$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c68e1926-8427-3e93-a573-e4c9f6684131.roa File: c68e1926-8427-3e93-a573-e4c9f6684131.roa (raw, json) Hash identifier: kyhtStw1WbVi2mY1hCl+ugedjI9UvB3v8k5aQsBKNUk= Subject key identifier: ED:F9:6B:FC:60:04:0B:13:AD:11:71:3C:01:AC:2A:18:FF:05:13:5A Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584ACB40F67159C64E254ADD6B80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c68e1926-8427-3e93-a573-e4c9f6684131.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 701 IP address blocks: 71.253.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:f6:71:59:c6:4e:25:4a:dd:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=d6463511-5101-48ca-87b0-dbf1b300c8d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:69:b6:70:68:82:25:5d:30:0b:9c:6b:8d:77: 41:3b:c3:6d:ab:11:40:cb:d9:0a:84:e6:64:89:f6: 90:98:58:0c:4b:0a:45:82:0f:eb:79:21:e3:fb:43: 29:36:3d:0e:01:37:5f:cf:fd:25:16:6f:56:25:84: b2:e3:3f:7b:bf:8c:af:5c:dc:49:7c:23:b5:e8:1a: ca:3a:02:6f:74:05:e3:66:ce:ed:3d:59:f6:d6:aa: ec:41:d2:7d:14:76:16:40:b4:3b:f4:d0:59:4c:58: 8e:be:ab:81:7c:49:e4:46:14:0f:0a:e1:62:fe:39: cc:65:3d:c3:25:6e:93:de:22:8c:79:ca:9f:23:64: e0:8b:e7:63:90:96:f1:42:2c:d2:cc:94:16:b9:88: 75:88:10:dc:c1:07:68:2b:cb:df:69:42:16:42:c6: f8:02:30:78:a0:b2:eb:21:ae:ae:f6:b5:4a:41:bc: 0f:a9:f0:82:8e:dc:f3:a4:06:f1:23:72:b0:68:76: 9a:a2:ed:d5:e6:8d:99:27:3c:cd:2b:7f:cd:f3:44: 3b:41:66:ff:d6:ce:05:7c:79:93:d0:e5:b2:53:40: 2b:86:ae:e5:76:dd:ee:f5:1f:13:0f:d6:34:b2:05: d8:4b:ff:b8:fc:25:31:4b:8d:79:b9:88:fd:ac:04: 16:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F9:6B:FC:60:04:0B:13:AD:11:71:3C:01:AC:2A:18:FF:05:13:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c68e1926-8427-3e93-a573-e4c9f6684131.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.253.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:3c:9e:3b:12:2d:71:8d:51:07:89:35:e6:1a:18:99:16:a6: 51:c2:98:18:d4:6c:0f:bc:8b:b7:b1:73:8f:2c:fa:f1:8c:b5: ed:5f:5f:83:f5:b0:3c:78:a0:09:9a:40:2a:9d:39:59:01:48: fb:b4:5e:a9:c8:f3:88:ca:18:7d:3b:73:af:d2:1c:13:69:8f: c1:ad:af:1a:a3:c1:c6:db:9a:35:16:1d:98:8e:42:83:34:95: 86:fb:d6:2f:f0:bb:be:0f:ac:91:70:44:91:2c:22:a6:d4:52: 74:f1:c0:24:9d:6b:bd:bd:9c:fd:ee:b9:cb:45:27:be:39:5c: 67:cc:68:a6:61:89:4d:f3:6e:23:16:cc:11:59:03:52:db:a3: 09:93:33:69:7e:fb:a7:04:15:0a:cb:f4:88:80:1f:56:6b:cf: 2c:d4:08:ce:de:c9:51:e7:c6:ec:ca:71:c9:a6:3b:7e:05:f9: 55:4d:79:eb:1f:81:a0:22:90:f3:35:48:81:c6:ec:da:df:e6: f6:30:1b:c8:f5:58:08:d3:3d:3a:c8:70:24:3e:6d:58:f1:45: e1:04:1f:e1:f1:fe:6d:ab:1c:4f:60:31:74:5c:0b:c9:ea:76: 1b:32:53:d7:f7:5f:6f:ae:6f:34:65:94:00:d0:a4:7d:c9:98: 16:63:62:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQPZxWcZOJUrda4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZDY0NjM1MTEtNTEwMS00OGNhLTg3YjAtZGJmMWIzMDBjOGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmm2cGiCJV0wC5xrjXdBO8NtqxFAy9kKhOZk ifaQmFgMSwpFgg/reSHj+0MpNj0OATdfz/0lFm9WJYSy4z97v4yvXNxJfCO16BrK OgJvdAXjZs7tPVn21qrsQdJ9FHYWQLQ79NBZTFiOvquBfEnkRhQPCuFi/jnMZT3D JW6T3iKMecqfI2Tgi+djkJbxQizSzJQWuYh1iBDcwQdoK8vfaUIWQsb4AjB4oLLr Ia6u9rVKQbwPqfCCjtzzpAbxI3KwaHaaou3V5o2ZJzzNK3/N80Q7QWb/1s4FfHmT 0OWyU0Arhq7ldt3u9R8TD9Y0sgXYS/+4/CUxS415uYj9rAQWTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO35a/xgBAsTrRFxPAGsKhj/BRNaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzY4ZTE5MjYtODQyNy0z ZTkzLWE1NzMtZTRjOWY2Njg0MTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHR/0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG08njsSLXGNUQeJNeYaGJkWplHCmBjUbA+8i7exc48s+vGMte1fX4P1 sDx4oAmaQCqdOVkBSPu0XqnI84jKGH07c6/SHBNpj8GtrxqjwcbbmjUWHZiOQoM0 lYb71i/wu74PrJFwRJEsIqbUUnTxwCSda729nP3uuctFJ745XGfMaKZhiU3zbiMW zBFZA1LbowmTM2l++6cEFQrL9IiAH1ZrzyzUCM7eyVHnxuzKccmmO34F+VVNeesf gaAikPM1SIHG7Nrf5vYwG8j1WAjTPTrIcCQ+bVjxReEEH+Hx/m2rHE9gMXRcC8nq dhsyU9f3X2+ubzRllADQpH3JmBZjYoQ= -----END CERTIFICATE-----Generated at Sat Aug 9 10:35:11 2025 by rpki-client