$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c68e1926-8427-3e93-a573-e4c9f6684131.roa File: c68e1926-8427-3e93-a573-e4c9f6684131.roa (raw, json) Hash identifier: S2smWgtggdv91ugfL9KjNtDMAGW5KwiVQsVR0pOnZF4= Subject key identifier: DB:0D:CA:8D:74:96:F4:5B:62:0D:D5:0F:B9:A5:1B:94:A4:2E:D1:81 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BABFD13EAA5C2E349995DD540 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c68e1926-8427-3e93-a573-e4c9f6684131.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 701 IP address blocks: 71.253.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:13:ea:a5:c2:e3:49:99:5d:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=564eecd1-188e-4f67-bfdc-cf44e0c6acd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e8:80:6e:a9:ef:05:3f:e7:67:57:fa:6b:51: 92:9e:54:98:fa:8a:82:dd:23:38:55:8c:d8:66:f1: 72:0d:c4:f9:41:49:85:b0:54:9b:3d:07:d9:e9:89: b5:66:da:a0:a4:70:8d:d9:45:55:14:d7:76:d9:14: ce:4c:44:34:3c:cf:b1:1c:22:53:4e:ab:87:e0:a6: ae:8a:27:cf:f5:99:ab:68:59:ad:5e:87:11:0f:f8: af:96:01:d3:dc:09:89:5b:5e:58:c7:7f:d8:03:63: 2e:15:f3:2a:d5:e7:58:1e:80:47:b7:f2:29:a4:15: 18:19:88:ef:be:2f:0e:db:33:31:e3:0d:42:cd:f4: 11:59:22:fe:12:a8:ab:90:87:0f:48:44:ac:4f:a0: 07:2c:8f:6c:80:5d:56:96:2b:97:9d:e6:92:02:0a: 69:e1:14:6b:58:1f:65:7c:e4:63:5a:11:81:93:3b: 66:e2:03:ae:41:e2:3b:b1:3e:b1:a3:26:44:24:ab: 6b:3f:f2:95:be:d4:e0:b2:ae:38:4a:4b:f1:a5:f1: 12:83:e7:82:0d:b5:42:36:e0:c3:bc:e9:4d:dd:68: 9c:ba:8b:84:eb:79:51:f5:7f:dc:85:78:e1:bd:ac: 5a:47:27:27:3a:54:13:33:a1:62:34:25:0c:0f:2d: c8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:0D:CA:8D:74:96:F4:5B:62:0D:D5:0F:B9:A5:1B:94:A4:2E:D1:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c68e1926-8427-3e93-a573-e4c9f6684131.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.253.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:3c:0f:98:5c:9a:66:62:73:b9:4e:75:ee:ef:f1:bf:2d:6b: dd:de:e7:6a:88:2d:86:7c:af:0d:32:8b:98:46:87:fb:b5:88: f9:4b:e5:89:51:95:ba:b9:4a:dd:fc:ef:07:ae:87:70:8a:b6: c3:0f:7c:e8:62:63:a6:5c:b2:15:73:8c:32:9f:43:cd:cb:e5: ff:24:93:72:19:ac:52:96:4c:12:53:c0:47:bd:41:83:69:90: 0f:52:3f:07:7f:35:ed:bb:65:a4:ea:3f:27:f6:98:90:e2:1f: 17:22:bd:06:c8:16:86:95:69:7a:4a:35:eb:06:5f:22:96:e5: f9:5a:2e:aa:0a:2e:c0:28:b1:93:76:fa:fa:3d:66:d7:15:2f: 56:76:ea:79:43:23:3a:1e:16:75:75:a4:c2:8a:1b:a2:3a:25: 99:b2:5d:f5:03:14:18:9b:6e:3f:e0:15:54:22:e3:0a:9a:07: b3:09:a7:c2:4a:17:0e:a6:ee:aa:ac:4c:7e:f0:17:31:62:8f: 92:83:cf:3d:43:9c:54:c9:d7:83:3a:a9:5d:3c:e7:3a:44:26: 63:8e:47:5a:cf:9a:53:89:64:ba:49:11:d7:df:a5:7b:ca:ea: 93:82:91:03:30:a8:b0:72:a6:a5:2d:2f:fc:cf:e9:99:51:77: 98:18:df:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/RPqpcLjSZld1UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk NTY0ZWVjZDEtMTg4ZS00ZjY3LWJmZGMtY2Y0NGUwYzZhY2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteiAbqnvBT/nZ1f6a1GSnlSY+oqC3SM4VYzY ZvFyDcT5QUmFsFSbPQfZ6Ym1ZtqgpHCN2UVVFNd22RTOTEQ0PM+xHCJTTquH4Kau iifP9ZmraFmtXocRD/ivlgHT3AmJW15Yx3/YA2MuFfMq1edYHoBHt/IppBUYGYjv vi8O2zMx4w1CzfQRWSL+EqirkIcPSESsT6AHLI9sgF1WliuXneaSAgpp4RRrWB9l fORjWhGBkztm4gOuQeI7sT6xoyZEJKtrP/KVvtTgsq44SkvxpfESg+eCDbVCNuDD vOlN3WicuouE63lR9X/chXjhvaxaRycnOlQTM6FiNCUMDy3IuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsNyo10lvRbYg3VD7mlG5SkLtGBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzY4ZTE5MjYtODQyNy0z ZTkzLWE1NzMtZTRjOWY2Njg0MTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHR/0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFs8D5hcmmZic7lOde7v8b8ta93e52qILYZ8rw0yi5hGh/u1iPlL5YlR lbq5St387weuh3CKtsMPfOhiY6ZcshVzjDKfQ83L5f8kk3IZrFKWTBJTwEe9QYNp kA9SPwd/Ne27ZaTqPyf2mJDiHxcivQbIFoaVaXpKNesGXyKW5flaLqoKLsAosZN2 +vo9ZtcVL1Z26nlDIzoeFnV1pMKKG6I6JZmyXfUDFBibbj/gFVQi4wqaB7MJp8JK Fw6m7qqsTH7wFzFij5KDzz1DnFTJ14M6qV085zpEJmOOR1rPmlOJZLpJEdffpXvK 6pOCkQMwqLBypqUtL/zP6ZlRd5gY39k= -----END CERTIFICATE-----Generated at Wed Nov 5 13:05:21 2025 by rpki-client