$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e21fc35-9cea-3245-8fdf-3b9d235bddb7.roa File: 2e21fc35-9cea-3245-8fdf-3b9d235bddb7.roa (raw, json) Hash identifier: gDB3zrs24mODThRq+Knmkr5mzYmYvbMbIE3YiHZ5SHA= Subject key identifier: 8A:81:2D:65:C3:63:7F:8C:08:EE:0D:21:D0:35:61:18:7D:06:C0:7F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD23C075B26658446E889BE80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e21fc35-9cea-3245-8fdf-3b9d235bddb7.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 701 IP address blocks: 71.245.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:07:5b:26:65:84:46:e8:89:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=6dc1984a-6160-41c6-bdff-bf7a3ecd6ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:25:f6:0e:1c:10:d0:a1:f1:3d:c5:1c:70:57: 17:b0:37:8f:2a:74:3d:54:e8:fc:87:5e:32:ad:c3: 6d:76:da:b1:15:7e:7b:02:4b:31:05:ef:3c:72:e4: 6b:4b:73:6a:58:6f:84:23:49:fe:0b:cb:3f:26:4a: c0:97:3c:21:ed:da:a3:6d:d1:9c:4f:64:7b:9d:04: e3:2b:dc:ec:6c:bf:5e:87:b6:6f:01:cc:48:63:0c: c6:01:84:ca:c1:b6:cd:07:94:93:81:01:d7:f6:a1: d9:98:b4:42:20:11:9b:33:65:9a:15:15:86:ff:36: 87:ad:68:25:84:6a:6a:ef:e2:9e:bd:2a:56:94:0f: 90:a8:ef:e4:c3:a2:d8:28:90:d7:e0:cb:b8:05:e9: 3c:1e:d4:3f:f7:e6:47:6e:54:98:3d:5b:69:9a:0a: 8a:cc:91:1a:b4:88:2a:12:af:77:91:75:72:39:68: 02:7e:11:cf:62:f5:db:f2:9a:db:82:c7:0e:5c:31: e6:be:2b:ae:07:7d:9f:24:88:6a:0e:57:ec:e7:02: 43:30:79:e0:32:ce:fa:d3:07:c5:a2:fa:96:13:af: 4f:8a:8f:e7:36:ce:7a:ff:c4:97:0c:aa:21:a3:cf: 9b:28:be:1c:6d:3f:72:2a:53:ac:46:80:4a:e5:27: c8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:81:2D:65:C3:63:7F:8C:08:EE:0D:21:D0:35:61:18:7D:06:C0:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e21fc35-9cea-3245-8fdf-3b9d235bddb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.245.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:68:10:06:75:34:db:1d:13:7c:87:65:57:13:f8:39:94:93: c5:64:0d:f1:35:8b:ef:00:63:37:6e:0d:d1:a3:4a:af:df:1f: d9:8c:09:5b:e8:79:64:1f:8b:cf:85:04:9e:64:98:34:88:42: e8:59:34:9f:f8:14:1d:e0:e6:d6:eb:2a:44:b9:b6:cc:a4:2f: 00:b9:0b:51:f0:51:c3:d5:70:aa:5c:79:9c:90:a8:86:38:7b: 22:ab:1b:49:fc:ad:02:6a:83:b3:80:07:ef:ce:d1:16:21:79: 3e:a9:23:85:52:ef:63:cc:5e:20:8f:1a:65:b1:43:cf:92:d5: 2b:ca:21:45:ce:b6:4c:5a:ed:cf:07:ce:07:08:fd:52:3d:86: 34:2b:eb:d3:91:eb:43:a0:26:ee:d7:bf:f0:84:96:56:b6:ad: 95:f0:af:90:ad:16:fe:16:db:b8:ea:3c:3d:3c:8b:b3:b5:6c: d8:d9:03:3e:76:79:59:3d:84:9e:6e:5e:38:b7:4d:08:6f:4f: 75:3e:a8:f1:92:23:69:e3:30:35:91:98:b9:fc:05:3e:5b:f3: 31:91:c0:2e:c9:64:d4:ad:c7:bf:b7:d9:05:a4:67:b8:59:c0: f9:44:ec:47:f4:cc:6a:71:86:50:c6:0c:a5:0b:d6:ae:d8:dd: 19:5e:1a:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSPAdbJmWERuiJvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NmRjMTk4NGEtNjE2MC00MWM2LWJkZmYtYmY3YTNlY2Q2ZWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySX2DhwQ0KHxPcUccFcXsDePKnQ9VOj8h14y rcNtdtqxFX57AksxBe88cuRrS3NqWG+EI0n+C8s/JkrAlzwh7dqjbdGcT2R7nQTj K9zsbL9eh7ZvAcxIYwzGAYTKwbbNB5STgQHX9qHZmLRCIBGbM2WaFRWG/zaHrWgl hGpq7+KevSpWlA+QqO/kw6LYKJDX4Mu4Bek8HtQ/9+ZHblSYPVtpmgqKzJEatIgq Eq93kXVyOWgCfhHPYvXb8prbgscOXDHmviuuB32fJIhqDlfs5wJDMHngMs760wfF ovqWE69Pio/nNs56/8SXDKoho8+bKL4cbT9yKlOsRoBK5SfIEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqBLWXDY3+MCO4NIdA1YRh9BsB/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmUyMWZjMzUtOWNlYS0z MjQ1LThmZGYtM2I5ZDIzNWJkZGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER/VAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKloEAZ1NNsdE3yHZVcT+DmUk8VkDfE1i+8AYzduDdGjSq/fH9mMCVvo eWQfi8+FBJ5kmDSIQuhZNJ/4FB3g5tbrKkS5tsykLwC5C1HwUcPVcKpceZyQqIY4 eyKrG0n8rQJqg7OAB+/O0RYheT6pI4VS72PMXiCPGmWxQ8+S1SvKIUXOtkxa7c8H zgcI/VI9hjQr69OR60OgJu7Xv/CElla2rZXwr5CtFv4W27jqPD08i7O1bNjZAz52 eVk9hJ5uXji3TQhvT3U+qPGSI2njMDWRmLn8BT5b8zGRwC7JZNStx7+32QWkZ7hZ wPlE7Ef0zGpxhlDGDKUL1q7Y3RleGjs= -----END CERTIFICATE-----Generated at Mon Oct 20 20:59:40 2025 by rpki-client