$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7f1758a6-5831-32e5-8f4b-1bbc9ebf225b.roa File: 7f1758a6-5831-32e5-8f4b-1bbc9ebf225b.roa (raw, json) Hash identifier: j/GOBD1eA+HOLaM3s95/SW6VinfCpKCQV8bvR69tx0E= Subject key identifier: 24:2A:07:E1:0E:3D:10:48:AF:C1:E0:FC:AF:99:F9:7A:59:53:47:BA Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B2496FA3F4303128543269380 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7f1758a6-5831-32e5-8f4b-1bbc9ebf225b.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 6167 IP address blocks: 75.217.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:fa:3f:43:03:12:85:43:26:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=4d9324e1-2b24-4a84-a955-c5cba75f8cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:44:89:7a:e2:76:54:64:99:a8:63:54:7b:85: 96:97:c1:a2:77:60:48:a5:ac:9c:47:dc:99:f0:b4: a9:93:4a:c8:eb:c2:c1:04:af:85:81:af:5e:1b:3a: 40:ce:70:a2:34:3c:f9:db:78:4f:58:af:22:2e:17: d4:c3:f1:90:09:cc:4e:80:d7:bf:08:d5:2c:9e:93: 09:f6:df:dc:e8:60:0f:1f:a0:39:02:6a:36:3b:49: 8b:8c:27:85:d3:eb:bd:16:09:ee:98:5f:7d:ce:a7: 54:76:73:d5:3d:d3:26:cf:52:c9:3c:50:cf:e1:c0: 94:9b:5a:4d:09:b6:e2:bf:3a:cb:d3:58:20:ec:3b: fe:c8:39:b4:40:40:5f:26:9b:db:74:2e:14:66:dc: c3:f8:ff:90:53:4c:13:83:44:50:0c:ea:e2:fe:20: 37:e6:28:4d:0e:32:d3:d2:4a:21:c1:18:d5:ce:05: 4e:01:36:37:61:72:a1:dc:36:ed:1d:4d:ac:74:3e: d6:07:19:c3:63:7b:e0:b7:6a:8b:5d:da:1d:8f:cf: d5:c4:51:1f:90:fa:db:12:cc:43:a0:e8:39:b0:28: 33:82:85:e8:1b:27:da:66:ea:c6:f6:b5:0b:2d:e3: 2a:7a:eb:37:13:eb:1c:29:b6:b6:cb:5d:ac:3d:2c: 91:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:2A:07:E1:0E:3D:10:48:AF:C1:E0:FC:AF:99:F9:7A:59:53:47:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7f1758a6-5831-32e5-8f4b-1bbc9ebf225b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 75.217.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:33:8d:1b:98:3f:44:38:56:e7:9e:51:19:01:72:6b:34:cf: aa:86:8a:61:66:72:f8:f4:68:fc:15:31:f0:f2:7f:a5:95:b9: fc:fc:ae:cc:6e:98:39:c0:3f:72:61:9a:04:cd:4b:de:be:8b: b6:f7:e5:c7:5e:ed:ed:e9:42:07:4f:a9:1b:49:fe:ff:e7:d3: 9c:eb:ab:0b:d8:94:45:2d:5f:98:af:ab:41:bf:32:aa:f9:be: ea:e3:29:e2:7c:c5:42:79:31:05:87:70:42:4c:21:62:63:3e: 81:b2:f1:90:f0:f3:67:8b:9f:a8:04:23:6f:17:e4:5d:94:be: 7f:51:27:9a:22:5a:d9:32:f6:48:33:26:b8:76:b9:0a:a0:b9: 20:3e:70:a3:d6:2e:3c:fc:60:15:d1:25:b5:c2:32:c3:ef:41: b0:c0:bd:ea:31:09:8e:b0:b6:33:9b:76:64:e4:4f:90:ab:38: 4c:8e:84:ba:54:eb:bd:d6:77:15:02:45:58:ae:59:b5:bd:85: 57:7b:75:8c:39:33:b9:c1:1f:11:98:b0:aa:40:46:aa:c8:51: 43:bd:d5:fd:df:11:13:37:e5:f3:1c:30:10:c0:f8:46:a7:f6: eb:0a:56:98:0b:76:62:c8:1f:a0:66:84:10:b0:24:af:c2:af: 5d:bd:a2:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsklvo/QwMShUMmk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk NGQ5MzI0ZTEtMmIyNC00YTg0LWE5NTUtYzVjYmE3NWY4Y2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUSJeuJ2VGSZqGNUe4WWl8Gid2BIpaycR9yZ 8LSpk0rI68LBBK+Fga9eGzpAznCiNDz523hPWK8iLhfUw/GQCcxOgNe/CNUsnpMJ 9t/c6GAPH6A5Amo2O0mLjCeF0+u9FgnumF99zqdUdnPVPdMmz1LJPFDP4cCUm1pN CbbivzrL01gg7Dv+yDm0QEBfJpvbdC4UZtzD+P+QU0wTg0RQDOri/iA35ihNDjLT 0kohwRjVzgVOATY3YXKh3DbtHU2sdD7WBxnDY3vgt2qLXdodj8/VxFEfkPrbEsxD oOg5sCgzgoXoGyfaZurG9rULLeMqeus3E+scKba2y12sPSyRbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQqB+EOPRBIr8Hg/K+Z+XpZU0e6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvN2YxNzU4YTYtNTgzMS0z MmU1LThmNGItMWJiYzllYmYyMjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHS9kAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0zjRuYP0Q4VueeURkBcms0z6qGimFmcvj0aPwVMfDyf6WVufz8rsxu mDnAP3JhmgTNS96+i7b35cde7e3pQgdPqRtJ/v/n05zrqwvYlEUtX5ivq0G/Mqr5 vurjKeJ8xUJ5MQWHcEJMIWJjPoGy8ZDw82eLn6gEI28X5F2Uvn9RJ5oiWtky9kgz Jrh2uQqguSA+cKPWLjz8YBXRJbXCMsPvQbDAveoxCY6wtjObdmTkT5CrOEyOhLpU 673WdxUCRViuWbW9hVd7dYw5M7nBHxGYsKpARqrIUUO91f3fERM35fMcMBDA+Ean 9usKVpgLdmLIH6BmhBCwJK/Cr129oss= -----END CERTIFICATE-----Generated at Fri Oct 10 17:53:57 2025 by rpki-client