$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a645de5-12c6-3586-98e4-f14b53efb238.roa File: 0a645de5-12c6-3586-98e4-f14b53efb238.roa (raw, json) Hash identifier: +n6e7ihPafsBTOC7nxp05tS6IBrHlgVOL8v3yqMpV1E= Subject key identifier: 68:33:49:3B:37:8A:53:88:E2:82:8E:B4:37:F6:26:51:C2:52:F0:61 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F8020A42E9830EAAAA3780 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a645de5-12c6-3586-98e4-f14b53efb238.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 71.161.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:02:0a:42:e9:83:0e:aa:aa:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=3488a1af-9ef6-4c9c-be26-b27cde9a22c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e9:0f:f8:05:5a:70:a4:ca:75:28:4c:de:d7: bd:95:e2:1a:0c:01:e4:14:b8:28:40:3e:28:c4:55: ec:f5:e1:a1:da:c6:a9:a5:04:fe:af:13:b8:af:6d: 0b:26:9a:6a:d8:b5:93:7f:c3:a7:0d:ed:38:33:db: 3d:d0:3d:b0:af:21:13:ae:22:95:b7:d1:05:89:d7: e7:3d:22:90:4b:e3:4b:16:a0:44:b8:8a:f3:33:c9: 54:21:b8:51:a3:26:c8:77:d1:da:9a:7e:f3:97:8c: 7b:06:1a:ba:14:42:a1:e4:67:16:84:bb:68:29:e6: 7d:3b:c7:d2:62:66:1e:97:a4:cf:c5:d2:f2:2a:18: da:03:20:27:c7:cf:fc:2a:16:35:40:ac:29:96:b4: af:62:c8:5b:e7:dc:7e:31:ce:3f:ef:2c:60:8b:73: d9:1a:60:e8:ff:ec:39:ac:f4:fe:b7:a1:31:bf:39: 5f:73:dd:32:13:ab:15:7f:29:cd:a0:41:8b:2b:1a: 73:19:b7:c8:d2:19:b3:8b:f1:6a:1b:bb:c6:37:86: 99:1e:cb:a3:6f:eb:9c:aa:58:48:61:9d:0c:33:86: ae:a8:b0:a5:c4:6e:c3:da:11:2c:46:9e:98:26:1c: 25:ca:45:fd:59:67:48:63:7e:1b:ff:60:8c:9c:d0: 07:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:33:49:3B:37:8A:53:88:E2:82:8E:B4:37:F6:26:51:C2:52:F0:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a645de5-12c6-3586-98e4-f14b53efb238.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.161.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:89:d1:1b:51:fd:eb:22:51:83:9d:78:fb:c4:97:56:ef:11: 02:00:8e:77:d2:f8:3a:95:a3:97:d9:10:38:3f:fe:90:9b:bb: 11:2a:0f:cb:ae:b2:18:6e:07:64:fa:9c:6f:14:2b:70:72:ce: 4c:1d:ee:9d:4a:09:c2:1b:82:96:c8:5a:7b:4d:c6:08:d3:c6: ad:9c:95:a5:f4:bf:27:74:11:a9:c7:8b:86:9a:75:6b:b5:74: 08:a9:2c:de:80:80:e2:03:98:a8:88:9a:b6:df:93:e8:36:c1: d5:82:b7:a0:be:f9:08:a5:35:67:2a:5c:82:93:51:3c:10:60: 78:27:70:62:bb:27:2d:f9:d4:f3:d7:c9:cf:9a:30:c5:92:ab: 3c:4b:65:c3:dd:fe:94:be:d5:86:6a:48:08:c0:5e:3f:77:f2: 27:8f:3f:77:31:c3:69:1e:6b:b7:19:19:50:b5:4d:4a:bd:60: 36:c3:ad:36:e9:a8:ec:3c:b6:43:58:86:09:4d:dc:45:fe:c8: f2:f5:bc:2b:cf:2f:03:a1:a9:e7:56:01:db:b8:39:92:be:4e: 0f:f5:ce:eb:0b:d2:2d:20:19:3f:cb:72:a7:72:25:ac:e3:fe: 14:36:2c:04:c4:ad:c1:0f:67:78:77:bf:39:54:28:e7:a5:90: bd:2f:a5:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy+AIKQumDDqqqN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MzQ4OGExYWYtOWVmNi00YzljLWJlMjYtYjI3Y2RlOWEyMmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+kP+AVacKTKdShM3te9leIaDAHkFLgoQD4o xFXs9eGh2sappQT+rxO4r20LJppq2LWTf8OnDe04M9s90D2wryETriKVt9EFidfn PSKQS+NLFqBEuIrzM8lUIbhRoybId9Hamn7zl4x7Bhq6FEKh5GcWhLtoKeZ9O8fS YmYel6TPxdLyKhjaAyAnx8/8KhY1QKwplrSvYshb59x+Mc4/7yxgi3PZGmDo/+w5 rPT+t6Exvzlfc90yE6sVfynNoEGLKxpzGbfI0hmzi/FqG7vGN4aZHsujb+ucqlhI YZ0MM4auqLClxG7D2hEsRp6YJhwlykX9WWdIY34b/2CMnNAHDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgzSTs3ilOI4oKOtDf2JlHCUvBhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGE2NDVkZTUtMTJjNi0z NTg2LTk4ZTQtZjE0YjUzZWZiMjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER6HwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiJ0RtR/esiUYOdePvEl1bvEQIAjnfS+DqVo5fZEDg//pCbuxEqD8uu shhuB2T6nG8UK3Byzkwd7p1KCcIbgpbIWntNxgjTxq2claX0vyd0EanHi4aadWu1 dAipLN6AgOIDmKiImrbfk+g2wdWCt6C++QilNWcqXIKTUTwQYHgncGK7Jy351PPX yc+aMMWSqzxLZcPd/pS+1YZqSAjAXj938iePP3cxw2kea7cZGVC1TUq9YDbDrTbp qOw8tkNYhglN3EX+yPL1vCvPLwOhqedWAdu4OZK+Tg/1zusL0i0gGT/LcqdyJazj /hQ2LATErcEPZ3h3vzlUKOelkL0vpTU= -----END CERTIFICATE-----Generated at Wed Nov 5 04:08:00 2025 by rpki-client