$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d566a20-db3f-3ba5-a3f5-5685134127e8.roa File: 7d566a20-db3f-3ba5-a3f5-5685134127e8.roa (raw, json) Hash identifier: 7B4Fh9fvkSNqvmzfYh7BZKRSN5ng1tyT3BGsFa4la7U= Subject key identifier: FF:50:96:5F:D9:82:99:C8:FB:71:66:23:A4:BD:7A:C9:FB:D7:66:1B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BA39D322DB0FD056089DA9000 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d566a20-db3f-3ba5-a3f5-5685134127e8.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 701 IP address blocks: 71.252.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:32:2d:b0:fd:05:60:89:da:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=05d98a5e-ed6f-4832-bc1b-6468f233e0b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:95:bd:a0:40:ed:30:31:7f:a5:b1:5d:44:66: ed:60:5f:c9:da:f7:c9:7a:7a:80:82:87:87:38:f6: 62:70:3d:bf:62:c7:03:ac:b3:fe:53:f6:80:e4:69: 5e:1e:87:b7:61:ec:56:f4:05:d3:12:10:6c:70:af: ab:c0:7b:98:0c:95:23:e0:0e:b9:48:ef:7e:2c:52: 95:3e:89:e4:62:38:71:99:ed:20:3c:f4:47:85:a7: b5:0b:ae:ac:80:98:0b:66:b8:d8:da:9d:54:07:de: e3:55:f6:03:06:7d:96:46:fa:27:ab:5e:2b:90:f2: 17:b2:42:f2:79:f9:00:78:76:9e:e0:52:f5:ca:e8: dd:1a:fc:72:df:aa:f0:3e:3e:c0:bf:dc:47:ca:29: 3b:ad:d8:1a:f7:96:f3:8d:d6:47:73:50:19:ff:98: df:e8:5b:9c:de:94:b9:06:6f:c0:8b:36:51:03:b0: eb:2d:a7:e2:48:b6:ed:aa:1d:e7:91:ae:ca:10:ba: f8:f5:cc:ea:9f:88:59:6b:0f:b4:2f:1a:c4:37:e7: 7e:f3:3e:c9:78:6f:7d:89:12:1e:28:b7:da:02:96: 72:e2:22:b7:24:d6:46:7d:0d:02:62:fd:0f:ec:8b: 75:2c:d2:eb:66:5d:00:e1:a1:07:97:e0:b6:dc:ab: 28:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:50:96:5F:D9:82:99:C8:FB:71:66:23:A4:BD:7A:C9:FB:D7:66:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7d566a20-db3f-3ba5-a3f5-5685134127e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.252.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:9c:81:e2:ca:7a:42:99:f7:1d:d5:fd:53:69:c2:3f:3d:bf: b1:09:78:b5:0a:48:ca:7d:41:d6:cf:30:ab:0d:81:4c:4e:b8: 82:84:ed:39:78:60:d5:8b:5e:41:80:6d:b0:7a:f2:0d:e2:2f: b6:1b:fa:83:b1:27:02:58:e7:c1:cd:ee:fc:58:ad:4b:4d:24: 44:7f:81:af:55:07:c0:7a:44:97:88:e3:70:49:f8:e5:6e:05: f1:e0:2c:d4:c9:4c:6f:57:05:2a:5b:7b:ce:6a:eb:a2:33:6b: 8a:e1:f2:81:d0:18:d2:79:1e:0a:5c:eb:c0:c7:b2:85:b4:c9: 66:bb:fb:c4:ac:e0:49:0f:35:91:bd:57:4e:7b:6f:3e:23:da: e7:d5:dc:4b:58:30:10:ee:c7:80:b6:c1:73:a8:89:c7:42:a8: 8d:b3:a5:9f:9f:12:c5:27:79:de:d9:d9:40:71:6d:44:a5:26: 5c:6e:66:90:29:f4:49:34:32:fa:c8:1c:af:a7:3e:fc:92:35: 5f:92:e4:78:cc:df:dd:1d:bb:ae:19:2f:b0:81:be:7e:cf:74: 7b:35:fa:35:00:38:66:da:6a:29:cb:2e:71:94:96:bc:57:cf: 4f:5e:9a:a5:a0:8f:29:13:da:89:b9:16:d3:aa:da:fc:c2:a2: 36:0f:ca:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTItsP0FYInakAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MDVkOThhNWUtZWQ2Zi00ODMyLWJjMWItNjQ2OGYyMzNlMGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05W9oEDtMDF/pbFdRGbtYF/J2vfJenqAgoeH OPZicD2/YscDrLP+U/aA5GleHoe3YexW9AXTEhBscK+rwHuYDJUj4A65SO9+LFKV PonkYjhxme0gPPRHhae1C66sgJgLZrjY2p1UB97jVfYDBn2WRvonq14rkPIXskLy efkAeHae4FL1yujdGvxy36rwPj7Av9xHyik7rdga95bzjdZHc1AZ/5jf6Fuc3pS5 Bm/AizZRA7DrLafiSLbtqh3nka7KELr49czqn4hZaw+0LxrEN+d+8z7JeG99iRIe KLfaApZy4iK3JNZGfQ0CYv0P7It1LNLrZl0A4aEHl+C23KsoVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9Qll/ZgpnI+3FmI6S9esn712YbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvN2Q1NjZhMjAtZGIzZi0z YmE1LWEzZjUtNTY4NTEzNDEyN2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAR/wBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEacgeLKekKZ9x3V/VNpwj89v7EJeLUKSMp9QdbPMKsNgUxOuIKE7Tl4 YNWLXkGAbbB68g3iL7Yb+oOxJwJY58HN7vxYrUtNJER/ga9VB8B6RJeI43BJ+OVu BfHgLNTJTG9XBSpbe85q66Iza4rh8oHQGNJ5Hgpc68DHsoW0yWa7+8Ss4EkPNZG9 V057bz4j2ufV3EtYMBDux4C2wXOoicdCqI2zpZ+fEsUned7Z2UBxbUSlJlxuZpAp 9Ek0MvrIHK+nPvySNV+S5HjM390du64ZL7CBvn7PdHs1+jUAOGbaainLLnGUlrxX z09emqWgjykT2om5FtOq2vzCojYPyuE= -----END CERTIFICATE-----Generated at Wed Nov 5 02:21:24 2025 by rpki-client