$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f4ec30ea-26cb-38d9-9131-0e5a9efce7ce.roa File: f4ec30ea-26cb-38d9-9131-0e5a9efce7ce.roa (raw, json) Hash identifier: nQSQqmpmdi2sucxX8dtdC54zWRUJ5we+dOnQBzTCVhQ= Subject key identifier: A4:71:99:13:37:DF:96:9B:57:AA:50:68:83:EF:71:8E:23:96:DD:D4 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD23BDD3E615EEAB2AB41BC80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f4ec30ea-26cb-38d9-9131-0e5a9efce7ce.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 701 IP address blocks: 71.168.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:dd:3e:61:5e:ea:b2:ab:41:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=f0e38bf9-0bc7-4fa5-a33d-087ced1f1bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ea:54:66:a4:4d:ca:44:76:f2:5c:50:ff:b2: 9f:31:2f:44:16:28:d3:f0:a9:23:dc:e5:8d:42:5a: a0:d4:8e:7e:30:d1:f6:e7:b1:6a:2c:6c:d1:24:fc: 6f:28:c5:52:10:99:5c:d8:9a:8c:74:be:bb:f7:9d: c9:ea:9d:bf:d1:55:ad:4e:d1:96:fb:19:b8:8f:26: 65:71:38:50:15:cd:3e:cb:3d:f1:6f:20:b3:65:dd: 9f:ec:69:ae:ef:73:75:1d:15:52:aa:44:a4:e0:de: 43:c3:4d:21:c4:cf:6c:74:2a:2b:62:5e:d4:67:fe: 8d:d6:9e:11:3a:e0:78:97:31:97:bf:47:8c:44:c7: 10:3a:a1:14:8b:99:14:32:ba:d1:f3:fb:24:45:2b: ae:fe:ad:c7:a5:0f:a9:56:b2:43:c5:45:b6:9c:88: e9:5d:c0:8a:96:de:2b:6d:17:3d:11:a5:ac:d9:72: f4:88:9d:08:6e:3f:e2:7e:61:cb:89:be:35:fb:d4: 0c:95:6e:0c:ed:26:92:eb:c3:a7:e2:90:47:f6:a3: f7:db:53:fd:31:c9:a8:1a:67:0c:a1:e1:d7:da:44: 99:c4:5e:42:05:1a:0e:2a:2b:a6:e3:e7:f3:bd:9d: fd:76:77:cb:17:7a:25:9b:f9:bb:a5:04:11:e7:1d: f3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:71:99:13:37:DF:96:9B:57:AA:50:68:83:EF:71:8E:23:96:DD:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f4ec30ea-26cb-38d9-9131-0e5a9efce7ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.168.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:d3:46:08:a9:97:0e:93:b1:76:66:f4:d9:70:06:b0:d9:96: 0c:d2:17:32:44:0e:4c:ce:bf:38:d5:3f:b3:f8:5e:ca:30:49: ff:2a:e2:77:bd:37:8f:b8:a8:2d:7d:7e:c6:e0:00:0e:84:a4: 48:05:fc:04:33:4e:03:25:55:66:2a:e0:cb:c6:4f:29:9a:3d: cb:89:aa:6e:ce:7a:b8:ce:ab:cc:f5:7e:7e:a4:f2:41:f7:b6: f8:c6:20:6f:27:03:af:2f:c7:39:4a:1e:04:f4:77:fb:b6:e6: 9f:89:da:85:f0:c1:e6:2c:38:09:ee:cf:9d:9f:22:51:96:d6: 29:b7:29:82:85:cb:0e:aa:50:0e:8a:80:a0:7a:80:1f:68:62: 55:f6:eb:ac:74:9b:e5:4a:ff:87:42:64:05:73:dc:3a:58:42: e3:89:53:97:84:1a:2b:32:9d:e1:67:38:28:e2:68:d7:91:f0: 85:c5:73:22:24:be:30:1b:24:8e:3a:86:f9:d1:d3:c9:77:46: ad:5b:b5:e9:98:46:99:ca:cc:3f:71:ea:d5:80:6f:6e:f8:fc: d2:75:01:1e:1e:d3:4c:e4:27:f3:12:e7:33:e0:11:42:bc:63: 57:4a:63:3d:98:d6:ef:e0:a2:17:88:54:83:01:e2:f0:52:f3: c2:77:58:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO90+YV7qsqtBvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZjBlMzhiZjktMGJjNy00ZmE1LWEzM2QtMDg3Y2VkMWYxYmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlepUZqRNykR28lxQ/7KfMS9EFijT8Kkj3OWN Qlqg1I5+MNH257FqLGzRJPxvKMVSEJlc2JqMdL67953J6p2/0VWtTtGW+xm4jyZl cThQFc0+yz3xbyCzZd2f7Gmu73N1HRVSqkSk4N5Dw00hxM9sdCorYl7UZ/6N1p4R OuB4lzGXv0eMRMcQOqEUi5kUMrrR8/skRSuu/q3HpQ+pVrJDxUW2nIjpXcCKlt4r bRc9EaWs2XL0iJ0Ibj/ifmHLib41+9QMlW4M7SaS68On4pBH9qP321P9McmoGmcM oeHX2kSZxF5CBRoOKium4+fzvZ39dnfLF3olm/m7pQQR5x3znwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRxmRM335abV6pQaIPvcY4jlt3UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjRlYzMwZWEtMjZjYi0z OGQ5LTkxMzEtMGU1YTllZmNlN2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHR6iAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALTTRgiplw6TsXZm9NlwBrDZlgzSFzJEDkzOvzjVP7P4XsowSf8q4ne9 N4+4qC19fsbgAA6EpEgF/AQzTgMlVWYq4MvGTymaPcuJqm7OerjOq8z1fn6k8kH3 tvjGIG8nA68vxzlKHgT0d/u25p+J2oXwweYsOAnuz52fIlGW1im3KYKFyw6qUA6K gKB6gB9oYlX266x0m+VK/4dCZAVz3DpYQuOJU5eEGisyneFnOCjiaNeR8IXFcyIk vjAbJI46hvnR08l3Rq1btemYRpnKzD9x6tWAb274/NJ1AR4e00zkJ/MS5zPgEUK8 Y1dKYz2Y1u/goheIVIMB4vBS88J3WFA= -----END CERTIFICATE-----Generated at Sat Aug 23 14:26:49 2025 by rpki-client