$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eff5f3cc-d054-3ac1-a62e-481bf8f9d7b3.roa File: eff5f3cc-d054-3ac1-a62e-481bf8f9d7b3.roa (raw, json) Hash identifier: GFmFxI1G+NTinsAlu9/M97+I6Vefog7ekUTk0Wmgem8= Subject key identifier: 52:75:35:A5:AC:54:25:5B:A8:2D:6A:C7:B9:3A:F2:F6:81:00:B5:91 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD23C0C3B13D19B93D5B1C200 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eff5f3cc-d054-3ac1-a62e-481bf8f9d7b3.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 701 IP address blocks: 70.21.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:0c:3b:13:d1:9b:93:d5:b1:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=2500d563-ce75-4db4-8b3c-ca6ecfef0cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:42:9a:a9:fa:3d:41:98:4c:74:71:b3:d7:8a: 12:34:1f:b4:e2:9d:0e:14:35:0b:bd:b9:9b:4f:41: a0:95:42:1b:ec:24:a2:5d:af:4b:57:78:42:99:48: 0f:43:40:21:1c:66:d8:b6:2e:55:49:96:b5:a6:43: 13:a0:38:0f:49:40:27:5f:8a:ae:bf:03:0e:45:a6: c7:e2:7a:24:29:8d:d3:8f:97:5e:8a:33:15:08:9b: f9:36:98:43:59:dc:72:a7:4e:93:3a:1b:ee:45:9d: 53:65:fc:d6:58:60:13:33:b9:d3:b0:61:93:75:e6: 79:d1:bd:9a:2f:a2:2c:37:21:89:e8:98:66:b8:c8: b7:5e:63:af:57:92:c8:0a:82:03:f0:2b:5a:5d:18: f3:24:34:77:21:1c:9c:11:1e:93:5b:18:72:e5:fd: 48:8e:de:31:9b:90:64:ad:0f:27:6f:53:28:b0:02: 13:9f:55:84:bf:45:42:61:a7:d8:72:da:8a:8d:63: 72:40:d6:5b:3d:71:b7:1a:d4:78:9c:ad:54:89:7a: 75:7f:c1:f5:5b:25:e3:88:5d:ff:76:b5:e2:2b:99: 6c:a2:73:ac:cd:e7:64:8e:82:75:45:42:a1:4b:b6: 5f:21:c1:79:e2:11:33:bb:1e:1f:4a:b7:e6:7f:b5: 71:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:75:35:A5:AC:54:25:5B:A8:2D:6A:C7:B9:3A:F2:F6:81:00:B5:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eff5f3cc-d054-3ac1-a62e-481bf8f9d7b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 70.21.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:38:d7:e1:78:5e:6f:52:24:ed:38:4c:db:89:e2:81:10:7e: 22:5c:7e:54:06:c7:d0:9e:50:ad:16:63:d3:39:4d:a6:86:6a: 29:1e:2d:41:8d:1f:6e:ce:41:7e:ea:7d:27:c9:d4:c5:ef:34: ff:39:7b:bc:64:b9:bc:2b:97:2e:aa:16:b2:91:3e:e1:11:85: 5b:5c:3b:1a:4d:2e:58:09:89:69:40:1a:6e:97:fc:f1:49:69: 27:44:4a:a7:f2:9d:33:dd:23:0d:f6:e2:ed:4f:4c:59:59:7f: a6:ec:fc:04:d3:6f:c1:ed:d6:47:fe:c9:01:2e:76:ff:f3:10: 6e:34:af:06:96:c8:e4:43:83:3d:1d:08:ca:34:c3:b4:c4:b7: 72:00:e1:03:33:1b:34:33:3e:4c:a0:30:44:18:90:ec:6c:40: bd:87:6e:90:96:a2:2e:7e:5d:b7:25:59:40:25:56:ac:e7:53: aa:22:8c:30:6a:47:8a:f5:cb:26:dc:7f:55:35:de:f7:56:6b: d1:8f:8f:8e:24:1d:bc:a0:c4:37:b8:86:86:5f:be:48:e4:45: f4:03:13:69:cd:f9:f3:0e:ce:9f:8e:58:f5:63:1a:ef:9d:89: 45:57:76:32:02:80:7a:53:9a:3f:99:e5:e7:11:15:07:4f:e7: 74:62:f6:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSPAw7E9Gbk9WxwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MjUwMGQ1NjMtY2U3NS00ZGI0LThiM2MtY2E2ZWNmZWYwY2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkKaqfo9QZhMdHGz14oSNB+04p0OFDULvbmb T0GglUIb7CSiXa9LV3hCmUgPQ0AhHGbYti5VSZa1pkMToDgPSUAnX4quvwMORabH 4nokKY3Tj5deijMVCJv5NphDWdxyp06TOhvuRZ1TZfzWWGATM7nTsGGTdeZ50b2a L6IsNyGJ6JhmuMi3XmOvV5LICoID8CtaXRjzJDR3IRycER6TWxhy5f1Ijt4xm5Bk rQ8nb1MosAITn1WEv0VCYafYctqKjWNyQNZbPXG3GtR4nK1UiXp1f8H1WyXjiF3/ drXiK5lsonOszedkjoJ1RUKhS7ZfIcF54hEzux4fSrfmf7VxewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJ1NaWsVCVbqC1qx7k68vaBALWRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZWZmNWYzY2MtZDA1NC0z YWMxLWE2MmUtNDgxYmY4ZjlkN2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRhWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIs41+F4Xm9SJO04TNuJ4oEQfiJcflQGx9CeUK0WY9M5TaaGaikeLUGN H27OQX7qfSfJ1MXvNP85e7xkubwrly6qFrKRPuERhVtcOxpNLlgJiWlAGm6X/PFJ aSdESqfynTPdIw324u1PTFlZf6bs/ATTb8Ht1kf+yQEudv/zEG40rwaWyORDgz0d CMo0w7TEt3IA4QMzGzQzPkygMEQYkOxsQL2HbpCWoi5+XbclWUAlVqznU6oijDBq R4r1yybcf1U13vdWa9GPj44kHbygxDe4hoZfvkjkRfQDE2nN+fMOzp+OWPVjGu+d iUVXdjICgHpTmj+Z5ecRFQdP53Ri9nI= -----END CERTIFICATE-----Generated at Sat Aug 23 15:47:57 2025 by rpki-client