$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca2ae95c-a77d-3294-952a-0a3a1023d37f.roa File: ca2ae95c-a77d-3294-952a-0a3a1023d37f.roa (raw, json) Hash identifier: MPULz7RxAAtcB7zyTTjq4wz0drZgkDDWJClVrOqsNvI= Subject key identifier: 4F:05:95:F3:8C:7A:CB:DA:AB:A7:B4:09:98:95:9E:96:F2:BB:C5:7F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584ACB40F6C56A3211E0BDA2C800 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca2ae95c-a77d-3294-952a-0a3a1023d37f.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 701 IP address blocks: 72.70.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:f6:c5:6a:32:11:e0:bd:a2:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=3babc023-0f19-4f5e-8b7d-6c55fcc1fb95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f7:74:41:7d:1d:de:0e:33:bc:bb:28:3c:2a: 5a:49:70:b1:cc:2f:39:7b:57:65:4c:34:ef:17:70: 44:93:6d:a3:73:0e:4d:bb:f7:3a:0e:f0:96:71:61: b6:f1:3b:e8:7f:88:8c:ac:c2:c2:38:cb:d1:f7:cb: 1b:31:2c:70:f3:14:51:da:fd:c8:5b:c8:a8:dd:1b: ad:ae:fb:ca:8b:42:fe:7c:9e:81:1b:1f:e3:a7:d9: 0a:96:83:0a:bb:c9:22:ed:29:b2:7c:1a:ea:ad:6c: 13:65:59:9a:64:83:6a:6d:b2:2a:8a:9e:49:a2:5e: 74:f4:57:85:44:98:d9:84:9a:65:23:fd:08:94:3c: 08:1a:1d:15:b9:fe:75:8c:10:47:e4:79:8e:64:bd: 06:3e:03:1a:02:e3:79:cd:e0:72:3c:3f:2a:bb:ee: 69:9b:a3:9c:f8:22:3d:f7:f5:3d:8e:74:ee:8c:a7: bf:13:d1:a6:ac:2e:31:90:59:25:6f:38:47:2e:55: 2e:3f:b1:24:c3:25:b8:e8:8f:8b:2e:da:1e:cf:6d: 60:e8:aa:bc:c9:28:1b:4a:35:7d:0d:9b:c1:ec:9a: 93:68:e0:59:69:3f:2c:b5:f6:8e:c7:5f:9d:51:59: f7:7f:41:02:bd:32:27:3b:c5:5f:d1:03:3c:b1:96: 02:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:05:95:F3:8C:7A:CB:DA:AB:A7:B4:09:98:95:9E:96:F2:BB:C5:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca2ae95c-a77d-3294-952a-0a3a1023d37f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.70.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:93:7f:5f:2e:bf:fa:2b:af:c3:8b:55:7a:a3:4b:60:e5:42: 34:aa:64:ef:39:4f:81:3d:9e:0b:e6:67:53:c4:c9:65:c5:3f: eb:b8:a3:b1:d2:89:93:f4:d9:ba:29:23:bc:fb:21:fd:2c:18: 48:d1:85:49:ec:b7:6d:06:5b:03:16:6d:cd:6e:61:0a:0c:1e: 18:c8:47:f2:61:a4:49:9e:65:dd:81:8c:30:dd:01:48:01:c0: 4d:bc:ea:32:f1:0d:e0:97:8d:40:1b:7e:66:f3:1c:7b:1a:38: 17:cc:30:0e:af:08:bf:fc:b4:7f:0c:c9:14:e1:d4:3e:f3:7c: 19:fc:b5:49:56:65:ef:fc:68:f5:91:e6:08:54:ec:ca:7c:7f: 9c:74:58:33:6a:27:74:93:b5:96:e2:1f:a9:87:fd:24:c7:1d: 61:e2:0a:bc:9f:0e:ad:00:0d:de:e8:e2:76:ea:9d:d8:da:82: d6:34:0b:32:92:ce:f3:46:8b:a3:36:2a:63:1c:9e:e8:72:b3: c3:b5:dd:4e:02:2e:11:82:be:39:bd:d2:fa:46:d7:a9:ed:97: b5:07:65:e5:55:a1:2e:98:d4:fe:fe:c4:b5:df:50:94:1a:fb: 2b:9b:fe:ca:ac:e0:74:50:7b:a2:5d:97:81:d2:c2:74:f2:e2: 80:d6:d6:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQPbFajIR4L2iyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk M2JhYmMwMjMtMGYxOS00ZjVlLThiN2QtNmM1NWZjYzFmYjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/d0QX0d3g4zvLsoPCpaSXCxzC85e1dlTDTv F3BEk22jcw5Nu/c6DvCWcWG28Tvof4iMrMLCOMvR98sbMSxw8xRR2v3IW8io3Rut rvvKi0L+fJ6BGx/jp9kKloMKu8ki7SmyfBrqrWwTZVmaZINqbbIqip5Jol509FeF RJjZhJplI/0IlDwIGh0Vuf51jBBH5HmOZL0GPgMaAuN5zeByPD8qu+5pm6Oc+CI9 9/U9jnTujKe/E9GmrC4xkFklbzhHLlUuP7EkwyW46I+LLtoez21g6Kq8ySgbSjV9 DZvB7JqTaOBZaT8stfaOx1+dUVn3f0ECvTInO8Vf0QM8sZYCuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8FlfOMesvaq6e0CZiVnpbyu8V/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2EyYWU5NWMtYTc3ZC0z Mjk0LTk1MmEtMGEzYTEwMjNkMzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSEYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJyTf18uv/orr8OLVXqjS2DlQjSqZO85T4E9ngvmZ1PEyWXFP+u4o7HS iZP02bopI7z7If0sGEjRhUnst20GWwMWbc1uYQoMHhjIR/JhpEmeZd2BjDDdAUgB wE286jLxDeCXjUAbfmbzHHsaOBfMMA6vCL/8tH8MyRTh1D7zfBn8tUlWZe/8aPWR 5ghU7Mp8f5x0WDNqJ3STtZbiH6mH/STHHWHiCryfDq0ADd7o4nbqndjagtY0CzKS zvNGi6M2KmMcnuhys8O13U4CLhGCvjm90vpG16ntl7UHZeVVoS6Y1P7+xLXfUJQa +yub/sqs4HRQe6Jdl4HSwnTy4oDW1m8= -----END CERTIFICATE-----Generated at Sat Aug 9 10:32:00 2025 by rpki-client