$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bfff5a63-343d-3ba6-a0be-5c191494d207.roa File: bfff5a63-343d-3ba6-a0be-5c191494d207.roa (raw, json) Hash identifier: +deqFYIDWtYZzuUHWzqxxHGkJ3U62LfYZn5m2LmefPM= Subject key identifier: 37:8B:94:60:3E:C4:D6:B2:AD:20:E5:20:D2:03:52:AF:5B:11:8E:C5 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD23C0CEA2CD6C2F017100D00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bfff5a63-343d-3ba6-a0be-5c191494d207.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 701 IP address blocks: 71.172.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:0c:ea:2c:d6:c2:f0:17:10:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=db27a245-cb24-4076-b601-f99485fd4abb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a9:cd:3e:bf:de:f0:bb:82:29:23:ab:bb:d7: 00:29:45:f9:81:1c:ae:0c:4c:11:5e:1c:77:b6:a2: 68:ad:c3:4c:b2:f9:e9:29:22:e1:2f:af:ad:0b:58: 7b:41:b7:2f:e1:4b:4f:33:9b:39:19:8c:e9:26:b0: 90:00:b1:d7:90:10:15:ca:ee:4c:2e:4b:97:0c:ad: bd:3f:26:c3:3b:0a:e6:2e:d0:6f:a6:cb:d5:0e:60: 00:86:8b:e6:c0:e3:4c:b5:39:92:41:84:9a:1a:1a: 5c:90:5a:27:60:7a:d6:56:30:ef:bf:1d:51:8d:96: 10:02:47:e6:26:58:e5:26:14:a6:f4:71:a6:05:1f: 54:35:d0:80:e9:c5:4f:05:54:eb:d4:f0:08:b3:35: 71:45:6e:d3:07:88:6f:85:c3:5e:cc:b0:f4:5b:8d: 8d:c6:c8:04:8b:78:eb:24:99:ea:9f:93:c1:53:e7: ca:80:03:52:70:c9:6e:71:92:03:e9:33:98:ec:41: 22:cf:e9:2f:22:fd:99:a7:26:be:a7:93:fc:4e:1e: 92:8d:ed:b9:50:67:6d:68:24:6d:90:99:db:38:ca: ce:c5:6d:30:eb:b8:03:4a:4d:d4:8a:bd:b6:be:07: 1f:65:b5:84:04:12:92:d2:0d:79:dc:66:f1:01:ac: ea:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:8B:94:60:3E:C4:D6:B2:AD:20:E5:20:D2:03:52:AF:5B:11:8E:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bfff5a63-343d-3ba6-a0be-5c191494d207.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.172.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:12:92:46:92:f3:d0:d7:34:5c:c1:81:2f:e5:cc:a2:35:8c: 81:78:36:f5:68:4a:3e:d3:24:36:42:50:28:99:a4:8f:74:b5: da:16:a6:1b:b9:f4:55:12:fd:07:71:1f:9d:db:d5:07:a8:ba: 89:0e:b4:2d:38:73:0a:69:1b:c6:5b:52:6a:57:83:86:c2:ac: 4d:dd:36:28:f1:37:29:e9:99:7b:b8:32:99:7c:14:d3:c0:b1: 55:01:46:2a:3a:9a:c1:ba:21:7a:a1:c0:a2:85:df:e1:93:05: de:40:3d:c9:63:38:3f:78:e7:b2:03:82:74:99:16:ca:0c:8b: c3:ef:5d:59:5b:66:af:66:37:7d:48:ce:d0:6f:0f:5a:a9:eb: 1c:87:f4:af:2b:59:c1:b3:25:8b:93:f7:c6:e9:5f:f6:04:d7: 19:f8:a7:fa:96:eb:ff:e4:25:89:0b:2b:fd:e1:e7:18:45:8e: 2f:be:14:0d:c8:0d:59:30:25:3d:75:83:11:40:c9:74:86:75: 16:ac:1d:4c:23:a0:65:0e:14:87:bd:4b:cd:3a:f3:25:bc:16: f5:8c:f2:6c:c8:b4:fa:7a:32:da:51:5a:7a:78:72:ca:59:3d: dd:55:d7:89:63:48:71:99:76:9a:55:d5:16:34:84:08:3a:7c: 57:26:d7:ab -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErSPAzqLNbC8BcQDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZGIyN2EyNDUtY2IyNC00MDc2LWI2MDEtZjk5NDg1ZmQ0YWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6nNPr/e8LuCKSOru9cAKUX5gRyuDEwRXhx3 tqJorcNMsvnpKSLhL6+tC1h7Qbcv4UtPM5s5GYzpJrCQALHXkBAVyu5MLkuXDK29 PybDOwrmLtBvpsvVDmAAhovmwONMtTmSQYSaGhpckFonYHrWVjDvvx1RjZYQAkfm JljlJhSm9HGmBR9UNdCA6cVPBVTr1PAIszVxRW7TB4hvhcNezLD0W42NxsgEi3jr JJnqn5PBU+fKgANScMlucZID6TOY7EEiz+kvIv2Zpya+p5P8Th6Sje25UGdtaCRt kJnbOMrOxW0w67gDSk3Uir22vgcfZbWEBBKS0g153GbxAazqjwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDeLlGA+xNayrSDlINIDUq9bEY7FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmZmZjVhNjMtMzQzZC0z YmE2LWEwYmUtNWMxOTE0OTRkMjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAR6wwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAUBKSRpLz0Nc0XMGBL+XMojWMgXg29WhKPtMkNkJQKJmkj3S12hamG7n0 VRL9B3EfndvVB6i6iQ60LThzCmkbxltSaleDhsKsTd02KPE3KemZe7gymXwU08Cx VQFGKjqawboheqHAooXf4ZMF3kA9yWM4P3jnsgOCdJkWygyLw+9dWVtmr2Y3fUjO 0G8PWqnrHIf0rytZwbMli5P3xulf9gTXGfin+pbr/+QliQsr/eHnGEWOL74UDcgN WTAlPXWDEUDJdIZ1FqwdTCOgZQ4Uh71LzTrzJbwW9YzybMi0+noy2lFaenhyylk9 3VXXiWNIcZl2mlXVFjSECDp8VybXqw== -----END CERTIFICATE-----Generated at Sat Aug 23 16:44:15 2025 by rpki-client