$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08c33d31-01e9-3f84-ae5b-c22d6322f47b.roa File: 08c33d31-01e9-3f84-ae5b-c22d6322f47b.roa (raw, json) Hash identifier: +/RlVtz9Pi+inoIJhlc/VZIx+Yd6pMg0votuShUfeok= Subject key identifier: E3:3E:22:77:9A:A6:3E:B7:79:A6:CF:DE:FB:3B:68:52:87:17:59:00 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD23C0CD8D231D740A7573280 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08c33d31-01e9-3f84-ae5b-c22d6322f47b.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 701 IP address blocks: 71.167.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:0c:d8:d2:31:d7:40:a7:57:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=8a2e610d-5ee8-4e12-b4eb-49e52df36a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8e:54:fc:a3:02:2f:cd:cf:a7:00:98:91:8c: 5a:8e:1e:ed:56:dc:09:04:ce:9d:95:43:8a:df:1d: 97:17:9e:ff:31:a5:5f:93:d8:4f:5e:0b:29:9d:92: 18:97:96:e2:ae:dd:d8:9e:9b:6b:73:0d:74:fb:fe: 32:0c:26:9c:a1:4b:c3:5d:88:d4:54:d0:8f:4a:36: ce:ce:3b:26:d2:2a:ed:44:60:2f:db:26:b4:64:bb: 36:da:ec:c0:87:98:ea:33:83:c4:b7:c2:42:55:f0: b7:a9:13:98:f2:d0:9e:28:78:19:7e:2b:9d:de:a6: 64:5d:07:0b:81:72:28:aa:f4:16:a9:bd:44:a9:b0: ef:50:63:e5:42:fd:ad:4d:90:06:10:2e:d4:f3:41: be:19:08:88:a8:f1:ed:ea:db:0c:b7:f7:45:c5:01: f0:0d:90:76:5e:7d:fa:a7:4a:9f:7c:96:4e:9d:df: 94:2d:2f:40:36:3d:bf:7a:79:3d:ff:3d:21:f2:3f: 48:84:ca:78:ed:57:81:aa:cf:79:9d:b1:c6:2d:55: a2:25:40:09:0d:6f:71:0a:79:d3:1f:3f:62:fb:71: 3f:23:f0:34:09:8c:8e:ef:59:b7:56:06:f4:7f:84: 8d:a5:ef:1d:58:22:6a:e9:5a:79:6e:c6:ed:9c:3b: 07:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:3E:22:77:9A:A6:3E:B7:79:A6:CF:DE:FB:3B:68:52:87:17:59:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08c33d31-01e9-3f84-ae5b-c22d6322f47b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.167.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:12:a8:4f:ac:f6:97:a4:26:f4:a4:31:18:6e:7d:24:b0:22: ff:f8:ec:b1:83:c7:e2:2a:49:18:01:51:07:65:e9:b0:13:00: 87:a9:4e:e6:79:96:ef:f0:e3:ca:61:5e:5f:fc:95:fc:4b:6d: cf:1c:ad:f4:c8:0f:11:c8:10:ef:bb:08:34:dc:72:3c:7c:ab: 3d:ca:18:2e:0d:93:8e:bd:b5:cd:85:05:f1:df:34:a7:ca:0e: 44:8f:38:af:ff:91:86:12:b4:ae:0c:55:c3:aa:9e:ec:bf:b3: 31:f8:bf:1c:cb:3a:63:6d:19:89:c3:55:e9:2e:28:8f:71:df: 3d:7f:14:09:4f:00:f4:83:20:6d:cf:de:ca:28:f5:32:9d:a4: 97:93:50:8d:1d:83:30:cc:3b:80:2b:b4:76:53:7a:5e:62:77: 9a:55:e6:17:fc:c7:d9:8f:2e:f9:4c:8b:cb:2e:a4:79:e4:d8: 6d:37:21:87:7f:08:bd:c9:95:89:62:1a:bc:99:30:7d:f1:67: a1:95:2f:0b:1a:fd:1c:2d:59:b5:d6:3e:94:b7:3e:22:37:28: de:70:c6:4b:8f:88:00:38:63:b6:ad:3f:03:74:2c:54:3c:f3: 56:58:19:8a:d4:97:8e:5d:a5:07:02:d0:87:32:4c:59:f9:91: c9:95:9d:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSPAzY0jHXQKdXMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk OGEyZTYxMGQtNWVlOC00ZTEyLWI0ZWItNDllNTJkZjM2YTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho5U/KMCL83PpwCYkYxajh7tVtwJBM6dlUOK 3x2XF57/MaVfk9hPXgspnZIYl5birt3Ynptrcw10+/4yDCacoUvDXYjUVNCPSjbO zjsm0irtRGAv2ya0ZLs22uzAh5jqM4PEt8JCVfC3qROY8tCeKHgZfiud3qZkXQcL gXIoqvQWqb1EqbDvUGPlQv2tTZAGEC7U80G+GQiIqPHt6tsMt/dFxQHwDZB2Xn36 p0qffJZOnd+ULS9ANj2/enk9/z0h8j9IhMp47VeBqs95nbHGLVWiJUAJDW9xCnnT Hz9i+3E/I/A0CYyO71m3Vgb0f4SNpe8dWCJq6Vp5bsbtnDsHxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOM+Ineapj63eabP3vs7aFKHF1kAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDhjMzNkMzEtMDFlOS0z Zjg0LWFlNWItYzIyZDYzMjJmNDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHR6eAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsSqE+s9pekJvSkMRhufSSwIv/47LGDx+IqSRgBUQdl6bATAIepTuZ5 lu/w48phXl/8lfxLbc8crfTIDxHIEO+7CDTccjx8qz3KGC4Nk469tc2FBfHfNKfK DkSPOK//kYYStK4MVcOqnuy/szH4vxzLOmNtGYnDVekuKI9x3z1/FAlPAPSDIG3P 3soo9TKdpJeTUI0dgzDMO4ArtHZTel5id5pV5hf8x9mPLvlMi8supHnk2G03IYd/ CL3JlYliGryZMH3xZ6GVLwsa/RwtWbXWPpS3PiI3KN5wxkuPiAA4Y7atPwN0LFQ8 81ZYGYrUl45dpQcC0IcyTFn5kcmVnTI= -----END CERTIFICATE-----Generated at Mon Oct 20 20:22:41 2025 by rpki-client