$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3bb1ce03-edd1-3b3a-bb85-e7bab5fbeda1.roa File: 3bb1ce03-edd1-3b3a-bb85-e7bab5fbeda1.roa (raw, json) Hash identifier: MQXJurFMtj7tYGKfedVsYi8+IejKF3KNAB9DuykwFrU= Subject key identifier: E2:CA:9E:47:8A:77:37:63:64:A7:E9:97:85:64:7B:22:2C:B0:03:CC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD23C0D64A856460E05B47DC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3bb1ce03-edd1-3b3a-bb85-e7bab5fbeda1.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 701 IP address blocks: 71.186.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:0d:64:a8:56:46:0e:05:b4:7d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=2b5876cf-9d65-4807-94dd-686b028d9fdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b0:fa:6e:24:da:5e:73:77:ba:17:19:e0:3a: a6:ec:f1:e7:bc:0b:e2:c6:fa:32:4e:09:c2:31:8a: 8b:04:16:12:72:aa:70:e4:fb:36:8b:b9:eb:7e:4e: 05:30:1c:1e:09:52:c3:7a:42:61:ee:1c:a6:0f:16: 38:9c:83:e0:12:1c:26:18:5d:c1:1d:01:f7:c0:20: 70:6a:c4:47:54:b5:bd:0b:c4:fd:80:34:47:af:15: 00:77:53:ec:16:8f:66:e7:f0:17:00:e2:f1:58:a9: 4f:1b:fc:73:b5:35:7c:27:e8:8f:5e:9c:9d:da:0e: 12:68:c4:94:3a:7d:8a:af:fe:93:67:04:b0:0e:52: d3:d1:8d:1d:0e:dc:87:61:56:b2:40:97:a2:82:f8: d6:d8:19:56:db:b7:98:7a:e5:54:c8:ee:18:7b:b9: e5:6e:ba:46:c3:94:c3:e9:9c:bc:7e:16:e1:aa:65: be:98:17:97:ee:0f:e2:f0:2e:43:94:1a:29:2c:0d: 1b:81:84:a6:2e:6c:f3:3e:c4:a3:2e:8d:7a:13:50: d2:1b:be:77:67:49:a2:ad:17:bb:83:b0:ec:b9:4d: 82:7f:e5:1f:49:92:43:a9:47:b7:0a:19:cb:2f:8b: de:bb:2f:88:03:9f:f7:61:f6:aa:48:fb:27:dd:91: 15:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:CA:9E:47:8A:77:37:63:64:A7:E9:97:85:64:7B:22:2C:B0:03:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3bb1ce03-edd1-3b3a-bb85-e7bab5fbeda1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.186.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:16:2b:52:2c:3f:4c:86:bc:da:9b:4e:ca:a0:8d:3d:30:40: c8:16:0a:aa:67:08:67:a0:6f:ca:25:ff:7d:cc:96:84:4f:b2: ff:6f:0e:f5:37:f9:e2:1f:45:2a:8d:f9:0d:48:03:52:ec:78: 4e:87:fa:9d:11:76:69:f1:b9:18:dc:49:d4:61:42:2e:66:95: a5:cc:63:ae:77:f2:a0:30:94:07:9f:b0:d3:7f:83:53:e8:e1: f0:d9:55:c4:25:e3:92:28:5d:89:eb:d6:03:f8:8a:01:60:78: a0:b8:41:f3:b9:f9:c7:80:e5:36:2d:3f:28:6e:80:a0:9a:dc: ef:3b:33:cc:f6:06:93:7a:72:72:0c:3f:23:db:61:0d:df:44: 89:0a:72:c7:6e:23:4c:71:0e:c1:20:22:61:87:38:69:d5:b0: 3d:d3:9b:39:02:0a:a9:53:88:b0:3b:7d:d7:60:26:c4:3d:f5: e0:92:e7:96:d2:d6:42:eb:94:a6:e6:2a:74:aa:17:2e:11:dd: 09:af:a7:6f:af:e9:ca:68:d8:f9:2d:08:c1:c9:d3:4d:0a:d3: 5c:bd:34:ec:90:9d:11:85:9a:40:51:1c:48:03:28:b8:d7:c2: 4a:db:d9:90:ae:44:98:ee:6a:de:99:df:71:cf:f5:ed:cc:55: 81:85:40:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSPA1kqFZGDgW0fcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MmI1ODc2Y2YtOWQ2NS00ODA3LTk0ZGQtNjg2YjAyOGQ5ZmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLD6biTaXnN3uhcZ4Dqm7PHnvAvixvoyTgnC MYqLBBYScqpw5Ps2i7nrfk4FMBweCVLDekJh7hymDxY4nIPgEhwmGF3BHQH3wCBw asRHVLW9C8T9gDRHrxUAd1PsFo9m5/AXAOLxWKlPG/xztTV8J+iPXpyd2g4SaMSU On2Kr/6TZwSwDlLT0Y0dDtyHYVayQJeigvjW2BlW27eYeuVUyO4Ye7nlbrpGw5TD 6Zy8fhbhqmW+mBeX7g/i8C5DlBopLA0bgYSmLmzzPsSjLo16E1DSG753Z0mirRe7 g7DsuU2Cf+UfSZJDqUe3ChnLL4veuy+IA5/3YfaqSPsn3ZEVtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLKnkeKdzdjZKfpl4VkeyIssAPMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2JiMWNlMDMtZWRkMS0z YjNhLWJiODUtZTdiYWI1ZmJlZGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHR7qAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0WK1IsP0yGvNqbTsqgjT0wQMgWCqpnCGegb8ol/33MloRPsv9vDvU3 +eIfRSqN+Q1IA1LseE6H+p0RdmnxuRjcSdRhQi5mlaXMY6538qAwlAefsNN/g1Po 4fDZVcQl45IoXYnr1gP4igFgeKC4QfO5+ceA5TYtPyhugKCa3O87M8z2BpN6cnIM PyPbYQ3fRIkKcsduI0xxDsEgImGHOGnVsD3TmzkCCqlTiLA7fddgJsQ99eCS55bS 1kLrlKbmKnSqFy4R3Qmvp2+v6cpo2PktCMHJ000K01y9NOyQnRGFmkBRHEgDKLjX wkrb2ZCuRJjuat6Z33HP9e3MVYGFQAI= -----END CERTIFICATE-----Generated at Sat Aug 23 13:14:26 2025 by rpki-client