$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1d172474-6f48-31e7-ab6d-ac0c6090c06e.roa File: 1d172474-6f48-31e7-ab6d-ac0c6090c06e.roa (raw, json) Hash identifier: evxcAZDwLg8SewcxHmxVcb+b50sLHK3VwQzMrAqoMD8= Subject key identifier: FE:4D:46:F2:8E:F2:E0:46:69:B2:84:D2:5C:C1:B7:04:0E:43:A3:1B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD23C0D86D72ED7DC95D29E80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1d172474-6f48-31e7-ab6d-ac0c6090c06e.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 701 IP address blocks: 71.187.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:0d:86:d7:2e:d7:dc:95:d2:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=ed85a97b-11f8-4ba9-aa02-3cbe3829b2d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0b:52:d6:4a:61:ca:40:bc:71:85:2e:96:a8: c9:4d:3a:ba:07:99:e9:46:c1:d4:f5:42:62:b1:2b: ea:2c:05:a8:af:54:3d:a3:2c:49:c9:b9:9b:88:b9: 12:af:f6:86:4a:f3:28:76:6a:44:b3:b7:ce:2d:35: 5b:bb:0c:7a:4b:06:9c:d5:ac:db:dc:7c:13:69:4c: 8b:41:94:36:fc:3e:14:cc:17:00:70:79:07:32:cb: d3:aa:fb:4b:a5:d2:c3:a1:46:c3:28:e3:c1:51:05: 09:13:5b:d8:41:b9:e1:d6:d5:e0:98:07:e5:7c:35: ad:f0:21:e2:69:4e:e3:ed:7a:60:fc:26:42:ca:e0: 1c:da:a8:15:c7:b8:ae:8a:f2:36:8e:17:3d:8f:f3: 31:b5:4f:a6:93:02:a9:dc:e8:9d:99:06:df:8a:28: 4f:b3:b9:ab:c2:9c:b0:f2:8f:a3:91:52:50:1a:3d: eb:19:5b:d5:f6:fb:81:f3:e1:8e:ae:d4:c4:18:fa: 37:07:bf:8f:39:14:f0:27:42:f8:76:0b:3c:49:a0: 14:97:3b:2f:83:d4:cf:13:58:9b:c9:51:4b:5a:d9: 1b:d3:cb:3b:93:13:c6:52:07:b6:17:8f:55:f7:02: 67:26:d9:2e:a2:76:63:17:99:48:9c:49:89:4a:48: 14:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:4D:46:F2:8E:F2:E0:46:69:B2:84:D2:5C:C1:B7:04:0E:43:A3:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1d172474-6f48-31e7-ab6d-ac0c6090c06e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.187.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:6f:a8:95:6e:21:c9:bc:0e:d4:5e:aa:c8:04:17:8a:7e:7f: 7c:1e:07:f1:0e:44:86:e2:11:aa:94:35:a8:43:aa:c0:78:bf: 66:55:f5:90:19:6f:59:e0:b5:f0:6d:f9:42:a6:68:54:68:f1: 60:22:53:db:a3:c1:bb:15:56:66:7a:b7:46:e2:21:2c:f4:df: e8:82:66:13:4d:7a:3f:81:3c:ac:d6:d4:c6:e1:0d:b3:36:8f: 8a:2c:58:45:8d:c8:69:04:73:e0:e5:df:be:58:44:7f:91:bd: 66:1b:60:be:6f:f3:c1:f4:8b:a6:3a:03:6a:cb:e4:47:0d:61: 24:f8:88:04:17:99:bb:7e:74:c0:bb:17:7f:93:e9:44:16:81: 4a:9f:ff:50:d8:b7:60:aa:c1:8c:d7:71:84:38:c9:73:45:fa: b7:31:66:5f:39:fd:d5:21:70:58:86:91:d8:d8:f8:b4:4f:83: 4c:b0:99:fc:ff:7c:78:87:4f:be:6e:41:96:d8:7a:08:08:c2: 5f:f9:f4:f4:98:7e:b4:14:1f:33:cb:e8:49:d0:77:d3:47:6e: 54:fe:28:c3:ae:3c:91:c1:7e:10:20:66:8d:f0:e9:97:6c:54: 19:7f:9c:28:7a:dd:a3:ae:8d:a4:46:6b:ae:49:ae:db:f1:d6: f0:0a:99:10 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErSPA2G1y7X3JXSnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZWQ4NWE5N2ItMTFmOC00YmE5LWFhMDItM2NiZTM4MjliMmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQtS1kphykC8cYUulqjJTTq6B5npRsHU9UJi sSvqLAWor1Q9oyxJybmbiLkSr/aGSvModmpEs7fOLTVbuwx6Swac1azb3HwTaUyL QZQ2/D4UzBcAcHkHMsvTqvtLpdLDoUbDKOPBUQUJE1vYQbnh1tXgmAflfDWt8CHi aU7j7Xpg/CZCyuAc2qgVx7iuivI2jhc9j/MxtU+mkwKp3OidmQbfiihPs7mrwpyw 8o+jkVJQGj3rGVvV9vuB8+GOrtTEGPo3B7+PORTwJ0L4dgs8SaAUlzsvg9TPE1ib yVFLWtkb08s7kxPGUge2F49V9wJnJtkuonZjF5lInEmJSkgUXQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFP5NRvKO8uBGabKE0lzBtwQOQ6MbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWQxNzI0NzQtNmY0OC0z MWU3LWFiNmQtYWMwYzYwOTBjMDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAR7swVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAFG+olW4hybwO1F6qyAQXin5/fB4H8Q5EhuIRqpQ1qEOqwHi/ZlX1kBlv WeC18G35QqZoVGjxYCJT26PBuxVWZnq3RuIhLPTf6IJmE016P4E8rNbUxuENszaP iixYRY3IaQRz4OXfvlhEf5G9Zhtgvm/zwfSLpjoDasvkRw1hJPiIBBeZu350wLsX f5PpRBaBSp//UNi3YKrBjNdxhDjJc0X6tzFmXzn91SFwWIaR2Nj4tE+DTLCZ/P98 eIdPvm5Blth6CAjCX/n09Jh+tBQfM8voSdB300duVP4ow648kcF+ECBmjfDpl2xU GX+cKHrdo66NpEZrrkmu2/HW8AqZEA== -----END CERTIFICATE-----Generated at Sat Aug 23 13:46:48 2025 by rpki-client