$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9176a99f-0dbe-36c4-b707-9a0d7a97e851.roa File: 9176a99f-0dbe-36c4-b707-9a0d7a97e851.roa (raw, json) Hash identifier: 4Lbt3fBboyTvnsU1XmPtBpBQjbSB5eGDzTs2IAOMrL8= Subject key identifier: 1F:6E:FC:8B:B8:01:27:D0:2D:44:68:8C:E5:40:DA:5D:96:19:60:29 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BA39D2B4F9DDA2933A1AF4C80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9176a99f-0dbe-36c4-b707-9a0d7a97e851.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 701 IP address blocks: 71.126.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:2b:4f:9d:da:29:33:a1:af:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=7e66fde0-4dcd-4119-8661-7cad4f679e24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ac:3c:ed:26:4b:d9:53:60:4a:67:f4:72:f9: 75:c2:b8:0c:80:25:9e:d7:d9:b8:0c:39:29:65:e3: 3e:d4:21:7c:9d:5d:13:38:3d:4c:22:36:89:be:ca: e4:bf:20:06:18:87:19:33:3a:53:8b:dd:7a:0e:8f: a1:27:b8:7d:97:95:a0:87:d3:42:17:65:38:41:ac: 3c:e5:95:19:50:29:f5:18:5a:58:51:f5:71:f6:e7: 9d:ba:d3:2d:fd:67:23:4b:e4:b6:80:a1:00:35:8f: a7:d6:4a:d2:93:3c:4e:9b:1a:e6:94:46:37:6c:10: c1:2a:13:5e:7c:07:5d:ec:c7:ef:0f:5d:21:98:b9: 74:45:8e:a3:6e:72:52:aa:ba:46:be:a1:e7:6d:06: fb:43:20:4e:8d:2f:31:d4:8f:80:ad:9b:12:1f:2b: 0f:34:cf:01:53:13:79:a5:b5:37:78:96:68:c8:8f: f3:dd:1f:1c:ea:2f:c9:3b:90:80:86:30:4c:c2:46: bd:d9:16:2e:0a:96:9d:75:c3:e2:c6:7c:65:3e:b7: 9d:fa:2c:4c:82:c6:0b:d8:6a:ac:f2:3f:df:1c:6c: 87:a6:41:a0:d2:e4:98:16:74:a6:ab:a7:f8:21:81: 01:1a:b8:92:10:a6:8e:a5:66:b4:94:b7:0b:3f:2f: 35:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:6E:FC:8B:B8:01:27:D0:2D:44:68:8C:E5:40:DA:5D:96:19:60:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9176a99f-0dbe-36c4-b707-9a0d7a97e851.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.126.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:dd:ea:45:12:96:82:b5:31:32:88:68:92:1c:6a:e6:1a:65: 50:7b:65:1c:21:ab:fe:1e:6c:25:ef:33:6c:d7:e0:29:ce:52: 08:ca:9b:6f:57:a9:37:02:17:79:9f:0f:ba:d3:cb:c0:ec:d5: 75:44:70:db:60:32:d5:2b:ed:66:f0:c4:63:9a:83:1e:85:12: 0d:88:77:d1:1a:89:c0:aa:b9:9b:f3:a5:79:fe:b3:40:0f:a9: 4a:8b:f5:7d:63:66:5f:e7:f3:c2:00:5f:b8:49:63:4d:db:c8: 10:ca:2a:ef:59:7e:ef:aa:d5:d5:ea:33:bc:8e:e0:35:1d:f7: 02:6a:42:a3:d1:a4:f3:b5:fe:5a:32:73:88:3a:1c:c9:45:45: 07:e1:1e:21:17:d5:ba:9f:d6:d0:00:4a:b6:33:57:a8:d1:ba: 1c:b0:15:9d:9b:f0:cd:d7:0b:d0:d1:da:81:d5:8d:9d:ae:1d: b0:ac:b2:e7:2f:d8:6e:f7:b6:e4:f2:4c:c5:f8:2b:12:0c:b1: a0:06:02:c1:cc:96:ef:ac:b6:bd:24:cf:6b:8e:fc:ec:b4:c5: a2:f9:9b:0a:07:02:c0:bd:93:e0:da:f5:49:da:a7:93:de:37: 0e:b1:c4:3a:2e:4b:ea:e4:21:49:89:25:6e:e5:be:d0:9e:d0: 9d:f5:2c:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnStPndopM6GvTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk N2U2NmZkZTAtNGRjZC00MTE5LTg2NjEtN2NhZDRmNjc5ZTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqw87SZL2VNgSmf0cvl1wrgMgCWe19m4DDkp ZeM+1CF8nV0TOD1MIjaJvsrkvyAGGIcZMzpTi916Do+hJ7h9l5Wgh9NCF2U4Qaw8 5ZUZUCn1GFpYUfVx9uedutMt/WcjS+S2gKEANY+n1krSkzxOmxrmlEY3bBDBKhNe fAdd7MfvD10hmLl0RY6jbnJSqrpGvqHnbQb7QyBOjS8x1I+ArZsSHysPNM8BUxN5 pbU3eJZoyI/z3R8c6i/JO5CAhjBMwka92RYuCpaddcPixnxlPred+ixMgsYL2Gqs 8j/fHGyHpkGg0uSYFnSmq6f4IYEBGriSEKaOpWa0lLcLPy81bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9u/Iu4ASfQLURojOVA2l2WGWApMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTE3NmE5OWYtMGRiZS0z NmM0LWI3MDctOWEwZDdhOTdlODUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER34gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrd6kUSloK1MTKIaJIcauYaZVB7ZRwhq/4ebCXvM2zX4CnOUgjKm29X qTcCF3mfD7rTy8Ds1XVEcNtgMtUr7WbwxGOagx6FEg2Id9EaicCquZvzpXn+s0AP qUqL9X1jZl/n88IAX7hJY03byBDKKu9Zfu+q1dXqM7yO4DUd9wJqQqPRpPO1/loy c4g6HMlFRQfhHiEX1bqf1tAASrYzV6jRuhywFZ2b8M3XC9DR2oHVjZ2uHbCssucv 2G73tuTyTMX4KxIMsaAGAsHMlu+str0kz2uO/Oy0xaL5mwoHAsC9k+Da9Unap5Pe Nw6xxDouS+rkIUmJJW7lvtCe0J31LDQ= -----END CERTIFICATE-----Generated at Wed Nov 5 12:17:00 2025 by rpki-client