$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70db925b-72c6-31de-bede-8dfe1846dad0.roa File: 70db925b-72c6-31de-bede-8dfe1846dad0.roa (raw, json) Hash identifier: UlRp/1+ArEBz9HFz0vfkrSTxGsV4oRv+qQ1X9jvNbtM= Subject key identifier: 89:81:15:6D:3A:F3:8B:51:EB:2E:AD:F7:FF:FF:9A:7D:C5:86:04:4F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD23C0EBDF9B84239DC6626C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70db925b-72c6-31de-bede-8dfe1846dad0.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 701 IP address blocks: 100.4.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:0e:bd:f9:b8:42:39:dc:66:26:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=cdc6c590-e538-4698-ac55-b8c30d9b1aea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a3:2c:a1:a4:6a:bf:48:6a:04:fb:02:66:3b: 52:42:34:7f:a4:3c:e9:09:f5:ae:a8:f1:01:f6:08: 1f:8e:9b:95:b6:d8:ec:54:51:e3:de:5f:f6:48:0b: aa:6d:4f:bd:8d:d5:6f:45:9e:68:6e:b0:b6:b2:20: 65:06:4b:94:13:eb:45:d5:e9:20:3d:1e:bb:64:f7: a8:36:f0:96:4f:54:2e:1a:cb:db:58:51:78:d7:f7: 2a:8f:06:00:ec:6b:c8:4e:0d:08:62:31:0b:5e:27: be:3b:cb:e8:85:b9:ee:8e:ac:b9:97:8c:0b:3d:a2: 17:a5:89:c1:63:12:01:79:14:70:1f:21:b9:2f:cb: 94:af:d9:f0:18:8a:3f:50:70:f3:3c:db:f3:7f:22: ce:af:7e:f9:43:6b:08:94:0e:82:ec:29:ae:2c:a3: 2b:8a:f2:e7:55:90:bd:de:78:65:37:d6:12:1e:d0: 13:c1:37:ff:56:fd:bf:52:c8:54:39:99:c3:ec:36: c1:8e:85:96:26:95:bd:5a:38:2d:80:7d:7b:f8:be: 9e:ba:52:c3:cd:ac:8b:31:66:9a:de:80:b7:8c:54: 82:e6:5c:a6:61:47:f2:6e:da:d1:46:a7:66:e3:04: 07:33:6a:db:1a:d5:1d:52:33:a8:70:01:84:13:db: 9a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:81:15:6D:3A:F3:8B:51:EB:2E:AD:F7:FF:FF:9A:7D:C5:86:04:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70db925b-72c6-31de-bede-8dfe1846dad0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 100.4.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:09:d0:75:eb:f3:04:4d:24:98:cc:18:53:8f:80:83:d3:3a: 72:4c:e9:57:83:34:9b:e2:16:bc:f6:6d:c2:d4:11:40:c9:dd: ac:7a:6f:60:b4:36:e4:79:a5:0b:e0:09:7f:52:5a:71:a0:15: 7f:14:a9:92:a9:75:d4:f0:43:e6:0a:f1:bb:54:36:77:9b:7a: 1f:63:16:3f:37:91:ee:ab:40:b5:bb:5b:e4:7c:0d:88:4f:c4: 60:23:e6:55:91:52:cd:bb:db:38:a2:05:3d:3b:e3:5f:1a:ae: 0e:95:07:3b:4c:70:9a:d8:c5:4b:d2:d7:48:29:cb:e4:7e:85: f4:95:5e:ea:1b:c9:39:1d:f7:30:46:b0:0e:76:cf:bd:67:78: 8d:12:84:16:b5:ed:1c:22:a7:dd:e3:ea:b7:8f:e3:69:c8:85: 44:e7:4f:b9:67:42:5d:13:d7:27:c7:9d:2c:3d:eb:c7:43:87: ac:23:5c:ef:e8:3d:3d:f7:60:00:d2:4c:f0:99:f4:35:c6:46: 95:25:f9:db:f4:a0:55:9a:87:67:f7:01:3f:ef:37:9a:8f:09: f9:7a:36:fe:87:fe:62:01:51:94:8a:fe:76:9e:88:33:45:82: f1:59:03:7b:05:a4:88:71:55:1c:c9:3c:f4:a2:4c:5c:b2:94: 31:f9:37:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSPA69+bhCOdxmJsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk Y2RjNmM1OTAtZTUzOC00Njk4LWFjNTUtYjhjMzBkOWIxYWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6MsoaRqv0hqBPsCZjtSQjR/pDzpCfWuqPEB 9ggfjpuVttjsVFHj3l/2SAuqbU+9jdVvRZ5obrC2siBlBkuUE+tF1ekgPR67ZPeo NvCWT1QuGsvbWFF41/cqjwYA7GvITg0IYjELXie+O8vohbnujqy5l4wLPaIXpYnB YxIBeRRwHyG5L8uUr9nwGIo/UHDzPNvzfyLOr375Q2sIlA6C7CmuLKMrivLnVZC9 3nhlN9YSHtATwTf/Vv2/UshUOZnD7DbBjoWWJpW9WjgtgH17+L6eulLDzayLMWaa 3oC3jFSC5lymYUfybtrRRqdm4wQHM2rbGtUdUjOocAGEE9ua9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImBFW0684tR6y6t9///mn3FhgRPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzBkYjkyNWItNzJjNi0z MWRlLWJlZGUtOGRmZTE4NDZkYWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHZASAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4J0HXr8wRNJJjMGFOPgIPTOnJM6VeDNJviFrz2bcLUEUDJ3ax6b2C0 NuR5pQvgCX9SWnGgFX8UqZKpddTwQ+YK8btUNnebeh9jFj83ke6rQLW7W+R8DYhP xGAj5lWRUs272ziiBT07418arg6VBztMcJrYxUvS10gpy+R+hfSVXuobyTkd9zBG sA52z71neI0ShBa17Rwip93j6reP42nIhUTnT7lnQl0T1yfHnSw968dDh6wjXO/o PT33YADSTPCZ9DXGRpUl+dv0oFWah2f3AT/vN5qPCfl6Nv6H/mIBUZSK/naeiDNF gvFZA3sFpIhxVRzJPPSiTFyylDH5N+g= -----END CERTIFICATE-----Generated at Sat Aug 23 17:14:21 2025 by rpki-client