$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/23e388ab-876b-3b38-9e99-9d9abacc6148.roa File: 23e388ab-876b-3b38-9e99-9d9abacc6148.roa (raw, json) Hash identifier: EnIpVC3jyKFhQzxdzvhr6TLVW6k4g7e5AK29AO5gnqQ= Subject key identifier: 8A:A7:E7:57:09:02:07:70:74:5E:BE:B2:3A:EC:BF:07:C2:2B:D0:B6 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD23C06248450D84FC3DC7100 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/23e388ab-876b-3b38-9e99-9d9abacc6148.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 701 IP address blocks: 71.251.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:06:24:84:50:d8:4f:c3:dc:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=b4eb253c-ad5e-4d50-bed9-54c12c6db045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2c:7d:b8:8b:d4:2b:0d:98:9b:7f:96:24:8c: dc:23:93:f5:4e:d6:30:75:72:06:b3:36:ee:76:05: 85:80:44:e3:de:ab:b4:da:8d:21:1a:ea:6c:08:fc: 08:19:17:98:f8:69:97:b5:0b:bf:66:95:2a:fa:87: 3e:58:66:50:fd:7d:ce:01:c6:1d:17:db:94:18:cb: cc:02:6d:15:dc:a3:68:de:ab:2b:09:b2:38:d8:3b: 78:ab:9a:11:86:1e:db:7b:8e:d7:a7:b0:8e:c6:44: d2:18:4c:9d:98:97:3f:a4:fa:ef:e5:f2:60:cc:21: 1e:32:7c:73:99:92:b5:79:54:07:95:4b:ed:60:cf: 34:36:53:b2:2d:c6:c4:f3:e3:f2:ec:1d:da:db:7c: db:24:49:ad:1c:32:2e:24:1e:45:80:56:65:a4:84: d0:93:da:b7:94:d1:be:7f:a4:31:71:48:7b:89:29: 14:f3:09:17:78:75:7e:18:c5:65:4e:3e:ed:f8:2f: 16:54:70:32:41:4b:7f:35:6f:04:1e:c1:e2:00:d9: d1:b9:28:c0:8d:f8:c1:28:d4:1b:ff:c8:8c:3a:26: c5:41:09:16:60:ab:54:4f:74:74:d3:97:32:44:94: d8:f3:8c:c1:ab:9c:2e:16:f7:9c:e5:31:ed:1b:cb: 66:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A7:E7:57:09:02:07:70:74:5E:BE:B2:3A:EC:BF:07:C2:2B:D0:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/23e388ab-876b-3b38-9e99-9d9abacc6148.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.251.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:3b:e4:44:9c:e0:20:72:b0:1c:cb:b9:ee:ab:de:d7:17:ed: 80:69:87:68:8b:5e:4e:38:a2:23:a8:4b:6c:09:5d:0b:d8:65: 65:24:1d:f6:30:ec:a3:62:6c:76:73:04:9d:f2:47:79:1d:43: d9:f7:0a:b0:58:03:61:2c:c9:ef:33:77:f5:bf:46:55:03:5c: 96:58:4c:34:21:45:5f:55:8d:5f:a3:8b:e2:0c:f1:7c:fa:1c: 79:e3:8b:d7:55:71:ee:c5:c5:80:99:6b:37:74:35:69:65:6a: 6e:02:32:f4:73:92:14:8a:66:34:0b:47:82:35:52:1f:1c:d9: e1:b9:b2:12:f1:16:81:9e:1f:93:71:f0:64:a2:81:bc:71:7e: 59:f4:ae:0d:14:4d:0d:d5:32:7b:42:8b:87:bb:92:56:95:0f: 23:2a:12:bd:e1:bd:62:2c:9e:f2:7f:53:89:f6:df:8d:9f:a2: 55:01:71:fc:9f:b8:2c:f3:5f:94:1c:fb:96:0a:33:d5:7a:20: 60:b7:b3:75:76:4f:cd:c3:be:42:78:71:e1:c7:dd:5f:63:1f: 97:b1:67:bf:49:c4:b9:9e:ab:c4:52:0c:b4:24:f2:f4:be:50: d3:30:90:0b:49:eb:e6:87:58:e0:d4:10:3e:97:6a:45:38:17: 5f:bd:66:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSPAYkhFDYT8PccQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk YjRlYjI1M2MtYWQ1ZS00ZDUwLWJlZDktNTRjMTJjNmRiMDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSx9uIvUKw2Ym3+WJIzcI5P1TtYwdXIGszbu dgWFgETj3qu02o0hGupsCPwIGReY+GmXtQu/ZpUq+oc+WGZQ/X3OAcYdF9uUGMvM Am0V3KNo3qsrCbI42Dt4q5oRhh7be47Xp7COxkTSGEydmJc/pPrv5fJgzCEeMnxz mZK1eVQHlUvtYM80NlOyLcbE8+Py7B3a23zbJEmtHDIuJB5FgFZlpITQk9q3lNG+ f6QxcUh7iSkU8wkXeHV+GMVlTj7t+C8WVHAyQUt/NW8EHsHiANnRuSjAjfjBKNQb /8iMOibFQQkWYKtUT3R005cyRJTY84zBq5wuFvec5THtG8tmtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqn51cJAgdwdF6+sjrsvwfCK9C2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjNlMzg4YWItODc2Yi0z YjM4LTllOTktOWQ5YWJhY2M2MTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER/vgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC075ESc4CBysBzLue6r3tcX7YBph2iLXk44oiOoS2wJXQvYZWUkHfYw 7KNibHZzBJ3yR3kdQ9n3CrBYA2Esye8zd/W/RlUDXJZYTDQhRV9VjV+ji+IM8Xz6 HHnji9dVce7FxYCZazd0NWllam4CMvRzkhSKZjQLR4I1Uh8c2eG5shLxFoGeH5Nx 8GSigbxxfln0rg0UTQ3VMntCi4e7klaVDyMqEr3hvWIsnvJ/U4n2342folUBcfyf uCzzX5Qc+5YKM9V6IGC3s3V2T83DvkJ4ceHH3V9jH5exZ79JxLmeq8RSDLQk8vS+ UNMwkAtJ6+aHWODUED6XakU4F1+9ZhU= -----END CERTIFICATE-----Generated at Sat Aug 23 14:17:29 2025 by rpki-client