$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/116b93d1-3c44-3036-ad69-53d76a64b354.roa File: 116b93d1-3c44-3036-ad69-53d76a64b354.roa (raw, json) Hash identifier: 5tZA9rd0nQWxFPuJvYWTOdt1nt49sqbWbwnq+nUd8ck= Subject key identifier: 9A:9E:D0:99:D6:3B:C2:81:D8:10:36:CF:AE:DD:C8:09:A0:AB:4F:45 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F7E1124CEEB96BCD218D80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/116b93d1-3c44-3036-ad69-53d76a64b354.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 100.12.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:e1:12:4c:ee:b9:6b:cd:21:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=6b021a1f-13a2-42cf-b8fc-c00314b93216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:98:86:7f:21:1c:cb:df:4a:4f:dc:c2:89:ba: 24:05:34:0a:76:72:f1:62:f4:ac:7f:0f:0d:62:2c: 04:9b:c9:34:e0:39:b8:f3:ce:ff:29:74:8c:75:e1: 06:69:21:00:09:17:ce:72:5f:f0:f4:50:5a:4f:d1: 98:84:5b:0b:7a:d8:69:6f:d3:44:9c:c6:54:2b:6a: 99:b0:da:f9:bb:5c:c8:d9:41:07:dc:0f:61:1d:c8: bf:17:22:fa:18:b9:e8:51:e2:66:61:04:20:b4:c8: a3:b8:9a:f4:b3:57:f3:9c:f7:59:34:68:89:46:f3: 98:cd:cb:b4:df:c9:1c:57:f6:17:9d:d7:23:f3:60: ce:86:bf:e2:bc:4a:18:a7:37:29:bd:4b:d3:c0:9b: af:f1:52:d0:9b:40:b2:8c:0e:b5:58:0e:79:dc:88: 70:96:26:d0:97:f9:9f:15:43:74:88:a4:ec:38:e4: 72:ce:f6:ad:94:49:c3:20:0d:14:21:20:52:c1:a0: 6c:c5:99:17:13:84:1b:fd:be:02:c1:96:1b:55:53: c5:ac:09:37:5b:4c:e6:1d:20:8f:b9:ed:36:f8:81: 69:52:f7:d0:ad:a3:d5:55:a9:1c:f3:6d:0b:55:8a: 3d:22:b7:6a:3c:c7:05:90:63:15:ac:dd:e2:04:13: 6b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:9E:D0:99:D6:3B:C2:81:D8:10:36:CF:AE:DD:C8:09:A0:AB:4F:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/116b93d1-3c44-3036-ad69-53d76a64b354.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 100.12.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:85:52:48:41:53:6b:d8:c5:86:bb:f3:24:90:6d:17:36:49: b4:b4:34:2d:51:9c:c3:04:21:b5:fd:6c:3a:90:92:2a:13:29: 0e:eb:ba:08:a1:e4:ca:09:a4:91:a1:b3:6d:04:fb:01:8e:61: bf:43:1b:37:b9:80:42:40:0e:79:85:1d:ac:35:76:f9:dc:3e: e4:73:82:77:7c:81:30:16:b3:9e:97:ef:f9:ff:1c:cd:25:dd: 01:8b:96:ca:6d:e1:16:dd:e9:1c:4c:6d:a9:87:9c:29:79:7c: 41:e8:a4:02:ba:e7:e5:63:1e:9b:f6:ab:9f:e7:fb:f2:02:e4: 7f:a7:ef:b6:99:a6:31:42:ee:7a:0e:ab:7d:0a:95:01:22:28: 3d:5f:14:21:8b:5b:a5:b1:9d:82:f7:a9:ef:ed:a1:a0:b8:5f: a1:a1:1e:66:08:47:3d:17:e6:b2:42:7a:ee:04:e4:84:44:a5: 5c:71:03:77:10:d5:e0:04:98:3d:22:0d:bf:e3:b4:b6:4a:48: 0c:64:82:a6:fa:d1:12:7f:4c:88:fc:6a:aa:b5:f0:0e:be:76: 77:37:b5:70:10:d1:2f:3a:d3:6b:cc:5f:80:8c:35:6a:8c:42: ac:84:ec:43:f0:12:9a:a8:f2:28:99:96:d9:c8:50:34:6e:8a: 18:18:85:17 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuy9+ESTO65a80hjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NmIwMjFhMWYtMTNhMi00MmNmLWI4ZmMtYzAwMzE0YjkzMjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppiGfyEcy99KT9zCibokBTQKdnLxYvSsfw8N YiwEm8k04Dm4887/KXSMdeEGaSEACRfOcl/w9FBaT9GYhFsLethpb9NEnMZUK2qZ sNr5u1zI2UEH3A9hHci/FyL6GLnoUeJmYQQgtMijuJr0s1fznPdZNGiJRvOYzcu0 38kcV/YXndcj82DOhr/ivEoYpzcpvUvTwJuv8VLQm0CyjA61WA553IhwlibQl/mf FUN0iKTsOORyzvatlEnDIA0UISBSwaBsxZkXE4Qb/b4CwZYbVVPFrAk3W0zmHSCP ue02+IFpUvfQraPVVakc820LVYo9IrdqPMcFkGMVrN3iBBNrNQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJqe0JnWO8KB2BA2z67dyAmgq09FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTE2YjkzZDEtM2M0NC0z MDM2LWFkNjktNTNkNzZhNjRiMzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAZAwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEADIVSSEFTa9jFhrvzJJBtFzZJtLQ0LVGcwwQhtf1sOpCSKhMpDuu6CKHk ygmkkaGzbQT7AY5hv0MbN7mAQkAOeYUdrDV2+dw+5HOCd3yBMBaznpfv+f8czSXd AYuWym3hFt3pHExtqYecKXl8QeikArrn5WMem/arn+f78gLkf6fvtpmmMULueg6r fQqVASIoPV8UIYtbpbGdgvep7+2hoLhfoaEeZghHPRfmskJ67gTkhESlXHEDdxDV 4ASYPSINv+O0tkpIDGSCpvrREn9MiPxqqrXwDr52dze1cBDRLzrTa8xfgIw1aoxC rITsQ/ASmqjyKJmW2chQNG6KGBiFFw== -----END CERTIFICATE-----Generated at Wed Nov 5 11:11:19 2025 by rpki-client