$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3ec3111-595e-378e-a332-2caa25072fb0.roa File: d3ec3111-595e-378e-a332-2caa25072fb0.roa (raw, json) Hash identifier: /AYCFIxVRrhFGKq+adg+V0z6Rly06KeQU1Opyu11mXk= Subject key identifier: 26:7F:CA:09:70:4E:EE:98:C3:AA:F1:5D:09:FD:7E:BA:2D:58:8B:B1 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A3B7B3716727C2C716A495000 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3ec3111-595e-378e-a332-2caa25072fb0.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 701 IP address blocks: 71.161.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:37:16:72:7c:2c:71:6a:49:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=bf982a40-00c5-4cc9-8f42-95f2a5b6ecf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:bf:33:d2:fe:5b:19:4d:96:6c:ee:27:39:25: ca:41:aa:0b:98:f7:d6:d2:d9:27:42:54:6e:9f:d7: 1a:e6:07:3a:28:c1:3f:c9:9a:0d:56:4f:7c:11:a4: 29:6b:1d:ed:0f:29:2f:dd:62:96:ac:be:29:18:23: b7:b0:38:ba:f2:17:f4:6f:ae:15:2c:5f:ea:30:04: 88:21:43:d4:fb:87:2d:c3:06:31:1f:06:85:fb:96: 91:e7:64:1b:47:de:bc:d9:3a:b2:bd:fa:8d:2b:29: 25:42:a0:8d:4f:1d:ec:9e:f3:46:06:9e:a8:38:9e: 1d:bf:c0:33:bc:20:42:e6:4b:a3:89:d4:33:4c:46: 89:7f:5d:ec:b2:95:05:7a:62:44:91:ae:05:71:3a: 0e:c8:3d:64:4c:f3:ae:7a:ab:de:7c:cd:ae:14:45: 5b:c1:94:6d:00:75:39:ce:b1:a2:e8:df:86:c9:57: cc:f9:29:c1:e3:98:70:89:8e:10:f8:e8:15:a3:e0: e8:4e:b6:3b:50:b3:17:55:f2:92:e4:2b:a5:dd:e9: c0:f4:7f:a2:eb:3b:51:82:b5:b8:42:74:e8:65:a6: 2d:c1:eb:68:bb:1e:4b:3a:a4:49:97:0c:0e:e4:cc: f9:db:62:ec:09:d6:38:e4:4d:07:18:5e:3a:8a:ef: 16:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:7F:CA:09:70:4E:EE:98:C3:AA:F1:5D:09:FD:7E:BA:2D:58:8B:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3ec3111-595e-378e-a332-2caa25072fb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.161.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:2f:43:ed:58:d2:6c:ba:76:72:79:9d:8a:a1:9e:53:4f:e4: 46:fd:dc:ac:29:ff:cd:0a:3b:75:56:cb:55:d7:76:3c:31:ce: 18:aa:b9:78:96:f5:a9:79:43:d8:69:68:3d:b6:73:9d:f0:6a: d8:e7:10:d2:2f:bd:3f:46:fe:97:62:d8:de:85:28:2f:a8:4e: d9:34:33:ed:1c:05:33:0e:93:7f:76:fd:41:c8:1d:af:9b:55: c6:7a:19:4d:a0:48:9c:5d:a3:93:7a:ca:f9:93:63:45:49:5d: 66:85:ec:43:30:2f:cd:6c:1e:a1:94:45:9d:d9:c6:95:44:9b: ca:4c:e8:df:15:1e:9a:4d:0b:ef:05:16:7c:7d:eb:a4:73:8a: f1:11:2c:0b:dd:2c:38:48:ce:01:1f:23:25:ca:de:4b:c0:f1: d8:bd:70:cb:4a:9b:c8:e5:df:52:2b:c2:75:99:10:7d:06:5d: 2c:60:c7:34:bf:fb:4c:1f:aa:b2:f1:9d:ea:28:42:41:1a:68: 0d:d8:ad:5f:9f:bf:86:6e:ac:6e:b5:77:b1:7d:45:b8:42:c9: d3:22:c8:e3:df:e6:d4:de:1a:e0:c6:c4:42:ae:c2:7f:c1:8e: d4:5e:2a:80:9d:99:fc:3a:fc:20:67:55:d0:26:41:0f:c8:ea: 73:fe:6b:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ezcWcnwscWpJUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk YmY5ODJhNDAtMDBjNS00Y2M5LThmNDItOTVmMmE1YjZlY2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAir8z0v5bGU2WbO4nOSXKQaoLmPfW0tknQlRu n9ca5gc6KME/yZoNVk98EaQpax3tDykv3WKWrL4pGCO3sDi68hf0b64VLF/qMASI IUPU+4ctwwYxHwaF+5aR52QbR9682TqyvfqNKyklQqCNTx3snvNGBp6oOJ4dv8Az vCBC5kujidQzTEaJf13sspUFemJEka4FcToOyD1kTPOueqvefM2uFEVbwZRtAHU5 zrGi6N+GyVfM+SnB45hwiY4Q+OgVo+DoTrY7ULMXVfKS5Cul3enA9H+i6ztRgrW4 QnToZaYtwetoux5LOqRJlwwO5Mz522LsCdY45E0HGF46iu8W2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZ/yglwTu6Yw6rxXQn9frotWIuxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDNlYzMxMTEtNTk1ZS0z NzhlLWEzMzItMmNhYTI1MDcyZmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGR6GAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALgvQ+1Y0my6dnJ5nYqhnlNP5Eb93Kwp/80KO3VWy1XXdjwxzhiquXiW 9al5Q9hpaD22c53watjnENIvvT9G/pdi2N6FKC+oTtk0M+0cBTMOk392/UHIHa+b VcZ6GU2gSJxdo5N6yvmTY0VJXWaF7EMwL81sHqGURZ3ZxpVEm8pM6N8VHppNC+8F Fnx966RzivERLAvdLDhIzgEfIyXK3kvA8di9cMtKm8jl31IrwnWZEH0GXSxgxzS/ +0wfqrLxneooQkEaaA3YrV+fv4ZurG61d7F9RbhCydMiyOPf5tTeGuDGxEKuwn/B jtReKoCdmfw6/CBnVdAmQQ/I6nP+a3c= -----END CERTIFICATE-----Generated at Tue Jul 1 21:09:49 2025 by rpki-client