$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/09d1a064-2e73-3561-93bd-eb182760166e.roa File: 09d1a064-2e73-3561-93bd-eb182760166e.roa (raw, json) Hash identifier: l6ztgE50TVzsZaGRbfZbg9bUcu4GT28VJ/U1U2a6u54= Subject key identifier: B9:A3:34:21:77:28:C1:7C:0E:75:93:09:C9:BA:61:1C:93:00:D3:9A Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BABFD282CED27CF2F38B88180 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/09d1a064-2e73-3561-93bd-eb182760166e.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 701 IP address blocks: 74.97.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:28:2c:ed:27:cf:2f:38:b8:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=fc463d0c-3122-4d6e-9b53-14f26f1f0fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cc:c4:f1:2c:52:e1:ef:6e:57:1e:87:d8:f6: f3:ed:56:ff:12:05:65:e8:e0:84:06:84:ac:94:9a: 69:33:ac:84:4d:d1:35:ee:09:43:38:fb:bf:a6:5b: e7:40:b2:61:ca:f3:fb:aa:9f:1e:de:15:c3:ac:59: ad:21:7c:67:77:e8:ca:46:fe:b3:0b:3f:37:47:4e: c2:74:06:bb:82:97:6f:ff:95:32:c1:d6:49:b1:93: f0:fd:fa:02:d6:2e:50:34:75:d8:0f:cd:4b:8d:ed: e4:d5:2c:95:a6:0c:fd:e7:e2:08:4b:fd:e9:24:f5: 33:27:a3:a1:15:72:f3:80:dd:78:35:cc:2f:20:10: 7c:6c:c3:2b:fb:cc:a3:1f:87:b0:3d:95:68:85:a3: 9a:f0:17:53:6b:ad:b8:b5:38:a3:04:ff:bf:22:6a: cc:f0:7a:1e:c5:b8:06:b7:38:7a:72:9a:0a:44:c2: 0e:03:48:63:ab:df:00:ac:96:d5:1d:20:9b:d1:7f: 30:7d:34:85:fe:1a:37:d2:5d:12:2c:f1:7e:c7:44: c9:7f:15:24:01:76:13:11:b1:63:25:7e:fe:dc:87: 39:34:09:38:ff:db:c1:16:fa:7e:24:a4:a7:26:66: 9a:ea:a7:02:14:89:10:91:c3:5a:dd:f2:5a:c4:3f: 1c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A3:34:21:77:28:C1:7C:0E:75:93:09:C9:BA:61:1C:93:00:D3:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/09d1a064-2e73-3561-93bd-eb182760166e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 74.97.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:73:58:46:2b:90:c7:62:42:a0:c0:6d:55:fd:bc:12:24:dc: 45:75:6d:d6:68:c8:e9:18:32:4f:83:35:44:3b:42:23:31:f5: ad:62:bd:9c:59:50:d1:11:b5:b3:3e:db:2c:d3:7e:65:ac:1d: 96:65:eb:1d:e8:b1:47:20:fa:64:0d:b5:df:4b:01:c9:44:44: bc:ac:3f:90:bb:de:97:b1:1f:60:b8:40:68:81:b6:4c:7b:49: e5:08:59:5c:71:d6:6c:a8:55:e2:d5:a1:5f:4c:10:e4:f0:c5: 77:16:b4:e2:d7:15:21:a4:79:9a:68:33:f3:7f:7b:5e:f9:f6: b9:7d:91:99:a9:c8:ad:99:c8:b2:4f:12:66:3f:b3:95:7c:87: 61:bb:bf:9f:06:4e:b7:8d:38:f5:c2:9e:2a:00:a0:c6:0e:20: f2:15:60:72:23:7b:27:a6:f1:c0:d8:26:ad:47:fe:c6:79:1d: 67:b2:34:68:f9:b1:cf:3e:76:53:10:8e:32:31:4f:33:c8:c6: 73:c1:c7:58:4f:20:3f:6a:f3:1d:94:d4:7d:93:5d:1d:b7:da: bc:a9:01:42:ba:9a:d7:b7:fa:5b:c2:e2:ee:81:a4:b8:b6:8c: d3:70:ff:07:53:96:b7:32:40:1f:db:e1:38:4b:42:0d:49:47: bd:2b:d4:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/Sgs7SfPLzi4gYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk ZmM0NjNkMGMtMzEyMi00ZDZlLTliNTMtMTRmMjZmMWYwZmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnczE8SxS4e9uVx6H2Pbz7Vb/EgVl6OCEBoSs lJppM6yETdE17glDOPu/plvnQLJhyvP7qp8e3hXDrFmtIXxnd+jKRv6zCz83R07C dAa7gpdv/5UywdZJsZPw/foC1i5QNHXYD81Lje3k1SyVpgz95+IIS/3pJPUzJ6Oh FXLzgN14NcwvIBB8bMMr+8yjH4ewPZVohaOa8BdTa624tTijBP+/ImrM8HoexbgG tzh6cpoKRMIOA0hjq98ArJbVHSCb0X8wfTSF/ho30l0SLPF+x0TJfxUkAXYTEbFj JX7+3Ic5NAk4/9vBFvp+JKSnJmaa6qcCFIkQkcNa3fJaxD8cJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmjNCF3KMF8DnWTCcm6YRyTANOaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDlkMWEwNjQtMmU3My0z NTYxLTkzYmQtZWIxODI3NjAxNjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSmGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALBzWEYrkMdiQqDAbVX9vBIk3EV1bdZoyOkYMk+DNUQ7QiMx9a1ivZxZ UNERtbM+2yzTfmWsHZZl6x3osUcg+mQNtd9LAclERLysP5C73pexH2C4QGiBtkx7 SeUIWVxx1myoVeLVoV9MEOTwxXcWtOLXFSGkeZpoM/N/e1759rl9kZmpyK2ZyLJP EmY/s5V8h2G7v58GTreNOPXCnioAoMYOIPIVYHIjeyem8cDYJq1H/sZ5HWeyNGj5 sc8+dlMQjjIxTzPIxnPBx1hPID9q8x2U1H2TXR232rypAUK6mte3+lvC4u6BpLi2 jNNw/wdTlrcyQB/b4ThLQg1JR70r1FU= -----END CERTIFICATE-----Generated at Wed Nov 5 11:34:07 2025 by rpki-client