$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/bb072b22-497b-31d1-8292-b571a807b727.roa File: bb072b22-497b-31d1-8292-b571a807b727.roa (raw, json) Hash identifier: I1q4vFY1lZC2DDEH/zHuNMpcB0uzuFv/MZbsy7q413g= Subject key identifier: 0E:51:86:00:98:A5:2A:42:8E:0D:32:5F:65:A0:6D:12:A6:91:FC:0B Certificate issuer: /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Certificate serial: 010D0C9F4328584B1806C1C5C34F565959283200 Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/bb072b22-497b-31d1-8292-b571a807b727.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 138699 IP address blocks: 71.18.255.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:c1:c5:c3:4f:56:59:59:28:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=dd29ecab-ff18-45ac-9341-05cae9911fdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2f:7b:7a:12:b8:67:69:db:78:1b:eb:94:01: c1:25:e9:68:42:77:6d:6f:37:00:58:ce:7b:97:72: 56:ce:5a:be:90:37:96:44:ee:c3:58:bb:09:0e:c5: 42:f0:45:65:87:0f:ff:39:30:26:66:1b:ba:82:76: 6a:5d:25:c8:2c:dc:20:1a:b6:5b:11:46:09:3e:e1: ff:59:3e:d1:a9:c7:33:5d:52:e4:d9:f3:61:3f:d7: 0e:c9:66:82:ff:eb:d4:2b:49:df:83:82:d7:db:ee: de:53:5b:c8:88:c1:b8:76:2f:91:17:1b:c1:18:6f: 46:02:c8:8e:7c:c3:d9:81:ab:a9:5e:3b:c8:c7:05: 07:2b:8a:e6:b1:40:71:8b:16:e0:73:2f:12:72:38: 0d:30:cd:d7:cd:74:ec:c0:e9:8c:ed:38:36:13:91: 2e:31:30:7e:b0:f2:c4:88:cd:47:28:5a:13:e1:fc: a4:3a:cb:2e:0c:10:cd:29:b6:f3:93:9e:75:0a:08: ad:f1:30:0e:f0:f7:f0:29:c1:a2:32:7d:fb:59:fb: b0:46:4e:94:14:c4:dc:16:5d:ea:de:81:70:5a:c9: c7:20:7a:a2:87:d4:92:1e:f4:bc:9b:42:ca:49:19: 09:b2:80:c0:79:ce:25:cf:20:5e:f4:ef:5a:02:58: 9b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:51:86:00:98:A5:2A:42:8E:0D:32:5F:65:A0:6D:12:A6:91:FC:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/bb072b22-497b-31d1-8292-b571a807b727.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl X509v3 Authority Key Identifier: keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer sbgp-ipAddrBlock: critical IPv4: 71.18.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:01:d3:fd:3d:ee:5d:50:32:25:24:77:08:36:9c:4c:57:f6: 5a:04:c0:26:5a:c2:42:b4:b9:7f:ae:83:ff:63:f9:58:24:4e: dc:41:7a:1a:92:07:96:96:d0:1c:12:20:6b:6d:80:d8:37:2b: 96:af:11:22:61:4f:42:b5:75:31:1e:2c:b4:ac:42:c7:8f:70: ef:48:28:c5:8b:1d:a0:94:ba:ec:ce:a5:9d:5f:75:c3:74:7d: 23:02:39:8a:df:85:06:5f:9a:9f:41:5c:b3:b4:1a:0a:45:85: cc:fd:a1:85:dd:93:da:08:a6:2f:ca:fc:cc:92:4c:0a:0e:a7: d0:32:1e:26:3c:de:74:69:88:4e:56:a7:19:af:65:c6:33:62: 7e:fd:c3:3e:26:48:13:5a:e8:e7:df:71:c4:c0:10:46:00:60: 4e:56:0c:d0:ae:c2:8e:e9:ac:0c:fa:3b:79:66:11:a5:b5:ae: c8:50:c8:96:75:96:0e:c3:57:f1:e6:1b:a5:bc:ff:50:f7:d0: 6b:e3:fa:cc:ba:72:9f:02:20:3a:1f:fe:6b:b0:8e:43:40:36: 70:92:f0:3d:a5:92:61:c2:aa:15:da:98:5b:f6:6d:d1:c3:2a: af:7c:c3:ff:dd:00:a8:00:9b:79:6f:06:a1:09:4d:f4:36:12: fe:2a:f2:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBsHFw09WWVkoMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzM4YTUtN2M2MC00ZGM1LWIxZDgtMWM1MDRhNGVm MzQ1MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ZGQyOWVjYWItZmYxOC00NWFjLTkzNDEtMDVjYWU5OTExZmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4y97ehK4Z2nbeBvrlAHBJeloQndtbzcAWM57 l3JWzlq+kDeWRO7DWLsJDsVC8EVlhw//OTAmZhu6gnZqXSXILNwgGrZbEUYJPuH/ WT7RqcczXVLk2fNhP9cOyWaC/+vUK0nfg4LX2+7eU1vIiMG4di+RFxvBGG9GAsiO fMPZgaupXjvIxwUHK4rmsUBxixbgcy8ScjgNMM3XzXTswOmM7Tg2E5EuMTB+sPLE iM1HKFoT4fykOssuDBDNKbbzk551Cgit8TAO8PfwKcGiMn37WfuwRk6UFMTcFl3q 3oFwWsnHIHqih9SSHvS8m0LKSRkJsoDAec4lzyBe9O9aAlibIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5RhgCYpSpCjg0yX2WgbRKmkfwLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYz MzhhNS03YzYwLTRkYzUtYjFkOC0xYzUwNGE0ZWYzNDUvYmIwNzJiMjItNDk3Yi0z MWQxLTgyOTItYjU3MWE4MDdiNzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQ2MzM4YTUtN2M2MC00ZGM1LWIx ZDgtMWM1MDRhNGVmMzQ1LzFkNjMzOGE1LTdjNjAtNGRjNS1iMWQ4LTFjNTA0YTRl ZjM0NS5jcmwwHwYDVR0jBBgwFoAU2d97ozrzBBGTcYJwMlTvgkEtX1MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYzMzhhNS03YzYwLTRkYzUtYjFkOC0xYzUw NGE0ZWYzNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxL/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYB0/097l1QMiUkdwg2nExX9loEwCZawkK0uX+ug/9j+VgkTtxBehqS B5aW0BwSIGttgNg3K5avESJhT0K1dTEeLLSsQsePcO9IKMWLHaCUuuzOpZ1fdcN0 fSMCOYrfhQZfmp9BXLO0GgpFhcz9oYXdk9oIpi/K/MySTAoOp9AyHiY83nRpiE5W pxmvZcYzYn79wz4mSBNa6OffccTAEEYAYE5WDNCuwo7prAz6O3lmEaW1rshQyJZ1 lg7DV/HmG6W8/1D30Gvj+sy6cp8CIDof/muwjkNANnCS8D2lkmHCqhXamFv2bdHD Kq98w//dAKgAm3lvBqEJTfQ2Ev4q8jM= -----END CERTIFICATE-----Generated at Tue Sep 9 03:01:04 2025 by rpki-client