$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b386437f-6f43-3c00-bc75-7d4d139543d5.roa File: b386437f-6f43-3c00-bc75-7d4d139543d5.roa (raw, json) Hash identifier: /XbQ7TUwyHPX8WMgkxS03B3mUsvDxvLt3Xg/HwQeVDk= Subject key identifier: 82:EE:96:78:F6:16:3D:F3:77:54:7A:93:FE:03:2C:90:5E:1D:39:D5 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD23BDCA2CE8E9565D3862680 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b386437f-6f43-3c00-bc75-7d4d139543d5.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 701 IP address blocks: 70.17.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:dc:a2:ce:8e:95:65:d3:86:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=c0bc98da-9d18-4c00-bc7b-ee81192ec957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:48:d2:d1:18:a5:c3:50:11:5c:d8:64:e7:17: 19:cd:fa:59:0e:cb:38:90:23:a0:35:1c:50:a4:7c: ae:9f:29:a4:a4:02:b4:cf:5e:75:eb:9f:48:85:d6: 15:ae:51:77:02:39:b6:c4:e9:0b:fc:f3:03:30:e5: 0f:a5:55:f9:63:13:be:b7:ab:13:b1:a6:e7:94:87: 44:00:d7:73:29:1b:b3:c3:4d:26:c7:40:81:c3:ab: 57:1f:3e:46:6f:37:2f:62:8e:7e:93:31:60:ac:b5: de:a1:19:77:b0:28:eb:6b:cc:88:8b:d3:5d:8c:67: c3:2b:5d:4b:a6:25:fd:07:3d:69:73:93:a3:a5:89: 79:20:40:7b:ba:30:62:6f:6b:80:fe:34:c3:bb:85: 02:fb:28:ab:2f:7c:87:0b:e2:7e:df:84:44:f6:2b: 18:f7:b4:bf:4e:48:74:2b:28:36:09:bb:49:13:9a: 74:9f:52:44:24:d1:30:10:f1:b6:9f:41:0d:b6:64: 9d:b6:d9:2b:54:68:c2:46:b5:46:17:8f:c5:c7:67: 5f:72:22:fe:0b:33:d4:3f:61:fe:5d:97:d5:3d:4e: 20:33:cb:87:bb:68:8b:42:b9:3e:d6:62:64:4a:af: de:b1:30:8b:24:33:c5:34:02:e6:4a:c1:c9:ed:2d: c6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:EE:96:78:F6:16:3D:F3:77:54:7A:93:FE:03:2C:90:5E:1D:39:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b386437f-6f43-3c00-bc75-7d4d139543d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 70.17.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:b0:ec:ae:d7:c7:80:aa:ac:c9:c5:49:65:77:48:b9:4d:49: 5a:ed:69:19:c2:ce:b6:e8:be:c8:2d:4b:a0:6c:a9:0b:a3:b3: bc:5e:fb:87:ae:08:3f:19:cd:29:40:3c:5d:e7:63:6a:7b:69: 0a:4d:d7:d0:f8:7e:af:74:c8:e1:c7:08:15:c5:09:79:c3:65: 78:c0:ec:ba:01:06:ab:e1:8a:fe:e9:9c:a3:ac:db:94:3a:d8: 5e:e0:ef:7c:68:32:d0:c3:1b:39:9e:8f:8d:21:38:6b:b5:47: 6c:29:63:2c:dc:b2:8b:07:05:12:4a:06:12:a0:e8:01:c1:9d: a4:45:c9:82:bb:4a:15:cf:6e:80:30:d3:9a:41:61:11:0a:ec: 8f:e4:47:6c:6f:d3:80:68:ec:79:0a:ab:55:e7:ca:a0:a0:95: 74:54:90:49:c6:ba:6b:e3:18:c4:72:cc:e2:ff:a4:1d:fa:df: d4:05:16:e6:3e:85:a3:85:7b:ff:2a:55:58:f5:63:2d:9a:d5: bb:eb:ce:bb:3d:23:4a:4d:62:d9:88:40:f5:fc:66:20:5c:93: 38:02:42:86:64:9b:95:72:59:a5:99:0e:97:49:01:84:52:8a: ef:9a:81:d4:3c:1a:41:95:54:05:79:a9:cc:3e:bb:da:cd:ec: 2b:42:65:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO9yizo6VZdOGJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk YzBiYzk4ZGEtOWQxOC00YzAwLWJjN2ItZWU4MTE5MmVjOTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEjS0Rilw1ARXNhk5xcZzfpZDss4kCOgNRxQ pHyunymkpAK0z151659IhdYVrlF3Ajm2xOkL/PMDMOUPpVX5YxO+t6sTsabnlIdE ANdzKRuzw00mx0CBw6tXHz5GbzcvYo5+kzFgrLXeoRl3sCjra8yIi9NdjGfDK11L piX9Bz1pc5OjpYl5IEB7ujBib2uA/jTDu4UC+yirL3yHC+J+34RE9isY97S/Tkh0 Kyg2CbtJE5p0n1JEJNEwEPG2n0ENtmSdttkrVGjCRrVGF4/Fx2dfciL+CzPUP2H+ XZfVPU4gM8uHu2iLQrk+1mJkSq/esTCLJDPFNALmSsHJ7S3GkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILulnj2Fj3zd1R6k/4DLJBeHTnVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjM4NjQzN2YtNmY0My0z YzAwLWJjNzUtN2Q0ZDEzOTU0M2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRhHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALSw7K7Xx4CqrMnFSWV3SLlNSVrtaRnCzrbovsgtS6BsqQujs7xe+4eu CD8ZzSlAPF3nY2p7aQpN19D4fq90yOHHCBXFCXnDZXjA7LoBBqvhiv7pnKOs25Q6 2F7g73xoMtDDGzmej40hOGu1R2wpYyzcsosHBRJKBhKg6AHBnaRFyYK7ShXPboAw 05pBYREK7I/kR2xv04Bo7HkKq1XnyqCglXRUkEnGumvjGMRyzOL/pB3639QFFuY+ haOFe/8qVVj1Yy2a1bvrzrs9I0pNYtmIQPX8ZiBckzgCQoZkm5VyWaWZDpdJAYRS iu+agdQ8GkGVVAV5qcw+u9rN7CtCZUk= -----END CERTIFICATE-----Generated at Sat Aug 23 21:01:49 2025 by rpki-client