$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b/61fb58e7-0397-34be-86e6-64888ec57856.roa File: 61fb58e7-0397-34be-86e6-64888ec57856.roa (raw, json) Hash identifier: ZEKuZKqVIWnczyh8ioKw7eMEvxIrr73q971+1z9ubJE= Subject key identifier: 9E:7A:03:44:53:30:DE:9C:BD:5F:71:D0:4B:3A:2E:21:90:DE:4C:72 Certificate issuer: /CN=013a0a78-7dfb-463d-ba0e-c131820a6f4b Certificate serial: 010D0C9F4328584BAA97A461852850DB13B87380 Authority key identifier: 67:F1:AA:88:58:F4:A5:5B:2A:BD:38:5D:64:11:54:8E:91:7D:0A:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b/61fb58e7-0397-34be-86e6-64888ec57856.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 393941 IP address blocks: 198.29.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b/013a0a78-7dfb-463d-ba0e-c131820a6f4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b/013a0a78-7dfb-463d-ba0e-c131820a6f4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:a4:61:85:28:50:db:13:b8:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=013a0a78-7dfb-463d-ba0e-c131820a6f4b Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=06eca46c-ab62-4bc5-bf6b-b852d51b19de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:71:85:ca:4f:07:2f:8c:1c:ae:e3:64:c4:bd: 29:4a:88:b2:c1:e3:f1:3b:bf:27:77:f4:82:ae:c2: 26:76:34:21:47:f0:55:da:f4:a7:1a:1e:7e:e0:0c: 8f:f3:13:91:76:28:c8:05:e7:e3:6d:37:b5:8f:db: f2:a6:2f:b3:9d:7d:9a:39:90:f1:ff:ab:ed:b1:6c: 52:01:6c:7b:34:ad:1d:2f:b1:a4:bf:95:8a:77:dc: cd:bb:db:ca:da:52:6a:3b:f8:73:8e:93:e8:0f:53: b2:48:8c:60:3c:a3:6b:c4:fc:5a:00:55:43:29:fd: c9:d0:22:7d:f9:3b:08:d3:26:ea:27:8b:91:95:a7: 4a:e0:aa:01:4c:23:3f:1a:d2:31:43:61:e9:0c:42: a2:ae:8d:16:e8:c9:6c:d5:aa:eb:22:c1:f1:4d:38: d3:1e:11:ee:61:cf:8e:06:5c:26:06:7d:91:77:c1: 21:d8:e8:d7:29:b6:e8:14:01:b0:4e:5f:0b:34:5d: 11:7b:9f:4e:41:6b:e9:7e:ba:e8:ca:21:0e:6a:24: 9f:93:00:1f:40:8c:08:e1:51:c2:a9:21:1a:be:94: c8:fe:79:23:8e:9e:59:6e:33:8e:c4:46:b0:9b:7d: 9d:2b:bd:a6:8c:9f:41:16:4d:a0:93:3a:bd:ed:72: 68:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7A:03:44:53:30:DE:9C:BD:5F:71:D0:4B:3A:2E:21:90:DE:4C:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b/61fb58e7-0397-34be-86e6-64888ec57856.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b/013a0a78-7dfb-463d-ba0e-c131820a6f4b.crl X509v3 Authority Key Identifier: keyid:67:F1:AA:88:58:F4:A5:5B:2A:BD:38:5D:64:11:54:8E:91:7D:0A:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/013a0a78-7dfb-463d-ba0e-c131820a6f4b.cer sbgp-ipAddrBlock: critical IPv4: 198.29.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:8e:b8:f0:87:90:b3:b4:70:de:f2:e4:5a:e8:e9:2f:19:47: e6:62:8f:02:80:74:28:4c:1f:94:89:6d:1e:5f:00:67:54:83: f3:c2:e5:57:c7:2c:14:ed:88:fd:50:89:8f:e2:44:c5:5a:73: 9d:4b:35:29:85:a0:18:69:12:94:78:c9:98:2b:7c:b7:54:57: 2f:e0:87:5b:5e:aa:ff:98:19:79:a7:d4:e9:04:75:e3:a4:ca: 17:ad:60:34:ca:84:fd:d3:b7:0a:70:9d:3a:9a:09:b7:3c:9e: 2a:05:c5:3d:dd:00:2a:22:c0:ca:0a:eb:40:59:2a:c2:46:9c: 59:8e:d9:90:8d:8a:b3:6c:05:ff:05:bf:a5:5a:b5:1d:b7:fd: 92:2a:d7:f8:fd:42:ab:9f:d0:35:cb:84:63:77:5a:e9:92:07: 16:59:9b:7e:30:9b:0b:05:6c:b6:ab:a7:6b:12:1f:74:d1:6c: 2c:95:3c:77:8c:a6:bf:60:2e:86:de:80:fb:47:7a:62:8c:80: aa:e0:3d:48:6c:0d:f0:fc:92:ac:5a:7e:da:f5:d6:4b:28:cc: bb:c1:09:f3:93:c3:06:f6:b4:a4:37:6a:ef:9a:01:a3:de:ca: e4:37:25:66:b8:9e:ed:55:cd:28:f1:c6:c6:b9:b4:57:1f:1b: a2:8c:e3:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql6RhhShQ2xO4c4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDEzYTBhNzgtN2RmYi00NjNkLWJhMGUtYzEzMTgyMGE2 ZjRiMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk MDZlY2E0NmMtYWI2Mi00YmM1LWJmNmItYjg1MmQ1MWIxOWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinGFyk8HL4wcruNkxL0pSoiywePxO78nd/SC rsImdjQhR/BV2vSnGh5+4AyP8xORdijIBefjbTe1j9vypi+znX2aOZDx/6vtsWxS AWx7NK0dL7Gkv5WKd9zNu9vK2lJqO/hzjpPoD1OySIxgPKNrxPxaAFVDKf3J0CJ9 +TsI0ybqJ4uRladK4KoBTCM/GtIxQ2HpDEKiro0W6Mls1arrIsHxTTjTHhHuYc+O BlwmBn2Rd8Eh2OjXKbboFAGwTl8LNF0Re59OQWvpfrroyiEOaiSfkwAfQIwI4VHC qSEavpTI/nkjjp5ZbjOOxEawm32dK72mjJ9BFk2gkzq97XJo4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ56A0RTMN6cvV9x0Es6LiGQ3kxyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wMTNh MGE3OC03ZGZiLTQ2M2QtYmEwZS1jMTMxODIwYTZmNGIvNjFmYjU4ZTctMDM5Ny0z NGJlLTg2ZTYtNjQ4ODhlYzU3ODU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDEzYTBhNzgtN2RmYi00NjNkLWJh MGUtYzEzMTgyMGE2ZjRiLzAxM2EwYTc4LTdkZmItNDYzZC1iYTBlLWMxMzE4MjBh NmY0Yi5jcmwwHwYDVR0jBBgwFoAUZ/GqiFj0pVsqvThdZBFUjpF9ChkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wMTNhMGE3OC03ZGZiLTQ2M2QtYmEwZS1jMTMx ODIwYTZmNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxh1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGOuPCHkLO0cN7y5Fro6S8ZR+ZijwKAdChMH5SJbR5fAGdUg/PC5VfH LBTtiP1QiY/iRMVac51LNSmFoBhpEpR4yZgrfLdUVy/gh1teqv+YGXmn1OkEdeOk yhetYDTKhP3TtwpwnTqaCbc8nioFxT3dACoiwMoK60BZKsJGnFmO2ZCNirNsBf8F v6VatR23/ZIq1/j9Qquf0DXLhGN3WumSBxZZm34wmwsFbLarp2sSH3TRbCyVPHeM pr9gLobegPtHemKMgKrgPUhsDfD8kqxaftr11ksozLvBCfOTwwb2tKQ3au+aAaPe yuQ3JWa4nu1VzSjxxsa5tFcfG6KM47I= -----END CERTIFICATE-----Generated at Wed Nov 5 17:51:39 2025 by rpki-client