$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a7fa942-c5aa-343e-b2ca-6599ff327908.roa File: 7a7fa942-c5aa-343e-b2ca-6599ff327908.roa (raw, json) Hash identifier: xNETufDzVh12XA55rzwAN0MZj+6kj2qgHpOBXRUXdAE= Subject key identifier: 39:EB:85:5D:7C:F6:9B:FC:7E:DE:2A:A5:65:7A:42:83:A4:37:A7:0B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F8038F7FD1EFCF006B9700 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a7fa942-c5aa-343e-b2ca-6599ff327908.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 71.246.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:03:8f:7f:d1:ef:cf:00:6b:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=32fdd1ec-ea49-4a37-8501-605a76f9147a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2d:7e:d6:58:22:d2:12:42:89:ab:48:34:73: ac:26:ae:42:f2:a6:b3:69:cc:64:50:da:df:99:45: a3:5f:93:a8:6e:66:87:bf:97:73:53:0b:3b:13:83: c6:97:c7:bc:a4:48:16:29:9f:c1:e5:cf:b3:b0:60: cc:4f:3e:cb:c2:69:4e:ba:d1:70:1e:a2:3c:8a:c9: 2f:6b:e1:fa:1c:dd:0f:bb:87:b7:52:e6:ff:5c:2c: c5:3d:75:d6:7a:c3:19:d7:a0:03:46:df:84:2f:43: dd:f8:5b:ea:ff:82:34:d3:87:11:79:e6:21:03:84: 6e:4a:f9:25:07:9b:78:60:9f:e7:6f:fd:c5:42:d2: fd:b5:28:b5:0b:a0:d8:20:87:36:ab:6b:26:a2:17: d6:29:b0:3d:ef:67:85:21:79:6f:d3:f8:c6:2c:d1: 61:6c:5d:25:a6:7d:60:0e:d5:ca:d3:29:4a:75:56: 89:66:2c:e5:d5:3d:83:59:fc:07:e2:c7:ce:12:e5: 1c:70:6b:be:f7:ae:37:fc:83:0a:47:5f:87:ae:27: c6:88:9c:c7:78:0a:20:ed:1e:f1:6f:fd:d6:9d:8a: 35:c6:4e:da:40:fb:36:b1:9a:79:95:1f:58:72:0a: 36:f5:b1:fb:71:76:86:8a:1a:71:10:bd:d4:df:b7: ac:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EB:85:5D:7C:F6:9B:FC:7E:DE:2A:A5:65:7A:42:83:A4:37:A7:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a7fa942-c5aa-343e-b2ca-6599ff327908.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.246.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:fe:e3:0b:ee:49:ea:75:a8:c1:f7:41:8f:84:ae:ea:e2:44: ff:06:f7:0c:a8:1a:26:f8:cb:a7:26:b1:78:34:96:41:82:e5: 96:b2:48:31:c0:00:7c:61:10:f5:ac:2f:11:2f:21:2a:7c:f6: ef:fc:24:6d:d2:75:af:33:68:e9:80:3e:8a:b8:0a:45:fa:c5: d2:e3:f2:07:6c:bc:1d:3a:fe:f5:61:e9:ba:68:12:3e:93:71: a7:fd:52:4f:9c:19:6e:6b:0d:3b:8c:58:bd:2d:f2:21:62:3c: 11:f2:8e:8c:ca:f5:67:c8:18:a8:07:97:0c:f8:ad:b7:6f:62: 83:d5:b6:04:ec:9e:7c:0a:c2:72:b8:17:ab:78:e1:fe:fb:b0: 5e:86:12:4c:c4:46:a5:8f:07:3f:84:05:c7:37:d4:e7:67:2a: 58:42:91:8a:c6:f3:a3:7a:40:30:2a:a5:f9:c4:63:15:b9:87: 02:3e:f6:08:24:bd:f9:57:e8:30:03:0b:a7:1a:83:34:57:60: 84:27:66:74:94:9f:58:9e:29:3e:ac:78:41:ac:86:ff:22:30: d9:4e:80:bf:ae:29:9b:21:05:d2:da:fc:b4:a6:ea:85:95:dc: 56:a3:0a:ac:17:22:9f:d3:0b:2f:9e:08:44:57:48:d8:9b:09: 36:ac:0a:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy+AOPf9HvzwBrlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MzJmZGQxZWMtZWE0OS00YTM3LTg1MDEtNjA1YTc2ZjkxNDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyS1+1lgi0hJCiatINHOsJq5C8qazacxkUNrf mUWjX5OobmaHv5dzUws7E4PGl8e8pEgWKZ/B5c+zsGDMTz7LwmlOutFwHqI8iskv a+H6HN0Pu4e3Uub/XCzFPXXWesMZ16ADRt+EL0Pd+Fvq/4I004cReeYhA4RuSvkl B5t4YJ/nb/3FQtL9tSi1C6DYIIc2q2smohfWKbA972eFIXlv0/jGLNFhbF0lpn1g DtXK0ylKdVaJZizl1T2DWfwH4sfOEuUccGu+9643/IMKR1+HrifGiJzHeAog7R7x b/3WnYo1xk7aQPs2sZp5lR9Ycgo29bH7cXaGihpxEL3U37es0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnrhV189pv8ft4qpWV6QoOkN6cLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvN2E3ZmE5NDItYzVhYS0z NDNlLWIyY2EtNjU5OWZmMzI3OTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFR/YAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABz+4wvuSep1qMH3QY+EruriRP8G9wyoGib4y6cmsXg0lkGC5ZaySDHA AHxhEPWsLxEvISp89u/8JG3Sda8zaOmAPoq4CkX6xdLj8gdsvB06/vVh6bpoEj6T caf9Uk+cGW5rDTuMWL0t8iFiPBHyjozK9WfIGKgHlwz4rbdvYoPVtgTsnnwKwnK4 F6t44f77sF6GEkzERqWPBz+EBcc31OdnKlhCkYrG86N6QDAqpfnEYxW5hwI+9ggk vflX6DADC6cagzRXYIQnZnSUn1ieKT6seEGshv8iMNlOgL+uKZshBdLa/LSm6oWV 3FajCqwXIp/TCy+eCERXSNibCTasCkU= -----END CERTIFICATE-----Generated at Wed Nov 5 10:59:59 2025 by rpki-client