$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e2a40072-660c-387c-aa54-4c08e164d25a.roa File: e2a40072-660c-387c-aa54-4c08e164d25a.roa (raw, json) Hash identifier: xHYmI+XO1o4C55sd8YCNUw2AFNmuuntNSvpljRo811Y= Subject key identifier: B6:34:B3:4E:EB:60:38:A9:52:4F:44:F6:4F:3B:57:88:63:C5:7A:87 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B1C36D7DD01CDAE74B34BC4E0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e2a40072-660c-387c-aa54-4c08e164d25a.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 701 IP address blocks: 71.173.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:d7:dd:01:cd:ae:74:b3:4b:c4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=5d49d0c8-9434-4fb9-97ec-acb977267bd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:45:24:50:13:57:46:97:29:09:ee:73:fe:a9: bd:d5:14:4b:65:ae:89:64:21:b0:7b:e9:4d:c3:80: 4d:6f:2e:69:cf:9a:d7:72:af:d7:56:7d:a0:79:8d: 3d:35:e8:41:d0:ec:33:0e:a3:07:52:a2:6a:88:e9: 3c:63:1e:d5:89:89:2a:ad:90:a2:ac:9a:a7:d2:59: 58:2e:a8:47:8c:01:e6:c8:33:e4:4a:42:f3:5e:d3: 40:ee:c1:9c:71:0f:18:88:73:29:27:6f:37:f2:09: dd:b4:0e:1a:66:be:8f:dd:61:e2:43:cb:79:1a:9a: 85:5a:47:85:89:cc:3a:c5:02:ce:36:99:e7:83:f4: 6c:1d:fa:4b:36:8e:5c:ca:ef:1a:5c:c2:48:ab:b3: b4:bb:6c:6f:16:5f:f8:b2:29:95:60:97:82:6f:77: ef:0b:8f:89:cf:20:e5:92:7d:03:68:12:14:78:fc: c4:ee:84:0c:ec:2e:e1:af:5a:38:10:38:0f:9b:bc: 5e:d1:29:cb:74:e1:ef:81:18:8b:79:3f:f1:63:8d: be:2a:07:d6:18:3c:f0:f6:a7:f5:d6:97:cb:be:44: 0c:cb:31:49:88:16:1c:58:b7:40:c1:83:87:fe:8d: 11:29:3d:6e:07:78:69:97:f4:be:f4:30:d4:2f:0e: e8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:34:B3:4E:EB:60:38:A9:52:4F:44:F6:4F:3B:57:88:63:C5:7A:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e2a40072-660c-387c-aa54-4c08e164d25a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.173.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:f9:82:b8:fa:af:65:50:d4:82:dc:d2:d0:fd:9d:37:43:78: 71:53:6e:12:fe:1f:c4:87:f3:89:0d:a9:0a:3f:d4:a2:82:07: 92:68:a4:ea:06:47:3c:65:3e:81:45:7b:b4:ed:f6:57:05:2c: 3c:df:0c:3d:24:03:e5:3e:b0:1b:aa:c0:8f:95:f9:a7:0b:b4: 65:88:f1:44:f6:ed:f6:35:00:11:d8:08:92:33:0b:7b:72:f4: 43:13:cc:9b:86:fc:2f:f0:8f:40:61:54:9e:35:0f:e8:3d:de: 06:82:9e:24:9a:a0:7b:88:de:1a:96:57:d9:8a:32:1f:34:76: 56:94:4b:af:0c:48:94:bc:8f:e2:3d:74:59:1f:bc:33:d3:c1: 41:87:0e:f0:80:c9:a6:93:40:84:a1:25:55:10:6b:cf:b7:66: fa:9f:ed:3f:4e:99:09:a6:20:48:f4:e9:03:9e:1e:40:cb:8d: 62:9c:16:de:29:18:a5:65:13:34:20:dd:91:12:e3:71:c9:c7: 35:79:14:db:8b:3a:d6:9a:e2:66:39:ce:90:25:90:ca:09:ab: 05:84:57:69:e0:87:41:9c:a9:96:ee:18:58:fd:81:4e:c6:a8: 93:c7:e1:09:3a:1d:81:ed:42:f9:ff:d5:ef:42:8e:9d:6d:82: a2:f0:24:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNtfdAc2udLNLxOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NWQ0OWQwYzgtOTQzNC00ZmI5LTk3ZWMtYWNiOTc3MjY3YmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UUkUBNXRpcpCe5z/qm91RRLZa6JZCGwe+lN w4BNby5pz5rXcq/XVn2geY09NehB0OwzDqMHUqJqiOk8Yx7ViYkqrZCirJqn0llY LqhHjAHmyDPkSkLzXtNA7sGccQ8YiHMpJ2838gndtA4aZr6P3WHiQ8t5GpqFWkeF icw6xQLONpnng/RsHfpLNo5cyu8aXMJIq7O0u2xvFl/4simVYJeCb3fvC4+JzyDl kn0DaBIUePzE7oQM7C7hr1o4EDgPm7xe0SnLdOHvgRiLeT/xY42+KgfWGDzw9qf1 1pfLvkQMyzFJiBYcWLdAwYOH/o0RKT1uB3hpl/S+9DDULw7oVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLY0s07rYDipUk9E9k87V4hjxXqHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTJhNDAwNzItNjYwYy0z ODdjLWFhNTQtNGMwOGUxNjRkMjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFR61gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHv5grj6r2VQ1ILc0tD9nTdDeHFTbhL+H8SH84kNqQo/1KKCB5JopOoG RzxlPoFFe7Tt9lcFLDzfDD0kA+U+sBuqwI+V+acLtGWI8UT27fY1ABHYCJIzC3ty 9EMTzJuG/C/wj0BhVJ41D+g93gaCniSaoHuI3hqWV9mKMh80dlaUS68MSJS8j+I9 dFkfvDPTwUGHDvCAyaaTQIShJVUQa8+3Zvqf7T9OmQmmIEj06QOeHkDLjWKcFt4p GKVlEzQg3ZES43HJxzV5FNuLOtaa4mY5zpAlkMoJqwWEV2ngh0GcqZbuGFj9gU7G qJPH4Qk6HYHtQvn/1e9Cjp1tgqLwJGE= -----END CERTIFICATE-----Generated at Fri Oct 10 19:58:33 2025 by rpki-client