$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c162e3cc-ebac-30eb-a479-04090b221e04.roa File: c162e3cc-ebac-30eb-a479-04090b221e04.roa (raw, json) Hash identifier: mQmL3JgMyGcONttl4bIfGNNcv9WWzWGb9CyzLbbGoO4= Subject key identifier: 8A:3A:FD:32:BC:3D:AA:63:EC:72:E4:EE:61:F1:78:90:98:5F:26:D2 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584ACB40F268AD809A14D8073600 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c162e3cc-ebac-30eb-a479-04090b221e04.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 701 IP address blocks: 71.188.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:f2:68:ad:80:9a:14:d8:07:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=16bcf07a-00fa-4781-94b6-98c888dabd9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ee:d1:b9:8d:40:16:35:16:01:e4:93:af:8a: 91:c0:50:51:89:a8:12:c2:5d:89:79:a0:22:27:6d: 89:2d:c2:2a:dc:a4:03:38:39:e3:09:bf:3d:62:c2: 23:9e:aa:49:80:7f:a1:65:f9:db:b9:57:41:55:12: 58:6c:58:66:1f:0d:c5:1c:1c:8d:8c:ac:a7:d8:ad: 51:bb:c5:36:5c:e3:52:e0:16:fc:9b:2c:1b:34:2f: 9f:2e:9d:38:d1:a1:6f:b3:42:c2:b2:31:e3:88:4a: bf:64:e5:e3:5f:b7:8f:86:38:ba:d4:e6:40:f5:b8: 25:89:62:59:6b:7e:67:ef:d8:ee:45:cf:fe:d6:6e: aa:c4:e5:80:41:7b:cd:33:e1:19:98:56:20:42:3c: 3e:f8:4f:0b:36:23:b7:b1:93:f7:f6:2f:6c:66:ba: ae:49:3e:1f:3b:89:8a:dc:c6:e3:7c:e1:01:98:28: de:44:76:a7:10:4b:d6:44:35:22:83:fa:88:7f:6f: 18:17:dc:27:79:ed:a0:a1:90:0f:79:bb:86:c0:76: 09:b2:d5:9e:b6:21:4a:38:b9:24:45:a9:8c:9a:14: 21:d3:e8:5b:85:0e:63:a0:7e:db:42:69:3d:a0:16: a9:54:bc:17:b9:d5:92:4d:63:a7:c1:60:ca:c3:48: 9e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3A:FD:32:BC:3D:AA:63:EC:72:E4:EE:61:F1:78:90:98:5F:26:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c162e3cc-ebac-30eb-a479-04090b221e04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.188.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:9f:8a:68:6f:e7:cf:99:04:64:f3:c4:7e:e9:60:53:1e:b1: a9:de:ee:c8:67:89:59:1e:6c:c6:e3:cc:b9:7f:b3:a8:57:b0: fb:22:d4:f9:89:43:08:18:e2:f0:14:d1:10:6f:e8:a2:e7:e7: fd:1b:23:7f:17:e4:06:50:13:a6:57:39:64:6e:e8:72:11:76: 11:45:8d:f2:43:b2:1e:4b:8b:14:9d:d7:1e:ca:36:45:bd:47: ef:af:16:cf:a9:32:6e:d1:8a:82:c5:57:52:4d:ae:3f:26:d2: d3:b9:37:4c:63:f3:65:54:3e:cb:93:5d:b0:17:0f:dc:28:19: 05:aa:8f:df:37:25:d5:4c:39:45:15:d7:b6:2d:4e:8e:d6:d2: ac:63:e8:e2:e2:6a:6a:36:c6:74:51:63:2a:15:dc:c5:18:42: 0c:5c:9c:c9:e7:fe:1f:af:19:f6:4d:90:1e:bd:9f:8a:3c:ef: ba:30:31:da:03:4b:bc:01:b3:fc:d7:42:7e:a6:a5:fe:63:65: 02:d0:86:ae:fd:04:22:61:d4:87:12:de:01:d1:9c:69:8f:63: 20:3d:d4:49:f5:e6:43:0d:77:48:81:cb:db:ef:5d:1a:95:43: 96:4c:47:a4:4a:e1:a0:df:7d:72:59:12:0d:48:33:9f:60:d5: de:7b:03:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQPJorYCaFNgHNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk MTZiY2YwN2EtMDBmYS00NzgxLTk0YjYtOThjODg4ZGFiZDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2u7RuY1AFjUWAeSTr4qRwFBRiagSwl2JeaAi J22JLcIq3KQDODnjCb89YsIjnqpJgH+hZfnbuVdBVRJYbFhmHw3FHByNjKyn2K1R u8U2XONS4Bb8mywbNC+fLp040aFvs0LCsjHjiEq/ZOXjX7ePhji61OZA9bgliWJZ a35n79juRc/+1m6qxOWAQXvNM+EZmFYgQjw++E8LNiO3sZP39i9sZrquST4fO4mK 3MbjfOEBmCjeRHanEEvWRDUig/qIf28YF9wnee2goZAPebuGwHYJstWetiFKOLkk RamMmhQh0+hbhQ5joH7bQmk9oBapVLwXudWSTWOnwWDKw0iejwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIo6/TK8Papj7HLk7mHxeJCYXybSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzE2MmUzY2MtZWJhYy0z MGViLWE0NzktMDQwOTBiMjIxZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER7zgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKefimhv58+ZBGTzxH7pYFMesane7shniVkebMbjzLl/s6hXsPsi1PmJ QwgY4vAU0RBv6KLn5/0bI38X5AZQE6ZXOWRu6HIRdhFFjfJDsh5LixSd1x7KNkW9 R++vFs+pMm7RioLFV1JNrj8m0tO5N0xj82VUPsuTXbAXD9woGQWqj983JdVMOUUV 17YtTo7W0qxj6OLiamo2xnRRYyoV3MUYQgxcnMnn/h+vGfZNkB69n4o877owMdoD S7wBs/zXQn6mpf5jZQLQhq79BCJh1IcS3gHRnGmPYyA91En15kMNd0iBy9vvXRqV Q5ZMR6RK4aDffXJZEg1IM59g1d57A30= -----END CERTIFICATE-----Generated at Sat Aug 9 10:35:46 2025 by rpki-client