$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3ec3111-595e-378e-a332-2caa25072fb0.roa File: d3ec3111-595e-378e-a332-2caa25072fb0.roa (raw, json) Hash identifier: I8jPTC1jFGHRR+YUQYK93hJMraRY77kKtdPp65eG9nI= Subject key identifier: BB:D7:F0:42:FB:0F:C1:57:D9:39:07:4E:6F:F1:78:DD:EF:DD:26:D7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B1C370E6CCF585784B8155A00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3ec3111-595e-378e-a332-2caa25072fb0.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 701 IP address blocks: 71.161.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:0e:6c:cf:58:57:84:b8:15:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=dec5b1a3-ca5e-4e37-b781-322f86fd2234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:dc:13:fa:00:f2:b6:29:69:e1:87:db:7b:ac: 6c:9a:ad:fa:e6:9a:15:9f:7b:d8:9e:2c:63:69:95: 33:c1:81:a5:d2:6c:17:7d:70:0d:a2:e2:55:67:59: a3:d2:99:2d:b0:7b:99:f9:27:d9:c8:2b:b6:d0:8e: da:38:7d:2d:ce:b8:35:8a:07:35:f8:aa:27:3a:f6: 56:f8:40:44:57:b0:cb:25:58:e3:21:d0:14:3c:24: f4:2c:24:84:46:d5:39:fb:e6:ab:85:35:24:cc:b9: 31:3d:b0:12:40:f5:85:18:bf:12:7d:d1:99:41:b8: c2:48:00:50:7c:1d:e4:92:5b:9c:7b:cf:1a:eb:8c: ff:78:59:cc:d1:e0:f2:0d:1f:e5:37:a3:cc:48:ae: 98:e4:2f:38:52:ec:4e:16:d0:88:5f:0a:30:c3:22: 78:b6:9f:f9:52:c8:60:b1:2c:a9:11:a0:90:51:13: d4:7e:73:bc:d7:b1:52:f2:1f:ee:32:75:fa:0b:7a: fa:1a:35:18:89:96:d9:a1:d0:74:23:ac:07:7b:54: 6e:cb:44:0b:ce:cf:8d:c7:06:f4:cf:e2:f7:2b:5f: 35:be:02:ca:5d:a7:7f:37:8b:02:ca:c3:ee:7c:8f: 19:e5:cb:46:6c:7e:d4:d7:06:df:c7:8a:6a:f1:5b: 53:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D7:F0:42:FB:0F:C1:57:D9:39:07:4E:6F:F1:78:DD:EF:DD:26:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3ec3111-595e-378e-a332-2caa25072fb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.161.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:d7:d6:38:d3:c7:17:a5:51:4a:ac:43:4c:a6:f9:36:c3:09: b3:30:9f:da:c4:e1:bb:60:c3:4d:11:e4:39:7f:d7:1f:ef:c6: c5:7d:26:d2:f9:a9:f4:59:4b:43:af:40:26:cc:8e:b5:44:e5: ed:ab:0c:5d:15:62:c4:ee:32:60:89:04:50:33:73:89:b6:ee: e5:9e:a9:43:d9:a6:ba:1e:40:25:a1:e3:79:77:7e:ac:57:e1: ae:6a:6f:56:e1:c1:d3:fc:f6:2a:15:a2:90:99:3f:17:32:86: 57:2a:8a:58:98:fc:39:90:27:f9:42:de:8e:2a:02:48:4d:0b: aa:9a:13:b8:5f:f5:6b:1d:ea:7d:b5:5d:ff:68:a1:74:1f:68: c6:7b:50:4d:16:a2:af:53:6d:99:be:b8:c0:a3:1a:02:94:22: 7d:cf:37:74:a4:ad:e2:04:fb:23:de:24:cd:60:c1:b9:f2:35: e7:86:5b:fe:92:dd:96:33:ca:d5:72:3c:86:c6:79:5c:14:7c: f9:78:3d:dc:6e:db:bf:c8:df:ae:c3:27:87:4e:90:8e:8c:fc: cb:c6:dd:26:35:73:87:45:43:df:02:a2:d0:78:d2:ef:7e:53: b0:86:cb:76:fd:cb:56:05:38:52:34:2d:86:65:5d:9c:5d:7a: d7:2f:df:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNw5sz1hXhLgVWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZGVjNWIxYTMtY2E1ZS00ZTM3LWI3ODEtMzIyZjg2ZmQyMjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdwT+gDytilp4Yfbe6xsmq365poVn3vYnixj aZUzwYGl0mwXfXANouJVZ1mj0pktsHuZ+SfZyCu20I7aOH0tzrg1igc1+KonOvZW +EBEV7DLJVjjIdAUPCT0LCSERtU5++arhTUkzLkxPbASQPWFGL8SfdGZQbjCSABQ fB3kkluce88a64z/eFnM0eDyDR/lN6PMSK6Y5C84UuxOFtCIXwowwyJ4tp/5Ushg sSypEaCQURPUfnO817FS8h/uMnX6C3r6GjUYiZbZodB0I6wHe1Ruy0QLzs+Nxwb0 z+L3K181vgLKXad/N4sCysPufI8Z5ctGbH7U1wbfx4pq8VtTRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvX8EL7D8FX2TkHTm/xeN3v3SbXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDNlYzMxMTEtNTk1ZS0z NzhlLWEzMzItMmNhYTI1MDcyZmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGR6GAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzX1jjTxxelUUqsQ0ym+TbDCbMwn9rE4btgw00R5Dl/1x/vxsV9JtL5 qfRZS0OvQCbMjrVE5e2rDF0VYsTuMmCJBFAzc4m27uWeqUPZproeQCWh43l3fqxX 4a5qb1bhwdP89ioVopCZPxcyhlcqiliY/DmQJ/lC3o4qAkhNC6qaE7hf9Wsd6n21 Xf9ooXQfaMZ7UE0Woq9TbZm+uMCjGgKUIn3PN3SkreIE+yPeJM1gwbnyNeeGW/6S 3ZYzytVyPIbGeVwUfPl4Pdxu27/I367DJ4dOkI6M/MvG3SY1c4dFQ98CotB40u9+ U7CGy3b9y1YFOFI0LYZlXZxdetcv3+0= -----END CERTIFICATE-----Generated at Mon Oct 20 20:59:33 2025 by rpki-client