$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aaaf6ba2-fd76-3cd9-8542-b3caadd37801.roa File: aaaf6ba2-fd76-3cd9-8542-b3caadd37801.roa (raw, json) Hash identifier: C5sMk5m6MgS7xJUJVuk9UnvcuSmLL4e+BJiCHiqy2Ro= Subject key identifier: 5A:FC:75:17:98:DB:AC:36:E4:CF:F2:01:8D:05:2E:B7:FF:B9:7B:67 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584ACB410B0A629AB9F64138D080 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aaaf6ba2-fd76-3cd9-8542-b3caadd37801.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 701 IP address blocks: 71.243.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:0b:0a:62:9a:b9:f6:41:38:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=3b68b4fe-8710-44f0-821a-fec58fe4b395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bc:fa:79:b6:cf:82:35:1a:68:f5:64:47:dd: 4e:58:ac:0f:b9:24:24:d2:d5:2f:86:68:4e:1b:1a: 19:ef:66:32:7f:63:15:ba:dc:d1:14:73:8b:5b:68: d4:50:11:4b:49:c5:fd:b8:ac:8f:10:f3:39:a4:38: dc:67:7f:18:6e:81:3f:d0:e2:c3:4f:35:e8:7b:4f: e4:ea:5c:d0:bf:d6:88:a6:b1:26:41:e7:6f:2d:a5: f7:14:35:63:54:29:94:74:fe:7b:95:9d:b4:eb:be: fe:b3:7c:bd:70:b6:f7:fe:11:d9:26:52:1f:66:69: cc:dc:78:81:bc:98:14:cd:30:b6:b3:09:49:87:8c: 91:d9:d6:1a:e2:fa:fa:3e:35:d4:53:1f:16:8d:31: 43:09:e8:04:53:fb:19:4d:e8:7b:23:d4:e6:5f:9b: 50:39:bb:2a:72:00:ad:fe:03:65:58:42:57:d0:35: c4:3f:14:65:7f:7e:ec:8e:cd:98:dc:0a:4d:ab:95: be:14:93:d0:5d:ea:6f:15:0b:2d:74:e8:66:c4:a1: 8f:fa:b9:34:d8:a1:7b:61:36:3b:39:37:d0:e5:6f: 32:26:b2:59:7d:85:fe:fc:2b:23:35:a6:44:a5:db: 2d:e0:36:43:cd:07:4b:fa:d9:91:a8:30:5f:ad:7e: e5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:FC:75:17:98:DB:AC:36:E4:CF:F2:01:8D:05:2E:B7:FF:B9:7B:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aaaf6ba2-fd76-3cd9-8542-b3caadd37801.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.243.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:cf:15:e8:7f:bb:ab:79:6a:ab:4f:4a:1a:d4:2b:c7:f5:18: 31:17:ac:72:8f:8f:bf:47:40:dc:df:4e:93:76:26:2c:ab:3d: e0:fa:f5:fd:d1:72:d6:44:df:88:ad:ae:ed:c0:0b:ea:67:5f: 34:18:d8:ee:7c:31:86:6e:95:68:c9:9c:06:d9:1f:3f:08:77: 2b:4b:7b:0b:38:d3:8f:29:02:43:ce:4f:2d:30:16:d1:89:58: 33:65:4e:17:ca:84:c3:ae:50:7a:72:fa:58:7c:da:7a:11:fa: 43:64:7d:47:a4:7f:09:b5:07:7e:08:c6:8c:d4:3a:ff:03:38: ef:36:78:c6:4c:73:f5:1c:03:6a:0b:20:78:dc:26:fe:61:5f: 77:f3:cf:72:70:65:a9:45:ff:06:38:2e:90:7f:8f:94:f0:bc: c2:31:85:1d:c6:93:00:6e:f8:4e:cf:45:bc:b6:d7:da:60:76: fb:60:8b:5b:27:5e:7f:94:ad:e1:3c:57:4f:ef:a4:74:d9:c2: 29:05:f2:d2:04:7d:be:46:76:05:49:cf:85:71:b5:23:6b:97: 70:66:5a:54:2a:42:92:3a:14:e3:3f:0e:0b:0a:f0:7f:97:e2: 84:a0:4e:e3:1c:41:e2:28:b9:e3:b9:96:ae:0f:76:78:e2:2d: 0c:e6:f7:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQQsKYpq59kE40IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk M2I2OGI0ZmUtODcxMC00NGYwLTgyMWEtZmVjNThmZTRiMzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7z6ebbPgjUaaPVkR91OWKwPuSQk0tUvhmhO GxoZ72Yyf2MVutzRFHOLW2jUUBFLScX9uKyPEPM5pDjcZ38YboE/0OLDTzXoe0/k 6lzQv9aIprEmQedvLaX3FDVjVCmUdP57lZ20677+s3y9cLb3/hHZJlIfZmnM3HiB vJgUzTC2swlJh4yR2dYa4vr6PjXUUx8WjTFDCegEU/sZTeh7I9TmX5tQObsqcgCt /gNlWEJX0DXEPxRlf37sjs2Y3ApNq5W+FJPQXepvFQstdOhmxKGP+rk02KF7YTY7 OTfQ5W8yJrJZfYX+/CsjNaZEpdst4DZDzQdL+tmRqDBfrX7lWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFr8dReY26w25M/yAY0FLrf/uXtnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWFhZjZiYTItZmQ3Ni0z Y2Q5LTg1NDItYjNjYWFkZDM3ODAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGR/OAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrPFeh/u6t5aqtPShrUK8f1GDEXrHKPj79HQNzfTpN2JiyrPeD69f3R ctZE34itru3AC+pnXzQY2O58MYZulWjJnAbZHz8IdytLews4048pAkPOTy0wFtGJ WDNlThfKhMOuUHpy+lh82noR+kNkfUekfwm1B34IxozUOv8DOO82eMZMc/UcA2oL IHjcJv5hX3fzz3JwZalF/wY4LpB/j5TwvMIxhR3GkwBu+E7PRby219pgdvtgi1sn Xn+UreE8V0/vpHTZwikF8tIEfb5GdgVJz4VxtSNrl3BmWlQqQpI6FOM/DgsK8H+X 4oSgTuMcQeIoueO5lq4PdnjiLQzm99Y= -----END CERTIFICATE-----Generated at Mon Oct 20 20:22:37 2025 by rpki-client