$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4235e110-b55f-32a5-abcd-41b0f3c1feb1.roa File: 4235e110-b55f-32a5-abcd-41b0f3c1feb1.roa (raw, json) Hash identifier: Zo4uCcifzroYszxgCOm3JHeCiPp26z6YaCVgvI5aQ3Y= Subject key identifier: 9A:A8:FB:36:87:32:7D:FE:0C:5D:EA:20:15:EF:E6:81:AA:AF:1A:5C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD23C11C160D1165EF0A8AAE0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4235e110-b55f-32a5-abcd-41b0f3c1feb1.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 701 IP address blocks: 173.71.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:11:c1:60:d1:16:5e:f0:a8:aa:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=72f5f3a4-1fd8-4bd7-9725-0cdb59e1ca19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4a:2c:9d:b3:89:5e:7a:2d:f5:e1:29:bf:94: 5a:27:b6:cf:38:16:cf:33:15:44:be:2a:c2:46:6d: d8:fd:0f:1b:b9:6a:0c:3d:c5:f6:e7:c9:8b:a4:5d: 83:b3:8d:c7:83:69:43:6c:8d:0a:3d:51:2c:dd:c5: a3:dd:88:f1:c9:dc:c2:10:6e:4c:26:d0:c7:fb:f3: a9:4d:c8:9a:3a:e4:96:0f:90:11:59:f8:1f:13:53: 84:03:b0:7f:43:79:a0:94:f4:2a:f5:62:04:a0:94: 73:17:6f:4f:5c:1c:1d:b3:53:31:21:29:78:b0:e3: 15:5a:fa:5a:17:1f:22:ef:6c:3a:b6:71:64:0a:f3: cf:aa:47:be:97:09:49:c8:3a:13:1d:5d:35:bc:da: 46:d0:cf:3d:f9:94:c0:9a:04:27:51:d5:6a:63:8c: 0f:c8:87:c6:f9:88:fc:0b:b7:f4:0f:24:f5:51:93: 92:37:85:2f:04:f3:43:84:55:0e:55:d3:52:dd:13: 10:c4:73:f5:01:90:e1:7a:4c:25:dc:32:b4:42:76: 77:8c:72:e5:3d:26:12:02:c5:45:29:bd:31:fb:27: 17:f8:1c:bd:a6:00:bc:89:a1:f4:54:8b:d0:e4:38: 41:48:bd:e4:b6:5c:6e:05:f9:4f:90:bb:a3:df:b9: cf:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A8:FB:36:87:32:7D:FE:0C:5D:EA:20:15:EF:E6:81:AA:AF:1A:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4235e110-b55f-32a5-abcd-41b0f3c1feb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 173.71.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:ff:82:e6:f5:1e:e4:49:60:5e:f1:d5:2a:a8:76:0a:13:2b: e6:09:99:cd:e0:3f:a3:6b:a7:9d:2c:52:15:9f:4d:15:7d:09: 25:5e:02:d9:76:ba:32:fc:c1:74:9a:eb:99:ac:10:e8:48:10: 18:3d:8c:53:d4:5b:7a:de:4f:2d:67:e0:a1:67:9e:46:b4:5c: 49:47:30:7d:7d:95:4d:28:4f:fb:7e:43:58:58:a0:95:1d:a5: 5a:18:1e:18:98:66:f4:d0:77:3c:95:b8:2c:38:a0:88:e5:39: e5:a3:4f:00:55:6e:32:a5:76:40:bd:ab:89:c1:ea:1e:53:e4: 12:ab:e1:cc:cf:99:e9:8a:c2:d8:75:d6:76:c9:88:79:93:33: 35:ce:26:c4:8e:e2:07:68:90:c7:5e:cc:2e:24:c0:b0:11:b8: 7b:f9:34:fd:4c:f9:f2:cb:fa:13:1e:bc:38:cd:4a:b0:99:2f: e0:9a:90:7c:39:ed:7a:0d:2e:6a:53:0a:7c:3c:bb:46:a3:fe: 48:59:f4:21:14:be:b1:b7:ec:a7:26:3b:f7:63:ac:a0:60:0d: 32:79:fd:fc:74:d9:db:5e:35:e0:e1:3c:f3:a3:e1:70:38:11: 45:ea:59:43:ac:a7:ab:d9:0a:ce:75:fc:81:09:ab:18:f8:05: 68:53:bb:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSPBHBYNEWXvCoquAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NzJmNWYzYTQtMWZkOC00YmQ3LTk3MjUtMGNkYjU5ZTFjYTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEosnbOJXnot9eEpv5RaJ7bPOBbPMxVEvirC Rm3Y/Q8buWoMPcX258mLpF2Ds43Hg2lDbI0KPVEs3cWj3YjxydzCEG5MJtDH+/Op TciaOuSWD5ARWfgfE1OEA7B/Q3mglPQq9WIEoJRzF29PXBwds1MxISl4sOMVWvpa Fx8i72w6tnFkCvPPqke+lwlJyDoTHV01vNpG0M89+ZTAmgQnUdVqY4wPyIfG+Yj8 C7f0DyT1UZOSN4UvBPNDhFUOVdNS3RMQxHP1AZDhekwl3DK0QnZ3jHLlPSYSAsVF Kb0x+ycX+By9pgC8iaH0VIvQ5DhBSL3ktlxuBflPkLuj37nPEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqo+zaHMn3+DF3qIBXv5oGqrxpcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDIzNWUxMTAtYjU1Zi0z MmE1LWFiY2QtNDFiMGYzYzFmZWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrUegMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFr/gub1HuRJYF7x1SqodgoTK+YJmc3gP6Nrp50sUhWfTRV9CSVeAtl2 ujL8wXSa65msEOhIEBg9jFPUW3reTy1n4KFnnka0XElHMH19lU0oT/t+Q1hYoJUd pVoYHhiYZvTQdzyVuCw4oIjlOeWjTwBVbjKldkC9q4nB6h5T5BKr4czPmemKwth1 1nbJiHmTMzXOJsSO4gdokMdezC4kwLARuHv5NP1M+fLL+hMevDjNSrCZL+CakHw5 7XoNLmpTCnw8u0aj/khZ9CEUvrG37KcmO/djrKBgDTJ5/fx02dteNeDhPPOj4XA4 EUXqWUOsp6vZCs51/IEJqxj4BWhTu6g= -----END CERTIFICATE-----Generated at Sat Aug 23 14:17:35 2025 by rpki-client