$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/99e36647-3bff-3f6e-a4e3-4bbe667504aa.roa File: 99e36647-3bff-3f6e-a4e3-4bbe667504aa.roa (raw, json) Hash identifier: 3jUoxUEYyHV+agQfu7gZ65UenT1k+4a3kBsZGqHAChc= Subject key identifier: E8:0C:9A:67:6E:74:52:C2:FE:F7:B3:80:61:9A:4B:FA:64:19:AF:1A Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584ACB40F2DE4E8A428121394A80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/99e36647-3bff-3f6e-a4e3-4bbe667504aa.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 701 IP address blocks: 70.104.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:f2:de:4e:8a:42:81:21:39:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=e765ba49-c069-4b58-887e-6cb0982a248c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:47:b4:ca:75:c3:82:7c:3b:c1:2c:0b:16:28: 40:7f:7e:05:a4:50:a4:31:bd:53:64:2b:29:ae:22: 3c:4c:8e:85:82:1e:a5:63:30:00:72:87:f5:d3:65: 0d:e6:d5:76:98:be:0c:21:f9:f1:b9:a9:ce:25:6d: b6:68:d2:e6:55:8b:a7:2d:bf:39:ef:b4:92:18:60: af:8e:08:81:9a:09:4f:b8:75:9e:cb:8f:f2:2a:6b: 10:06:9b:1f:80:9e:9d:d6:e7:66:80:97:d5:6b:a2: 5c:7d:3c:be:5e:c6:90:dc:f3:69:8f:40:1f:88:75: d7:a1:c5:93:59:6d:67:eb:7e:ee:c2:cf:ab:86:43: c9:6a:d8:f5:50:9b:f9:11:7f:9f:4c:92:f0:ee:6e: cd:b1:d6:11:5a:5b:43:62:3a:72:09:33:78:f7:0e: 3e:73:c8:44:73:07:f2:2a:a0:5b:d1:40:c5:e8:59: f4:f7:03:6d:9f:6f:0c:3a:c0:b6:9a:ea:95:11:d8: a4:6d:37:e0:08:82:be:e7:4f:65:e5:2a:33:3e:a4: ca:91:51:dc:56:3f:ae:fa:81:70:d2:5b:50:77:76: c6:d5:8f:75:f3:19:03:11:03:79:c4:a5:76:cd:d3: be:60:50:bd:a4:0f:9b:e5:67:e8:5a:c0:37:9d:58: af:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:0C:9A:67:6E:74:52:C2:FE:F7:B3:80:61:9A:4B:FA:64:19:AF:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/99e36647-3bff-3f6e-a4e3-4bbe667504aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 70.104.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:66:96:7d:92:34:c7:c6:c2:f7:d6:0a:98:15:3d:75:7d:ee: b8:1b:9d:a7:1b:c9:7c:43:b0:bf:f8:1a:f2:93:08:48:59:9e: 7f:49:e3:3f:94:8d:71:a1:b4:12:2d:62:1a:b5:99:c4:59:03: f2:e9:5a:f0:60:42:15:4f:30:42:3d:21:21:9d:9b:e7:9e:26: 3f:d4:fa:44:ec:bf:ea:ff:ca:af:c2:e2:e7:29:42:58:ee:76: ec:5a:ba:56:83:48:89:c6:c6:c8:4c:ed:d8:3f:37:a8:75:ba: 46:cf:4b:52:4f:0b:9a:ef:bb:da:44:09:7e:6b:f9:58:1e:96: cd:a5:c1:f3:4b:01:72:c1:1e:8f:09:03:03:6d:c7:7e:dd:1a: 1c:6f:84:e1:da:7a:68:66:26:f6:a3:16:0c:8b:b6:82:46:a7: 9a:e6:89:db:04:7f:11:85:d7:3f:06:7f:1e:15:bc:f8:08:c9: 92:77:bd:26:22:9b:8f:3d:73:95:35:a0:c3:cd:9c:f9:1c:a1: ab:5d:8c:d0:53:98:2f:ef:e2:eb:6c:24:4f:5a:a5:14:6b:f8: 48:bf:37:d6:02:2f:7e:c7:db:9f:dc:f0:dc:22:22:85:56:7d: b8:75:0f:35:4d:bb:fa:26:4f:62:a6:fa:80:64:da:10:68:64: 87:19:85:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQPLeTopCgSE5SoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZTc2NWJhNDktYzA2OS00YjU4LTg4N2UtNmNiMDk4MmEyNDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0e0ynXDgnw7wSwLFihAf34FpFCkMb1TZCsp riI8TI6Fgh6lYzAAcof102UN5tV2mL4MIfnxuanOJW22aNLmVYunLb8577SSGGCv jgiBmglPuHWey4/yKmsQBpsfgJ6d1udmgJfVa6JcfTy+XsaQ3PNpj0AfiHXXocWT WW1n637uws+rhkPJatj1UJv5EX+fTJLw7m7NsdYRWltDYjpyCTN49w4+c8hEcwfy KqBb0UDF6Fn09wNtn28MOsC2muqVEdikbTfgCIK+509l5SozPqTKkVHcVj+u+oFw 0ltQd3bG1Y918xkDEQN5xKV2zdO+YFC9pA+b5WfoWsA3nVivuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOgMmmdudFLC/vezgGGaS/pkGa8aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTllMzY2NDctM2JmZi0z ZjZlLWE0ZTMtNGJiZTY2NzUwNGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRmigMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBmln2SNMfGwvfWCpgVPXV97rgbnacbyXxDsL/4GvKTCEhZnn9J4z+U jXGhtBItYhq1mcRZA/LpWvBgQhVPMEI9ISGdm+eeJj/U+kTsv+r/yq/C4ucpQlju duxaulaDSInGxshM7dg/N6h1ukbPS1JPC5rvu9pECX5r+Vgels2lwfNLAXLBHo8J AwNtx37dGhxvhOHaemhmJvajFgyLtoJGp5rmidsEfxGF1z8Gfx4VvPgIyZJ3vSYi m489c5U1oMPNnPkcoatdjNBTmC/v4utsJE9apRRr+Ei/N9YCL37H25/c8NwiIoVW fbh1DzVNu/omT2Km+oBk2hBoZIcZhSM= -----END CERTIFICATE-----Generated at Sat Aug 9 10:34:56 2025 by rpki-client