:c9:bf:74:36:c9:6a:4a:4c:8f:ea:88:1c: 02:26:d8:08:77:4e:75:b8:ac:e7:be:79:5a:d3:97:7e:19:57: a7:90:c4:88:ec:49:43:df:a0:84:c9:37:2d:43:b3:3c:61:89: 39:21:03:7a:9d:f4:2d:44:f1:a4:53:45:86:0a:6e:fa:35:d9: 79:7b:83:15:33:c7:2c:de:10:45:2b:90:bb:2c:00:13:2e:4a: 80:dc:b8:62:c1:c2:a6:0e:e8:3a:eb:35:ca:be:a9:1c:ee:b7: 9c:1d:de:88:93:b0:85:01:4b:ae:92:75:7a:36:b0:c2:53:14: 5b:01:94:ad:a7:b7:3b:48:57:62:48:83:c2:b1:d0:d9:41:9b: 41:32:98:17:ef:16:31:d6:3b:d6:7f:8a:c4:21:c6:74:68:50: 7c:7a:55:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQQiBgwlHMgi95YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk YTRjYjgxODMtMmU2Ni00OTI0LWFlN2EtZjgzYmRjN2FlODZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnV7luoHTpHveYqePbL0fB495HIS5gNx5cP5 s84bpcj4fK1dXwzs+NWv6/jytEeX5Vh5bj9tHGbUFs5SmNzXb6twnxchti1AYoNf ILn+Cmg716MT89TtraZXjTz52CouVhz8b7sCN74UcSPsBlg4AotHpqEYsoY0LQUB Rn7Zv+N6w8zs5WvsF9GZZcJUC32SUHL10lAt6UnIUQu4PLpNBoEe3cO8Hzg4vw1x pIVTGbFK229G9tPGpZlEfxQZHfFJVnHl5OpcBWSK+tYnToQo4LTQZNJT0opFZ/87 ZIHZBEmqpY35XPhjpYRex8MZuqtGGkgG8yLnHcrzfD0lzfrOZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6lpuaijWmNxXuB8GwA4L+JjkcpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjI4ZmFiYmMtMGI0NC0z YjE2LTk4NzctMGQ2NzE4NzgwNWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER/5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWrbABWWdkNdwtWbK6OZr8amkhymQtVKXoPfBpOKLHn69Y1O9I6DawM rH5/n1yI5VxrO+AWCrtAXqV0I84ZZlQKFQC326zsmgnbatYD4Z4wRlB14fVFL+Sj xW3QOboD+cm/dDbJakpMj+qIHAIm2Ah3TnW4rOe+eVrTl34ZV6eQxIjsSUPfoITJ Ny1DszxhiTkhA3qd9C1E8aRTRYYKbvo12Xl7gxUzxyzeEEUrkLssABMuSoDcuGLB wqYO6DrrNcq+qRzut5wd3oiTsIUBS66SdXo2sMJTFFsBlK2ntztIV2JIg8Kx0NlB m0EymBfvFjHWO9Z/isQhxnRoUHx6VRo= -----END CERTIFICATE-----Generated at Sat Aug 9 14:24:19 2025 by rpki-client