$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d881d009-cbf8-3a7d-aacb-3abbc815e32e.roa File: d881d009-cbf8-3a7d-aacb-3abbc815e32e.roa (raw, json) Hash identifier: mYPmSp7iZeC/HjfR9x8j5+DNp2fx1aTt78qiFoN4MLY= Subject key identifier: 06:9A:BD:A1:9A:36:2F:FD:42:10:6C:FC:0B:52:6F:04:86:20:37:19 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584ACB4108BC903A6796FD1EFF40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d881d009-cbf8-3a7d-aacb-3abbc815e32e.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 701 IP address blocks: 71.255.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:08:bc:90:3a:67:96:fd:1e:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=a9233204-468b-4c90-80d9-7345dfeadcad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:10:c1:c1:64:ca:72:83:21:c7:cb:b3:bd:8a: 79:88:e0:af:10:ea:52:1e:22:23:49:02:fb:c4:88: 7a:ce:c0:11:bd:d9:53:1a:ff:03:1a:32:66:2f:c7: 7e:72:f9:9b:32:0e:9a:ae:0e:6c:a2:73:cf:7f:83: 9b:d3:d4:27:ed:e8:51:cc:1e:bb:29:16:1f:1b:1e: 8b:01:33:5b:41:35:44:4c:dd:ac:57:0e:3d:bd:2a: 2e:bc:1d:c2:c3:2a:42:4b:cf:fb:63:ba:bc:0a:2c: b2:85:24:97:29:5d:19:18:71:52:31:65:cc:63:35: 99:c4:45:39:de:84:1d:c0:91:8f:76:29:3a:a5:f5: 0e:05:13:22:c7:43:31:51:41:f9:d2:04:9e:0e:64: 3e:9d:1a:88:c9:01:f6:22:36:8b:1c:43:da:5d:c7: 74:4e:87:7e:ca:01:a6:ac:cd:d5:59:eb:31:4c:96: 54:08:35:03:04:7e:8f:bb:59:0a:ba:f7:18:43:69: fd:3a:d0:b7:06:be:38:fd:f7:51:df:04:0d:a6:ff: 3f:8f:d5:79:bb:f7:a0:5f:29:c6:c5:b4:54:2d:a5: fd:1e:e0:db:ca:89:2f:d7:2b:c2:f5:63:0e:cf:28: 8e:e1:09:65:f4:dc:58:9e:f0:bb:a9:70:d8:b5:ac: 49:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:9A:BD:A1:9A:36:2F:FD:42:10:6C:FC:0B:52:6F:04:86:20:37:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d881d009-cbf8-3a7d-aacb-3abbc815e32e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.255.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:bf:0f:46:28:b7:80:b4:59:7f:48:55:3f:0a:8b:9d:d6:5e: 56:36:d9:b3:88:97:f3:e2:5b:4a:48:99:f8:49:56:39:ae:1a: 9a:1e:bf:08:b1:b4:3f:98:c1:5b:aa:75:1a:0d:c6:8d:c0:39: b0:b1:02:d9:f2:68:5b:01:a8:63:09:90:9a:91:17:7f:1e:5f: 2d:58:b4:01:49:bf:37:9c:a4:5a:79:f8:b8:11:c2:ec:cd:ac: 68:75:09:f9:04:7f:47:0d:24:85:36:13:5e:d8:10:9e:d5:85: bb:58:20:35:64:63:13:89:01:13:bf:36:45:fb:ba:63:ac:2f: 81:c8:bd:b1:2e:8b:49:df:c5:16:54:a0:47:65:53:b0:c0:11: 0d:ec:99:4b:64:e0:23:d1:f7:c5:29:90:a0:68:90:9a:39:27: ae:49:24:a2:91:b7:16:4e:f9:d1:15:35:0f:97:eb:b4:12:d2: cb:03:40:f4:ee:74:40:37:ab:d6:78:4d:cd:0a:cc:1b:fd:f1: ba:bb:bb:c7:7d:f0:0b:1f:af:23:70:7c:21:d4:bc:e8:e0:3c: 4a:94:e0:8e:51:47:5c:5e:18:90:d9:03:d6:bd:73:9e:ee:e2: f9:fd:2c:58:9c:ab:22:5b:24:c9:72:9f:66:61:64:bc:48:32: ed:dd:ce:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQQi8kDpnlv0e/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk YTkyMzMyMDQtNDY4Yi00YzkwLTgwZDktNzM0NWRmZWFkY2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRDBwWTKcoMhx8uzvYp5iOCvEOpSHiIjSQL7 xIh6zsARvdlTGv8DGjJmL8d+cvmbMg6arg5sonPPf4Ob09Qn7ehRzB67KRYfGx6L ATNbQTVETN2sVw49vSouvB3CwypCS8/7Y7q8CiyyhSSXKV0ZGHFSMWXMYzWZxEU5 3oQdwJGPdik6pfUOBRMix0MxUUH50gSeDmQ+nRqIyQH2IjaLHEPaXcd0Tod+ygGm rM3VWesxTJZUCDUDBH6Pu1kKuvcYQ2n9OtC3Br44/fdR3wQNpv8/j9V5u/egXynG xbRULaX9HuDbyokv1yvC9WMOzyiO4Qll9NxYnvC7qXDYtaxJ1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAaavaGaNi/9QhBs/AtSbwSGIDcZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDg4MWQwMDktY2JmOC0z YTdkLWFhY2ItM2FiYmM4MTVlMzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER/8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALK/D0Yot4C0WX9IVT8Ki53WXlY22bOIl/PiW0pImfhJVjmuGpoevwix tD+YwVuqdRoNxo3AObCxAtnyaFsBqGMJkJqRF38eXy1YtAFJvzecpFp5+LgRwuzN rGh1CfkEf0cNJIU2E17YEJ7VhbtYIDVkYxOJARO/NkX7umOsL4HIvbEui0nfxRZU oEdlU7DAEQ3smUtk4CPR98UpkKBokJo5J65JJKKRtxZO+dEVNQ+X67QS0ssDQPTu dEA3q9Z4Tc0KzBv98bq7u8d98AsfryNwfCHUvOjgPEqU4I5RR1xeGJDZA9a9c57u 4vn9LFicqyJbJMlyn2ZhZLxIMu3dzjM= -----END CERTIFICATE-----Generated at Sat Aug 9 10:31:37 2025 by rpki-client