$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4b7fad58-ac2d-399c-9b5d-74071b4a9e5e.roa File: 4b7fad58-ac2d-399c-9b5d-74071b4a9e5e.roa (raw, json) Hash identifier: QhjJO8K3N9iJsPCjw3+QNzPN0FOTsFAJVbTgEXZy8S4= Subject key identifier: F7:70:79:28:F4:B7:02:84:F9:8C:95:75:72:52:B1:D4:B5:4E:36:94 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD23C1485EB825DD1309A69C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4b7fad58-ac2d-399c-9b5d-74071b4a9e5e.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 701 IP address blocks: 173.54.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:14:85:eb:82:5d:d1:30:9a:69:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=a3ae091a-8afb-464a-8c5b-92ab4b0844a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:13:84:a5:fa:63:2f:5a:c4:a5:03:3d:96:3b: b0:c4:c9:d6:9c:66:df:4d:05:cc:68:2a:ef:5c:c8: 0e:a2:97:8f:ec:e0:9e:e2:ee:f9:bb:56:4e:a9:e3: c6:ae:3f:44:c0:e8:dc:5b:74:4d:b8:29:46:1d:35: 83:5d:bb:c9:e1:c1:77:b5:86:82:08:1a:75:fe:a1: 1c:e8:be:17:6a:89:1d:f0:3e:e7:eb:1e:d6:92:0c: 64:c5:ef:b4:d0:a2:e9:26:b7:ea:d6:53:6f:07:a7: cf:d8:4c:3e:63:3d:b0:51:5e:06:8e:0d:09:9c:91: e5:59:f0:b8:0f:82:2b:19:f5:92:03:cf:42:37:51: c1:39:0e:55:90:e1:c2:21:d2:de:10:f2:46:51:a9: 13:e9:94:76:3b:2a:7a:b8:a1:c3:fa:46:aa:d5:51: 34:31:e7:a9:00:80:8c:a3:b4:15:18:fe:01:21:aa: 68:cd:8c:a3:8f:54:b4:fd:fb:4d:1b:b0:d7:16:65: 5c:7c:cb:db:b8:e9:6e:68:d2:49:ba:7f:4e:5e:d4: c7:fb:07:3e:af:a0:72:5d:84:36:82:49:0f:42:f3: 49:01:e9:e0:6e:78:be:32:38:6f:6c:d1:84:21:17: 1e:62:14:95:f6:b1:97:ca:cb:53:20:60:81:49:00: f4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:70:79:28:F4:B7:02:84:F9:8C:95:75:72:52:B1:D4:B5:4E:36:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4b7fad58-ac2d-399c-9b5d-74071b4a9e5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 173.54.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:a2:91:0f:fe:ce:e7:89:53:c7:c2:78:61:e2:11:72:78:e8: 08:70:37:fd:15:d5:13:f5:fe:7b:52:07:f3:2a:6d:24:36:50: cb:59:16:e7:60:cc:1a:b1:e8:51:82:db:82:9c:d1:51:c0:0c: bb:da:2c:6d:5a:05:64:d8:0f:da:71:ae:b0:46:79:47:dc:a3: a7:a7:2f:5a:0b:18:61:6e:08:57:40:92:52:b8:24:1e:06:14: 7a:77:79:35:88:02:7e:e0:21:eb:10:0c:56:d2:1d:ad:9d:4d: fa:8b:82:79:4f:4c:25:52:b5:64:fb:af:94:5e:ee:dd:c2:ea: 05:37:7f:e3:b0:55:6f:be:f6:dd:3f:fc:60:73:1d:ed:f5:77: ef:8e:b2:c0:0f:e1:f6:51:08:05:90:52:58:84:51:03:5c:b2: 4c:32:bc:7d:7d:15:94:f5:ab:bd:c7:53:24:6b:9b:57:f1:4c: 98:ae:3e:c8:a8:e5:f1:19:19:37:1b:81:3e:c1:37:1a:30:43: 1b:4b:11:e1:6f:1e:27:a7:4e:fe:a5:2c:51:5a:29:97:1b:22: 9b:0c:96:1f:2a:b9:3a:f6:04:ce:40:09:53:dc:62:2b:97:7f: 28:f4:b7:4c:39:00:05:92:7a:61:14:89:11:24:b9:93:87:01: a5:9f:dd:38 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErSPBSF64Jd0TCaacAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk YTNhZTA5MWEtOGFmYi00NjRhLThjNWItOTJhYjRiMDg0NGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoROEpfpjL1rEpQM9ljuwxMnWnGbfTQXMaCrv XMgOopeP7OCe4u75u1ZOqePGrj9EwOjcW3RNuClGHTWDXbvJ4cF3tYaCCBp1/qEc 6L4Xaokd8D7n6x7Wkgxkxe+00KLpJrfq1lNvB6fP2Ew+Yz2wUV4Gjg0JnJHlWfC4 D4IrGfWSA89CN1HBOQ5VkOHCIdLeEPJGUakT6ZR2Oyp6uKHD+kaq1VE0MeepAICM o7QVGP4BIapozYyjj1S0/ftNG7DXFmVcfMvbuOluaNJJun9OXtTH+wc+r6ByXYQ2 gkkPQvNJAengbni+MjhvbNGEIRceYhSV9rGXystTIGCBSQD0QQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPdweSj0twKE+YyVdXJSsdS1TjaUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGI3ZmFkNTgtYWMyZC0z OTljLTliNWQtNzQwNzFiNGE5ZTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMArTYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAA6KRD/7O54lTx8J4YeIRcnjoCHA3/RXVE/X+e1IH8yptJDZQy1kW52DM GrHoUYLbgpzRUcAMu9osbVoFZNgP2nGusEZ5R9yjp6cvWgsYYW4IV0CSUrgkHgYU end5NYgCfuAh6xAMVtIdrZ1N+ouCeU9MJVK1ZPuvlF7u3cLqBTd/47BVb7723T/8 YHMd7fV3746ywA/h9lEIBZBSWIRRA1yyTDK8fX0VlPWrvcdTJGubV/FMmK4+yKjl 8RkZNxuBPsE3GjBDG0sR4W8eJ6dO/qUsUVoplxsimwyWHyq5OvYEzkAJU9xiK5d/ KPS3TDkABZJ6YRSJESS5k4cBpZ/dOA== -----END CERTIFICATE-----Generated at Mon Oct 20 20:22:28 2025 by rpki-client