$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f65d5195-60de-310a-8203-1d33283550e0.roa File: f65d5195-60de-310a-8203-1d33283550e0.roa (raw, json) Hash identifier: bxsZVwTkYFyxC6IA/GsN2vjTrg+6N8vpJxeWPLMI72s= Subject key identifier: 31:D2:E1:80:56:A2:45:3D:80:67:5D:62:25:EB:13:83:57:56:06:A8 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A71EB396D59F124524B0034C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f65d5195-60de-310a-8203-1d33283550e0.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 0 IP address blocks: 71.4.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:39:6d:59:f1:24:52:4b:00:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=f5952e06-d17c-4f22-bcac-68458a5f43bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:76:98:f7:b1:b1:9d:ea:9b:f0:a2:f8:cd:98: d8:a1:a8:20:53:20:ba:6d:6a:16:b0:ab:d7:40:b2: 76:06:3b:db:c1:f0:37:2f:33:6a:b5:5f:98:65:dd: 75:31:53:4a:f9:8a:12:ed:f4:ca:fe:e6:48:50:c8: 6d:85:b8:b9:7f:19:3e:e8:8b:ac:6d:28:0d:80:f6: c9:8b:de:13:3d:ac:6c:b8:08:c7:92:9f:c9:88:d6: 44:e6:28:fd:10:e7:a7:46:06:72:e0:4d:cb:71:f7: e9:b0:42:de:70:90:7c:97:46:7b:cf:82:f3:d7:49: 31:eb:e4:9a:b7:43:b5:d7:60:97:a1:8c:e4:9a:9b: 24:df:57:74:10:3d:c4:db:1d:86:b5:64:4d:46:29: da:af:9e:18:04:32:e5:c2:5b:8a:df:a3:1b:a2:f4: 4c:1b:69:23:e1:68:4a:b5:11:84:ae:31:c8:7a:35: be:e4:b3:f7:f2:62:ab:4a:9c:c1:0d:fc:a0:99:71: df:f3:51:32:e5:c3:29:d5:3d:95:8b:e8:32:b7:d7: c1:1c:ba:7b:68:66:1e:d9:0c:5d:25:39:52:3d:07: a1:80:a9:0a:d7:fd:63:1a:c0:83:fc:fa:35:ad:32: b1:91:b2:cd:74:40:47:bc:ef:b5:d6:cb:06:0c:5c: 02:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D2:E1:80:56:A2:45:3D:80:67:5D:62:25:EB:13:83:57:56:06:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f65d5195-60de-310a-8203-1d33283550e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.4.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:48:c7:b5:28:39:b7:58:9e:72:c1:1e:d9:4d:ef:d0:92:10: 89:6c:64:b1:9a:24:3f:fa:8a:5c:f3:ca:09:98:8a:d8:70:19: 84:91:d7:7e:4f:ee:23:d1:81:56:15:ae:5d:81:19:f5:bc:a6: 56:61:9e:9e:49:89:f0:9c:aa:8e:7d:40:d2:62:78:e3:20:3b: 45:a7:a4:fd:4d:0f:8a:4a:75:f5:3b:4a:4f:5e:42:fe:10:e7: 96:74:1f:b6:cb:88:f5:bb:84:1a:64:88:90:de:de:67:19:67: 8c:1d:9d:b7:d0:34:d2:0d:a8:94:c0:65:31:81:84:1d:13:10: 34:39:bd:0a:f2:db:f9:af:8d:1f:2d:4b:ef:9e:19:5c:fd:cb: 3d:75:4d:d2:95:62:a9:6d:4d:64:0f:6c:6d:79:d8:b8:b3:24: 29:a4:f2:75:78:d2:06:05:c9:9c:b5:ad:24:15:bf:d3:03:57: a5:fe:bb:bc:c1:a9:52:3e:32:bb:b1:d2:cb:c9:a1:59:a9:55: 7a:7c:cb:34:3f:39:00:2a:f0:1e:dc:3e:9d:ed:9e:27:eb:2c: 7e:b2:21:63:47:e1:a8:81:54:a9:47:57:39:19:96:aa:f4:2e: 0e:e6:a3:49:a7:f0:f0:2b:6c:f3:39:83:d0:c3:62:74:51:e0: 74:bf:1a:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx6zltWfEkUksANMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk ZjU5NTJlMDYtZDE3Yy00ZjIyLWJjYWMtNjg0NThhNWY0M2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnaY97Gxneqb8KL4zZjYoaggUyC6bWoWsKvX QLJ2BjvbwfA3LzNqtV+YZd11MVNK+YoS7fTK/uZIUMhthbi5fxk+6IusbSgNgPbJ i94TPaxsuAjHkp/JiNZE5ij9EOenRgZy4E3LcffpsELecJB8l0Z7z4Lz10kx6+Sa t0O112CXoYzkmpsk31d0ED3E2x2GtWRNRinar54YBDLlwluK36MbovRMG2kj4WhK tRGErjHIejW+5LP38mKrSpzBDfygmXHf81Ey5cMp1T2Vi+gyt9fBHLp7aGYe2Qxd JTlSPQehgKkK1/1jGsCD/Po1rTKxkbLNdEBHvO+11ssGDFwCCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHS4YBWokU9gGddYiXrE4NXVgaoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjY1ZDUxOTUtNjBkZS0z MTBhLTgyMDMtMWQzMzI4MzU1MGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRwQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALVIx7UoObdYnnLBHtlN79CSEIlsZLGaJD/6ilzzygmYithwGYSR135P 7iPRgVYVrl2BGfW8plZhnp5JifCcqo59QNJieOMgO0WnpP1ND4pKdfU7Sk9eQv4Q 55Z0H7bLiPW7hBpkiJDe3mcZZ4wdnbfQNNINqJTAZTGBhB0TEDQ5vQry2/mvjR8t S++eGVz9yz11TdKVYqltTWQPbG152LizJCmk8nV40gYFyZy1rSQVv9MDV6X+u7zB qVI+Mrux0svJoVmpVXp8yzQ/OQAq8B7cPp3tnifrLH6yIWNH4aiBVKlHVzkZlqr0 Lg7mo0mn8PArbPM5g9DDYnRR4HS/Gjk= -----END CERTIFICATE-----Generated at Wed Jul 9 22:11:57 2025 by rpki-client