$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7df58a2-bb5e-3662-83dc-24269066f27d.roa File: c7df58a2-bb5e-3662-83dc-24269066f27d.roa (raw, json) Hash identifier: +T6BX9odcxaY6ioUwaKs2EzJXHjHEeOcRl1CSBLA5Hc= Subject key identifier: B4:25:CB:2E:43:1B:2D:90:81:82:D7:B7:E5:42:6B:E1:F7:96:C4:D1 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584ACB410744E35B12A1EBA81E00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7df58a2-bb5e-3662-83dc-24269066f27d.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 701 IP address blocks: 71.255.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:07:44:e3:5b:12:a1:eb:a8:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=947224d3-5e9d-41e3-8f23-4be46e776915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:14:1f:c4:58:ed:2c:eb:c3:77:4f:0d:6d:fa: 16:93:d1:00:51:2d:3d:f7:c8:11:ea:87:47:cb:f4: 5e:c9:15:28:9a:24:2e:6f:de:c9:36:ec:ed:8d:78: 23:5b:af:3b:97:1e:40:d2:61:c0:15:82:10:45:26: 6c:50:1c:52:00:58:ba:d1:dd:97:9c:7c:58:0a:b2: b1:0b:db:94:48:55:f0:cc:bf:c4:de:4a:08:34:38: 5a:1f:18:42:cc:d0:30:1c:d4:10:5b:3c:65:05:a4: 9e:51:29:a9:90:dd:49:a9:c7:0c:18:77:b7:56:3a: 1e:19:f8:11:2f:db:e9:a3:94:26:71:ae:74:d8:8f: 2f:9d:a1:5a:f7:ae:ea:57:ab:19:79:d3:a1:dc:0a: 0a:b7:03:a1:f7:5b:33:96:b0:be:0c:89:5a:97:1a: 86:58:df:3c:d7:4d:7f:2c:d4:eb:c7:04:81:8d:bf: ff:78:5f:84:ad:de:a5:b2:83:f6:61:85:62:62:62: 12:68:fb:f4:90:86:3d:79:b6:0f:05:fa:ab:34:e7: 75:43:28:4a:f1:5f:07:4c:49:10:16:89:04:cc:5d: 7a:b6:e5:aa:2e:01:d9:2d:c7:6d:7c:97:a3:e8:17: fd:73:e7:c7:61:c4:dc:95:b2:99:e2:ee:04:01:70: 2c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:25:CB:2E:43:1B:2D:90:81:82:D7:B7:E5:42:6B:E1:F7:96:C4:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c7df58a2-bb5e-3662-83dc-24269066f27d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.255.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:85:8a:54:df:0f:08:ba:cd:96:92:e7:71:e2:c1:91:4c:8b: 9b:db:d9:0f:4d:a9:a8:2c:21:20:4e:8f:fa:17:29:03:49:ed: 7f:b6:06:b9:ca:6b:6d:aa:54:fd:61:c8:39:3e:ad:0a:ed:2c: ca:e6:16:0d:77:58:3c:bb:4e:8f:83:dd:61:78:53:e5:58:2f: 89:6c:42:3a:a7:59:f1:0e:8f:e0:b8:82:47:7e:0f:e7:f1:e2: 5c:1d:0b:6a:2b:64:84:a4:8b:ec:dc:cc:b5:85:e3:57:88:69: 07:32:8d:e2:59:e7:9e:85:f6:2b:bc:e4:87:c4:99:ca:61:1a: 0b:b8:4e:08:b8:cc:2b:33:48:07:79:c4:8b:24:0e:e0:1d:af: 77:5a:db:a8:1d:56:b6:c8:b1:79:a1:f7:1d:42:20:94:d4:cf: 2d:a1:27:3d:24:42:74:aa:de:d8:e9:38:c7:d5:82:d4:15:2a: d9:48:90:bc:62:d6:a9:a6:75:1b:4d:30:a6:ac:93:62:77:b6: 2d:d3:a5:cb:e7:d2:7e:f9:51:9c:cb:02:5b:f0:87:a1:ef:06: 2e:04:08:9a:6a:4d:fe:c6:35:4f:73:db:4f:0d:e9:bf:b2:2f: 28:ec:a9:23:0d:dd:47:d9:6f:ea:0a:4a:06:7e:52:5c:13:d9: 2e:db:29:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQQdE41sSoeuoHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk OTQ3MjI0ZDMtNWU5ZC00MWUzLThmMjMtNGJlNDZlNzc2OTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBQfxFjtLOvDd08NbfoWk9EAUS0998gR6odH y/ReyRUomiQub97JNuztjXgjW687lx5A0mHAFYIQRSZsUBxSAFi60d2XnHxYCrKx C9uUSFXwzL/E3koINDhaHxhCzNAwHNQQWzxlBaSeUSmpkN1JqccMGHe3VjoeGfgR L9vpo5Qmca502I8vnaFa967qV6sZedOh3AoKtwOh91szlrC+DIlalxqGWN88101/ LNTrxwSBjb//eF+Erd6lsoP2YYViYmISaPv0kIY9ebYPBfqrNOd1QyhK8V8HTEkQ FokEzF16tuWqLgHZLcdtfJej6Bf9c+fHYcTclbKZ4u4EAXAsbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQlyy5DGy2QgYLXt+VCa+H3lsTRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzdkZjU4YTItYmI1ZS0z NjYyLTgzZGMtMjQyNjkwNjZmMjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER/+gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaFilTfDwi6zZaS53HiwZFMi5vb2Q9NqagsISBOj/oXKQNJ7X+2BrnK a22qVP1hyDk+rQrtLMrmFg13WDy7To+D3WF4U+VYL4lsQjqnWfEOj+C4gkd+D+fx 4lwdC2orZISki+zczLWF41eIaQcyjeJZ556F9iu85IfEmcphGgu4Tgi4zCszSAd5 xIskDuAdr3da26gdVrbIsXmh9x1CIJTUzy2hJz0kQnSq3tjpOMfVgtQVKtlIkLxi 1qmmdRtNMKask2J3ti3Tpcvn0n75UZzLAlvwh6HvBi4ECJpqTf7GNU9z208N6b+y LyjsqSMN3UfZb+oKSgZ+UlwT2S7bKVQ= -----END CERTIFICATE-----Generated at Sat Aug 9 10:34:18 2025 by rpki-client