$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35c1df24-99da-325c-ab92-21410a3f50a8.roa File: 35c1df24-99da-325c-ab92-21410a3f50a8.roa (raw, json) Hash identifier: PprjeXDSYNOCkhbUl9Euj3GcwsOqfjUMLyAts41USKA= Subject key identifier: EE:9C:A3:BF:0F:8F:9C:DA:2B:E9:AF:38:C1:EA:30:02:A6:1F:02:CF Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AC2E111C5078632C06C746C80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35c1df24-99da-325c-ab92-21410a3f50a8.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 701 IP address blocks: 71.114.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:11:c5:07:86:32:c0:6c:74:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=d1c3b972-8de5-4551-9fe4-ec4cf6a2a888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6a:ee:fd:f6:d2:a3:f7:5c:b8:7d:7e:eb:8c: ca:4a:1e:58:22:5a:1b:8f:24:fd:32:1c:28:49:ed: 1c:5f:ab:4c:fb:ad:1d:ca:59:ae:2d:1c:3e:08:3b: 37:b2:62:ab:eb:fe:24:b9:a4:08:7b:ce:fc:ff:99: 25:00:15:79:11:68:ea:6a:93:ff:3d:4f:70:08:4b: 5e:3c:13:f9:46:5b:88:29:bc:d5:5d:f6:2a:c6:dc: 6d:e3:48:dc:1e:a0:69:8e:25:18:66:3c:8b:b9:54: ae:72:b2:67:5f:c6:8a:c1:99:a9:ee:dd:fe:59:21: 79:4e:08:39:e3:4a:ac:75:31:f9:1f:e8:e2:ea:92: 64:7c:c2:d7:13:f6:30:80:91:9c:ca:3b:27:47:0c: 43:db:9c:37:34:ae:dd:73:e6:c1:0b:40:7b:69:30: 22:67:79:7e:d9:b0:52:8a:15:2f:f7:e7:e1:62:e3: 16:0e:ae:b2:36:b8:f2:5b:84:e2:db:cf:17:c3:43: 2e:12:63:71:e8:e7:aa:10:9f:d3:b7:e2:01:23:43: 26:59:ab:d4:c7:b5:1e:5b:81:41:75:b7:9c:09:07: 29:d3:cb:f9:a8:93:41:42:f8:4f:82:31:e2:72:d4: c0:dd:99:16:96:7d:5f:2c:c0:bb:07:62:1a:35:4e: be:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:9C:A3:BF:0F:8F:9C:DA:2B:E9:AF:38:C1:EA:30:02:A6:1F:02:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35c1df24-99da-325c-ab92-21410a3f50a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.114.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:8f:e9:b9:21:1d:f7:c6:c7:16:03:2a:a6:dd:2c:56:d6:3c: 3c:12:42:84:a8:e8:be:a8:92:48:d0:77:9d:c1:29:12:d5:a6: d3:32:b0:9d:9b:f8:f9:78:fa:53:bf:aa:44:7d:48:1f:e0:63: e9:cd:bc:ab:f2:9a:9a:fc:69:fd:9a:37:c5:a1:48:8a:b3:23: 21:7e:2d:b8:f8:34:15:1f:c6:aa:d6:9c:cb:5b:60:06:db:f0: e3:2b:56:18:dd:0a:4f:83:bd:9e:52:9f:0e:98:b8:1d:f9:2e: 75:a2:7a:81:54:d5:0d:8e:5e:89:25:ab:f9:c9:77:35:3a:3e: b6:69:46:69:2e:9d:92:e4:53:6d:1b:10:08:5a:92:95:87:eb: 8f:10:c1:45:cf:f1:4f:e4:e2:73:75:f7:9f:59:05:df:f7:3d: a9:12:3d:41:95:a4:2c:0f:6c:6e:09:c8:79:06:d0:b8:22:72: 2d:16:ec:e3:f7:f4:75:ff:76:8f:a1:bb:7a:ce:ef:74:93:b7: ad:03:bd:3b:e5:2b:f3:4c:cf:6f:e5:a3:ab:7a:2e:e8:75:4f: ff:7d:15:9e:fd:15:23:46:9b:0b:d8:a4:31:c9:b9:f6:f1:2f: 48:f1:bd:7e:68:b9:49:96:40:b7:dd:1c:02:44:01:56:77:57: e5:a5:f7:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4RHFB4YywGx0bIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZDFjM2I5NzItOGRlNS00NTUxLTlmZTQtZWM0Y2Y2YTJhODg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2ru/fbSo/dcuH1+64zKSh5YIlobjyT9Mhwo Se0cX6tM+60dylmuLRw+CDs3smKr6/4kuaQIe878/5klABV5EWjqapP/PU9wCEte PBP5RluIKbzVXfYqxtxt40jcHqBpjiUYZjyLuVSucrJnX8aKwZmp7t3+WSF5Tgg5 40qsdTH5H+ji6pJkfMLXE/YwgJGcyjsnRwxD25w3NK7dc+bBC0B7aTAiZ3l+2bBS ihUv9+fhYuMWDq6yNrjyW4Ti288Xw0MuEmNx6OeqEJ/Tt+IBI0MmWavUx7UeW4FB dbecCQcp08v5qJNBQvhPgjHictTA3ZkWln1fLMC7B2IaNU6+BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6co78Pj5zaK+mvOMHqMAKmHwLPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzVjMWRmMjQtOTlkYS0z MjVjLWFiOTItMjE0MTBhM2Y1MGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER3JgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGP6bkhHffGxxYDKqbdLFbWPDwSQoSo6L6okkjQd53BKRLVptMysJ2b +Pl4+lO/qkR9SB/gY+nNvKvympr8af2aN8WhSIqzIyF+Lbj4NBUfxqrWnMtbYAbb 8OMrVhjdCk+DvZ5Snw6YuB35LnWieoFU1Q2OXoklq/nJdzU6PrZpRmkunZLkU20b EAhakpWH648QwUXP8U/k4nN1959ZBd/3PakSPUGVpCwPbG4JyHkG0Lgici0W7OP3 9HX/do+hu3rO73STt60DvTvlK/NMz2/lo6t6Luh1T/99FZ79FSNGmwvYpDHJufbx L0jxvX5ouUmWQLfdHAJEAVZ3V+Wl92U= -----END CERTIFICATE-----Generated at Sat Aug 9 22:42:11 2025 by rpki-client