$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/40751cbf-43ef-33bc-bca9-5edd443aac36.roa File: 40751cbf-43ef-33bc-bca9-5edd443aac36.roa (raw, json) Hash identifier: XNuGNWJieZaBVEkMJNKaNZgVyP2V2cJAl/gr8QYL5Ec= Subject key identifier: B6:71:1C:57:5B:85:A6:56:79:D3:C4:2F:EB:19:61:52:3F:45:1D:CB Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD23C088CDE12BA0BDDB0B7C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/40751cbf-43ef-33bc-bca9-5edd443aac36.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 701 IP address blocks: 71.246.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:08:8c:de:12:ba:0b:dd:b0:b7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=dc0bcc74-120a-46d5-a3ab-9ae2fbd373bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:72:16:4b:fd:85:8d:66:cc:cc:df:64:70:76: c5:48:0b:42:c4:bd:db:d2:20:e1:eb:1f:e2:37:53: df:16:1e:55:2f:ee:62:c5:76:46:37:17:b2:e4:93: 65:d2:50:63:cf:c0:a1:d3:64:61:28:59:e6:0a:90: 7d:2f:ea:4e:48:63:b1:c8:30:2c:8f:f1:fa:f7:0c: 32:17:8e:ed:4c:48:c6:0f:93:3e:b1:9e:69:a1:39: bb:e4:7a:af:09:e4:14:66:68:5a:3b:24:ea:a1:b7: e4:9b:1d:3e:af:4d:e2:1b:8b:7e:3b:07:d6:6e:0d: 40:52:72:b0:6a:ee:6e:e1:78:30:f6:c5:12:df:2e: b1:04:1b:af:a5:7a:72:f2:c3:48:04:24:eb:2c:b6: 6c:d4:df:77:66:48:1b:90:95:42:aa:82:3e:77:0d: f6:76:d1:36:43:c0:96:80:15:fe:02:eb:fd:96:e6: c0:78:41:e2:ae:74:37:86:e1:eb:cf:99:c5:e2:94: 35:18:95:36:12:03:e0:72:91:c1:ac:48:9a:52:f1: cd:7c:aa:75:6e:c2:c8:e2:f7:d0:f5:9e:6e:63:51: 9a:48:0b:92:f7:55:f5:36:f9:cb:b0:b0:da:52:df: 7f:90:87:d3:6a:86:a5:6c:8d:55:1b:92:28:33:d4: 1c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:71:1C:57:5B:85:A6:56:79:D3:C4:2F:EB:19:61:52:3F:45:1D:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/40751cbf-43ef-33bc-bca9-5edd443aac36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.246.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:dc:53:10:7f:f9:bf:e2:75:f4:47:96:5c:6d:2e:f7:47:ae: 35:01:06:c3:5e:2a:e2:8b:3a:a3:a3:2b:f4:21:a3:49:cb:34: 24:f1:47:1a:7a:db:b4:8b:cc:a1:1d:06:c0:c9:96:03:5b:99: 0f:8a:40:6f:51:2c:fc:0c:57:52:23:e5:a6:d5:cf:10:68:36: 4a:2a:23:74:24:dc:e7:54:3c:c2:50:64:61:03:41:28:03:1f: 66:75:9f:0f:10:0e:5b:0a:57:fb:5f:64:45:6e:89:bc:c0:e3: 0c:a1:0d:63:ad:36:c5:63:70:22:a5:93:b9:ef:01:7e:35:73: 78:de:0b:58:e7:bb:1a:80:45:7f:e6:ca:bd:65:6b:65:92:15: a5:85:23:7e:fc:1f:be:7c:59:8c:34:a3:79:ca:0c:e1:65:fc: a1:b2:6a:8b:85:85:45:f7:06:ad:e4:13:12:72:e6:1d:4f:79: c0:5c:9a:5f:0f:03:d0:36:cd:bf:14:78:03:3e:bf:16:0b:3b: 94:7b:1a:d2:4d:43:d6:92:2d:e0:21:ea:f0:7e:24:9f:0d:d2: 68:42:ab:3b:67:ba:05:d7:0b:3d:80:2d:19:88:7b:1d:10:a9: 61:8e:e8:96:b0:6f:2a:79:f2:18:f2:93:e8:d3:ab:f8:7e:51: 96:d2:0c:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSPAiM3hK6C92wt8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZGMwYmNjNzQtMTIwYS00NmQ1LWEzYWItOWFlMmZiZDM3M2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXIWS/2FjWbMzN9kcHbFSAtCxL3b0iDh6x/i N1PfFh5VL+5ixXZGNxey5JNl0lBjz8Ch02RhKFnmCpB9L+pOSGOxyDAsj/H69wwy F47tTEjGD5M+sZ5poTm75HqvCeQUZmhaOyTqobfkmx0+r03iG4t+OwfWbg1AUnKw au5u4Xgw9sUS3y6xBBuvpXpy8sNIBCTrLLZs1N93ZkgbkJVCqoI+dw32dtE2Q8CW gBX+Auv9lubAeEHirnQ3huHrz5nF4pQ1GJU2EgPgcpHBrEiaUvHNfKp1bsLI4vfQ 9Z5uY1GaSAuS91X1NvnLsLDaUt9/kIfTaoalbI1VG5IoM9QcSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZxHFdbhaZWedPEL+sZYVI/RR3LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDA3NTFjYmYtNDNlZi0z M2JjLWJjYTktNWVkZDQ0M2FhYzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFR/ZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbcUxB/+b/idfRHllxtLvdHrjUBBsNeKuKLOqOjK/Qho0nLNCTxRxp6 27SLzKEdBsDJlgNbmQ+KQG9RLPwMV1Ij5abVzxBoNkoqI3Qk3OdUPMJQZGEDQSgD H2Z1nw8QDlsKV/tfZEVuibzA4wyhDWOtNsVjcCKlk7nvAX41c3jeC1jnuxqARX/m yr1la2WSFaWFI378H758WYw0o3nKDOFl/KGyaouFhUX3Bq3kExJy5h1PecBcml8P A9A2zb8UeAM+vxYLO5R7GtJNQ9aSLeAh6vB+JJ8N0mhCqztnugXXCz2ALRmIex0Q qWGO6Jawbyp58hjyk+jTq/h+UZbSDMM= -----END CERTIFICATE-----Generated at Sat Aug 23 19:12:17 2025 by rpki-client