$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da8dc6c7-1330-3a2d-a9c3-0e049729c7f8.roa File: da8dc6c7-1330-3a2d-a9c3-0e049729c7f8.roa (raw, json) Hash identifier: QpTXBQnu3xVFDCnPOsvMXH8ZwZUBjbkFdW/pjkX/YeI= Subject key identifier: 8E:EB:94:A5:4D:A2:A7:1C:13:CC:85:3C:B1:46:37:5C:A6:12:D0:B4 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584ACB4108F09E2C1D5108C614C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da8dc6c7-1330-3a2d-a9c3-0e049729c7f8.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 701 IP address blocks: 71.255.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:08:f0:9e:2c:1d:51:08:c6:14:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=d4a8b8f9-143d-4912-be9e-1acc6519c72a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:db:9f:b2:ad:cc:91:95:1d:a0:88:0f:c1:9c: 14:bd:73:8c:8c:3c:ed:cc:90:14:d1:11:c5:38:4a: 0a:8a:b0:68:63:d7:ce:1f:69:70:cc:86:64:90:f9: 19:1b:70:20:19:d0:eb:af:84:ac:ce:32:f3:16:14: 0e:fc:01:2a:37:ee:80:37:76:f6:4f:e2:d1:f6:4b: ab:dd:eb:6b:3e:ae:b5:74:42:03:c5:cb:ac:48:6d: ae:93:61:08:77:27:7b:4f:66:78:f8:0d:82:80:53: 7f:05:87:50:9b:93:ad:d6:ee:f2:a1:38:d1:b0:75: 07:f5:7f:76:07:b5:28:8d:91:ec:a2:aa:b5:7e:39: a2:f2:99:df:01:c6:84:1f:1a:77:20:f3:0d:63:98: c5:e8:41:ce:07:a6:39:4f:54:57:51:f4:14:4b:01: 1b:96:e8:d8:03:d8:66:1f:91:a9:65:92:57:fa:f7: 01:b5:52:8d:86:2e:2f:03:0f:4f:a0:87:47:7e:55: b0:a1:ba:8c:cb:f6:b1:e1:82:da:f8:d5:f6:be:99: 88:da:2d:a6:3b:a8:0a:05:89:55:c5:3c:a6:2f:a4: 76:e0:cd:40:13:67:26:fb:04:3a:cd:11:c0:cb:14: ad:6e:49:9f:b0:0a:48:76:35:b6:01:72:c9:5e:d6: 9b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:EB:94:A5:4D:A2:A7:1C:13:CC:85:3C:B1:46:37:5C:A6:12:D0:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/da8dc6c7-1330-3a2d-a9c3-0e049729c7f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.255.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:88:1d:17:a4:93:db:a1:ec:47:45:67:b6:74:97:b3:ac:6f: ba:e8:92:c7:5f:45:5a:3c:0b:c3:93:33:a6:82:17:90:86:f5: 63:db:7b:b2:8c:e3:74:66:ba:28:53:c3:97:0a:6c:28:c3:fd: 08:e3:47:57:b4:fc:2d:5d:3c:b7:c5:6a:66:f5:f7:1e:83:2f: 85:4c:7b:84:1e:c8:41:9e:13:ad:81:97:d3:78:a6:14:34:1d: 85:e6:aa:1c:83:60:73:7a:b1:9a:74:6b:67:ef:0d:1d:09:cf: 78:b7:3d:f6:7e:04:b9:9e:14:dc:ad:60:4a:f6:13:df:24:83: 40:be:23:15:10:c1:f6:e3:f7:41:b2:41:00:ef:fd:41:ef:a9: bf:92:ec:53:1c:6f:bb:f0:95:85:6b:f6:11:c3:0b:61:0d:ce: 87:0d:4e:b0:c8:58:5c:51:8d:14:da:f8:4f:d1:d5:d0:3c:81: 60:10:c2:02:5e:c0:45:a9:31:63:10:d5:d7:17:ff:5a:dd:90: 46:2f:7a:79:6e:fb:a0:c2:fa:cc:75:44:c8:a5:aa:10:20:18: da:91:d9:b1:07:5d:e9:94:43:e9:9d:52:f2:81:4e:77:e2:3c: 46:69:2c:f5:97:64:f3:5e:78:6d:a2:c1:ed:ca:ad:55:90:9c: 2e:ba:91:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQQjwniwdUQjGFMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZDRhOGI4ZjktMTQzZC00OTEyLWJlOWUtMWFjYzY1MTljNzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNufsq3MkZUdoIgPwZwUvXOMjDztzJAU0RHF OEoKirBoY9fOH2lwzIZkkPkZG3AgGdDrr4SszjLzFhQO/AEqN+6AN3b2T+LR9kur 3etrPq61dEIDxcusSG2uk2EIdyd7T2Z4+A2CgFN/BYdQm5Ot1u7yoTjRsHUH9X92 B7UojZHsoqq1fjmi8pnfAcaEHxp3IPMNY5jF6EHOB6Y5T1RXUfQUSwEblujYA9hm H5GpZZJX+vcBtVKNhi4vAw9PoIdHflWwobqMy/ax4YLa+NX2vpmI2i2mO6gKBYlV xTymL6R24M1AE2cm+wQ6zRHAyxStbkmfsApIdjW2AXLJXtabKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7rlKVNoqccE8yFPLFGN1ymEtC0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGE4ZGM2YzctMTMzMC0z YTJkLWE5YzMtMGUwNDk3MjljN2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER/9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKeIHRekk9uh7EdFZ7Z0l7Osb7roksdfRVo8C8OTM6aCF5CG9WPbe7KM 43RmuihTw5cKbCjD/QjjR1e0/C1dPLfFamb19x6DL4VMe4QeyEGeE62Bl9N4phQ0 HYXmqhyDYHN6sZp0a2fvDR0Jz3i3PfZ+BLmeFNytYEr2E98kg0C+IxUQwfbj90Gy QQDv/UHvqb+S7FMcb7vwlYVr9hHDC2ENzocNTrDIWFxRjRTa+E/R1dA8gWAQwgJe wEWpMWMQ1dcX/1rdkEYvenlu+6DC+sx1RMilqhAgGNqR2bEHXemUQ+mdUvKBTnfi PEZpLPWXZPNeeG2iwe3KrVWQnC66kdc= -----END CERTIFICATE-----Generated at Sat Aug 9 10:32:00 2025 by rpki-client