$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9e19df3-2874-3b59-995c-406d3f301d2e.roa File: d9e19df3-2874-3b59-995c-406d3f301d2e.roa (raw, json) Hash identifier: z/3DrvcmNvzxlW0cvCm9h9WXs6ytR+Qtg6B1Zbl9b10= Subject key identifier: 34:7B:6A:1A:88:05:C0:83:F3:1D:4B:C2:09:2B:E0:23:F8:11:BD:29 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584ACB410A9068A87B82933FF9C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9e19df3-2874-3b59-995c-406d3f301d2e.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 701 IP address blocks: 71.97.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:0a:90:68:a8:7b:82:93:3f:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=b99eabaa-501b-4470-b8d6-039d5f95ad7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4c:67:53:a5:f6:c4:38:3d:64:a5:78:16:26: a8:45:c0:55:45:56:1a:95:a8:c3:11:aa:eb:cc:f7: 31:d0:d3:1f:0f:80:81:ff:87:9e:95:2f:98:ec:74: 99:91:de:4f:43:b4:61:3e:a0:60:cf:5e:6c:ce:2b: 06:0d:5a:b3:e2:30:85:11:ea:93:b2:62:6d:a3:c2: 56:59:2b:d7:33:ed:64:84:b6:17:38:87:08:55:93: 4f:00:40:c8:83:04:a9:90:34:8d:f3:70:43:10:ac: 2b:cc:ae:0c:6f:cf:df:9c:c1:6b:79:12:99:6e:ac: db:71:64:74:c7:a3:17:72:23:ac:eb:9d:70:6a:9c: 63:b5:23:74:17:3d:49:7c:6b:d8:0c:20:a6:35:95: 5e:88:95:e9:36:4d:65:9c:5f:8e:7f:36:7a:5c:db: d6:20:75:8e:f9:b1:b2:77:b4:b7:d3:ec:db:4c:2d: 60:74:a1:52:6a:53:b1:8a:34:c3:64:b7:92:d0:06: 33:73:b5:ad:5f:c3:e3:c1:2d:83:11:10:93:49:96: c8:ff:53:7c:d3:4f:02:b7:72:bd:0a:c0:a8:3c:5d: 9d:66:95:2e:64:92:09:fb:9f:a6:86:07:bb:75:92: 1b:8a:0a:65:4a:f8:41:71:5a:f2:48:63:34:d8:e5: 2c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:7B:6A:1A:88:05:C0:83:F3:1D:4B:C2:09:2B:E0:23:F8:11:BD:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9e19df3-2874-3b59-995c-406d3f301d2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.97.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:2c:86:cc:dc:a0:29:e0:1d:2f:23:44:21:fe:5e:37:34:a4: bf:4a:7a:e6:94:2c:c3:6f:f0:89:e3:3a:af:b6:ac:a4:30:6c: 5d:e8:4b:b3:09:3c:e6:85:88:bc:c0:17:60:f7:56:4c:c2:4a: 74:59:81:ef:d8:6c:4c:21:f6:f9:ac:99:3d:b9:5f:06:bb:c6: 41:18:bd:c7:76:0f:e4:68:b2:d9:b4:92:0b:db:a5:40:d6:f2: c3:d5:40:00:ef:7e:a5:49:75:0e:a4:7b:78:63:3c:32:0f:c3: 5a:5d:11:35:9e:27:db:5f:9a:d8:c3:97:83:f7:10:91:f9:75: 65:78:8f:3e:83:63:81:0a:d4:00:87:7a:84:f1:b9:6c:6d:8b: 03:b3:b5:ce:0a:80:ab:1b:02:c2:e1:29:f1:70:7d:b0:88:47: 1b:76:3a:34:ac:3c:79:67:c8:a9:22:7e:8e:9c:41:ac:66:2f: e7:0b:80:54:9c:59:f6:7b:70:9a:40:92:62:41:ec:67:a8:fe: 5a:fa:d8:f1:0a:a0:12:f0:71:b1:2c:f0:a7:98:79:0e:49:e0: bc:f0:64:14:be:97:7a:7c:89:82:1f:5a:a0:47:5d:45:bb:52: 85:8b:4c:83:85:23:45:60:8e:7f:05:04:4c:31:34:13:78:65: 06:b1:3f:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQQqQaKh7gpM/+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk Yjk5ZWFiYWEtNTAxYi00NDcwLWI4ZDYtMDM5ZDVmOTVhZDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkxnU6X2xDg9ZKV4FiaoRcBVRVYalajDEarr zPcx0NMfD4CB/4eelS+Y7HSZkd5PQ7RhPqBgz15szisGDVqz4jCFEeqTsmJto8JW WSvXM+1khLYXOIcIVZNPAEDIgwSpkDSN83BDEKwrzK4Mb8/fnMFreRKZbqzbcWR0 x6MXciOs651wapxjtSN0Fz1JfGvYDCCmNZVeiJXpNk1lnF+OfzZ6XNvWIHWO+bGy d7S30+zbTC1gdKFSalOxijTDZLeS0AYzc7WtX8PjwS2DERCTSZbI/1N8008Ct3K9 CsCoPF2dZpUuZJIJ+5+mhge7dZIbigplSvhBcVrySGM02OUsWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDR7ahqIBcCD8x1Lwgkr4CP4Eb0pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDllMTlkZjMtMjg3NC0z YjU5LTk5NWMtNDA2ZDNmMzAxZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGR2GAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0shszcoCngHS8jRCH+Xjc0pL9KeuaULMNv8InjOq+2rKQwbF3oS7MJ POaFiLzAF2D3VkzCSnRZge/YbEwh9vmsmT25Xwa7xkEYvcd2D+Rostm0kgvbpUDW 8sPVQADvfqVJdQ6ke3hjPDIPw1pdETWeJ9tfmtjDl4P3EJH5dWV4jz6DY4EK1ACH eoTxuWxtiwOztc4KgKsbAsLhKfFwfbCIRxt2OjSsPHlnyKkifo6cQaxmL+cLgFSc WfZ7cJpAkmJB7Geo/lr62PEKoBLwcbEs8KeYeQ5J4LzwZBS+l3p8iYIfWqBHXUW7 UoWLTIOFI0Vgjn8FBEwxNBN4ZQaxP+M= -----END CERTIFICATE-----Generated at Sat Aug 9 22:37:01 2025 by rpki-client