$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6c829838-1482-3a20-82ea-a9981a23fcae.roa File: 6c829838-1482-3a20-82ea-a9981a23fcae.roa (raw, json) Hash identifier: kpv8KPetJQaXjuDtwWrGQQLZ6/L1Ym2XFiM7z131kls= Subject key identifier: B2:83:83:F6:1D:08:58:7F:78:9E:53:C7:FA:CB:89:10:5B:BC:D1:AA Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD23C0C16322BE27DFBC4FD40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6c829838-1482-3a20-82ea-a9981a23fcae.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 701 IP address blocks: 70.21.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:0c:16:32:2b:e2:7d:fb:c4:fd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=dc2c6fbf-0a13-49e5-b634-d53e94e5bad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ea:cb:3c:bf:13:10:c5:b7:9f:ad:9f:77:f6: e3:cd:0d:af:eb:97:9a:80:31:91:60:01:b3:4a:88: 34:da:90:60:12:76:81:b9:32:60:07:a2:5f:26:12: 26:c7:1c:6a:f3:b6:ff:90:13:cb:be:5e:1d:f0:95: ce:ea:6c:24:61:0d:bc:ec:91:e7:f2:82:a1:56:5f: 92:90:1f:3b:0e:d4:d4:fa:90:0a:df:5f:24:56:c1: 74:27:39:df:be:04:78:b6:9c:35:81:61:7c:30:ae: 46:49:e9:8d:68:71:97:b1:b4:c6:ba:9f:d9:4b:4c: a0:09:6e:3b:e9:77:80:cb:47:d0:6b:50:08:05:8a: 93:e9:de:07:06:32:26:ac:12:c4:61:be:25:99:db: 07:4e:c7:28:54:38:05:32:33:48:21:85:4c:36:d9: c1:60:08:89:b6:11:b6:d5:f7:09:53:c7:cb:12:ff: 61:cb:11:db:cb:bd:99:42:14:10:fc:35:f7:30:94: 6f:43:dd:d8:82:58:77:97:03:51:a7:00:60:7c:51: e9:a0:07:fa:b0:fc:95:7e:ab:8d:38:27:97:77:cc: 16:22:2c:95:2e:cb:fd:f6:9b:e5:bf:fe:97:75:ac: fa:de:4c:6b:61:21:4e:cc:25:20:36:73:4c:e1:0a: dd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:83:83:F6:1D:08:58:7F:78:9E:53:C7:FA:CB:89:10:5B:BC:D1:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6c829838-1482-3a20-82ea-a9981a23fcae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 70.21.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:7c:1e:01:db:9c:d2:67:41:7f:99:b3:7e:d6:38:48:9e:73: 3d:28:4f:77:54:6e:a9:f9:8d:37:a4:0b:d3:1e:e5:2d:5e:d2: 50:b3:d3:ae:5c:8f:d1:e5:1e:c1:3b:20:62:7b:d5:d7:2e:44: ed:03:7d:39:88:2a:e6:30:7f:b3:2c:93:10:8e:9d:79:39:b0: 4c:72:d1:66:01:4f:ea:53:d0:02:12:cb:52:3d:4a:19:ca:79: 14:56:87:6c:a2:10:df:95:d4:0c:23:38:33:6d:16:e7:63:2c: 7b:3f:d7:a5:89:e1:a1:b2:3f:9c:fc:7a:c8:68:d4:93:f7:43: 27:15:4a:6e:75:a8:b6:69:5a:43:93:4a:cc:55:78:6d:c1:54: 9f:b0:6e:d1:ef:67:52:31:97:8a:05:48:ef:3f:36:d8:23:0e: 9a:43:2b:c7:b6:dc:05:b3:48:1c:b3:1a:40:97:2e:ff:10:97: b4:59:04:4f:91:ef:3a:21:ec:5a:df:16:e1:a4:19:55:f0:c5: e5:71:b9:6e:a1:c9:fa:a1:91:7d:98:88:65:60:c6:32:11:71: 5f:14:1b:b2:23:d6:da:ff:76:63:ab:cd:a7:22:22:c5:e1:95: 0a:1c:97:3d:ed:08:ce:3b:bd:88:2f:65:fd:ae:a5:ea:3a:f8: 91:ab:73:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSPAwWMiviffvE/UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZGMyYzZmYmYtMGExMy00OWU1LWI2MzQtZDUzZTk0ZTViYWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkerLPL8TEMW3n62fd/bjzQ2v65eagDGRYAGz Sog02pBgEnaBuTJgB6JfJhImxxxq87b/kBPLvl4d8JXO6mwkYQ287JHn8oKhVl+S kB87DtTU+pAK318kVsF0JznfvgR4tpw1gWF8MK5GSemNaHGXsbTGup/ZS0ygCW47 6XeAy0fQa1AIBYqT6d4HBjImrBLEYb4lmdsHTscoVDgFMjNIIYVMNtnBYAiJthG2 1fcJU8fLEv9hyxHby72ZQhQQ/DX3MJRvQ93Yglh3lwNRpwBgfFHpoAf6sPyVfquN OCeXd8wWIiyVLsv99pvlv/6Xdaz63kxrYSFOzCUgNnNM4Qrd/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKDg/YdCFh/eJ5Tx/rLiRBbvNGqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNmM4Mjk4MzgtMTQ4Mi0z YTIwLTgyZWEtYTk5ODFhMjNmY2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRhUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB58HgHbnNJnQX+Zs37WOEiecz0oT3dUbqn5jTekC9Me5S1e0lCz065c j9HlHsE7IGJ71dcuRO0DfTmIKuYwf7MskxCOnXk5sExy0WYBT+pT0AISy1I9ShnK eRRWh2yiEN+V1AwjODNtFudjLHs/16WJ4aGyP5z8esho1JP3QycVSm51qLZpWkOT SsxVeG3BVJ+wbtHvZ1Ixl4oFSO8/NtgjDppDK8e23AWzSByzGkCXLv8Ql7RZBE+R 7zoh7FrfFuGkGVXwxeVxuW6hyfqhkX2YiGVgxjIRcV8UG7Ij1tr/dmOrzaciIsXh lQoclz3tCM47vYgvZf2upeo6+JGrc/s= -----END CERTIFICATE-----Generated at Sat Aug 23 18:56:01 2025 by rpki-client