$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af0c3d71-ea07-3807-b361-49ad76e843f0.roa File: af0c3d71-ea07-3807-b361-49ad76e843f0.roa (raw, json) Hash identifier: lDV98VWxXyfYD1pl4EQq0lukh5m98pd3jUkaxZDB1Uc= Subject key identifier: E9:A4:8A:58:37:3F:83:91:BC:82:67:41:7A:36:2B:F6:68:12:D9:C4 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD23C0679A310645E0A794D80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af0c3d71-ea07-3807-b361-49ad76e843f0.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 701 IP address blocks: 70.110.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:06:79:a3:10:64:5e:0a:79:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=4b8a2254-1a84-4c30-8343-62980a40cd65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0e:3f:4e:21:d3:a8:9c:ee:a1:84:0a:10:44: 50:94:cb:2d:8f:04:fe:a9:c7:4b:e3:f6:92:e1:1d: bd:a3:ef:b3:18:ff:87:aa:f1:ab:d4:7b:11:cb:f6: af:52:3e:74:eb:74:bf:d0:23:11:d2:7b:04:50:fe: 21:fc:9e:41:8d:6e:5e:ae:7d:b9:dc:89:02:e4:1b: c3:1b:4f:1e:f8:05:16:88:05:a5:ac:22:95:71:90: a7:fd:6b:4e:67:cc:3b:84:4f:7e:50:40:b0:59:8a: 38:f9:7f:84:1f:d6:4d:f0:67:8d:2c:ce:49:c1:22: 99:49:0c:c0:b9:bc:bd:ab:50:9a:c7:de:10:1e:94: 4b:1e:f7:a4:80:14:be:06:f3:7b:3e:63:a1:da:53: bf:fb:e3:7d:b2:22:a2:8a:e5:e8:ca:a7:3c:db:b5: 8a:07:6c:0e:35:01:8b:66:01:20:68:09:e1:0a:c5: 22:7c:13:f4:3d:1f:c9:c8:3f:3b:1d:d2:2e:89:57: b6:87:d0:84:61:96:85:87:55:cb:86:64:ae:4c:02: 3a:14:77:5f:3f:21:fe:68:ae:92:e4:49:fa:9f:f3: dc:6e:ed:86:cb:ab:92:10:1a:b4:dc:df:1a:a2:31: 22:96:86:40:d3:69:75:45:ea:37:1d:45:89:5b:6f: 5c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A4:8A:58:37:3F:83:91:BC:82:67:41:7A:36:2B:F6:68:12:D9:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af0c3d71-ea07-3807-b361-49ad76e843f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 70.110.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:60:c5:fd:07:20:e7:77:7b:ff:b1:04:37:db:1e:06:de:d9: 8f:1f:f4:88:48:f1:9e:a6:43:7f:fa:d4:31:83:7b:88:8b:7c: e6:72:e4:68:83:ae:03:f4:f3:39:33:58:8c:8c:b2:fa:ff:63: 9e:34:55:49:c7:3e:33:21:56:11:6d:c1:5e:6e:cd:1a:37:82: 94:9e:b3:62:d5:27:69:10:db:cb:b7:d0:9a:f3:d2:d6:a0:b8: 3f:0c:72:29:7d:e9:eb:2d:6d:26:5e:1f:de:64:dd:71:36:e2: 8d:93:0c:c0:5c:e4:4e:1c:a5:7e:0f:d9:42:39:89:60:56:82: b4:55:0a:6e:b6:27:5c:fd:c5:a7:43:c7:e6:94:da:d6:cc:e1: 5c:29:5e:cb:06:7b:64:bf:57:b4:5f:e0:51:0a:9e:bc:a9:c4: af:97:c2:2d:b9:38:52:3a:f7:6f:d5:ff:f5:2e:25:0a:72:f5: 64:00:c3:ab:3c:37:ae:8a:e3:33:03:b9:f7:dc:ee:3c:7d:97: ac:f8:57:d9:7a:9d:1b:6d:f1:75:5a:eb:20:03:ca:46:bf:79: c8:4d:7d:d6:14:4a:45:d8:ac:cc:ac:3f:f5:fb:86:92:a8:95: f2:42:ca:85:d7:ce:f5:58:b0:49:ea:37:c0:c7:42:66:e2:a6: 51:9d:a8:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSPAZ5oxBkXgp5TYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NGI4YTIyNTQtMWE4NC00YzMwLTgzNDMtNjI5ODBhNDBjZDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg4/TiHTqJzuoYQKEERQlMstjwT+qcdL4/aS 4R29o++zGP+HqvGr1HsRy/avUj5063S/0CMR0nsEUP4h/J5BjW5ern253IkC5BvD G08e+AUWiAWlrCKVcZCn/WtOZ8w7hE9+UECwWYo4+X+EH9ZN8GeNLM5JwSKZSQzA uby9q1Cax94QHpRLHvekgBS+BvN7PmOh2lO/++N9siKiiuXoyqc827WKB2wONQGL ZgEgaAnhCsUifBP0PR/JyD87HdIuiVe2h9CEYZaFh1XLhmSuTAI6FHdfPyH+aK6S 5En6n/Pcbu2Gy6uSEBq03N8aojEiloZA02l1Reo3HUWJW29ciwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmkilg3P4ORvIJnQXo2K/ZoEtnEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWYwYzNkNzEtZWEwNy0z ODA3LWIzNjEtNDlhZDc2ZTg0M2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERm4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxgxf0HIOd3e/+xBDfbHgbe2Y8f9IhI8Z6mQ3/61DGDe4iLfOZy5GiD rgP08zkzWIyMsvr/Y540VUnHPjMhVhFtwV5uzRo3gpSes2LVJ2kQ28u30Jrz0tag uD8Mcil96estbSZeH95k3XE24o2TDMBc5E4cpX4P2UI5iWBWgrRVCm62J1z9xadD x+aU2tbM4VwpXssGe2S/V7Rf4FEKnrypxK+Xwi25OFI692/V//UuJQpy9WQAw6s8 N66K4zMDuffc7jx9l6z4V9l6nRtt8XVa6yADyka/echNfdYUSkXYrMysP/X7hpKo lfJCyoXXzvVYsEnqN8DHQmbiplGdqB8= -----END CERTIFICATE-----Generated at Sat Aug 23 14:19:41 2025 by rpki-client