$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1aca1dff-ffc7-3618-81f8-3ac7d53f3eb2.roa File: 1aca1dff-ffc7-3618-81f8-3ac7d53f3eb2.roa (raw, json) Hash identifier: /JQ7poUOnOPjrKOhUAJTj7zEMdIpdEncUbUX1GMQmkc= Subject key identifier: CA:44:D0:F8:78:3A:F1:A7:71:2E:88:5A:4A:E3:70:7F:10:D7:8F:65 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F80792C12F17EDC1497840 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1aca1dff-ffc7-3618-81f8-3ac7d53f3eb2.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 70.19.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:07:92:c1:2f:17:ed:c1:49:78:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=b6baf373-3df7-4f75-8370-07090fac7612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:46:b0:41:1b:5b:70:2a:ca:5b:7c:74:5e:a3: 5d:78:bf:47:a1:80:2d:b5:fc:fe:2e:53:b7:3c:9c: 7f:e7:9a:cb:7c:18:38:9f:76:77:c2:25:0a:af:39: c9:57:f4:b9:44:14:d5:b6:b3:44:28:13:07:ce:72: db:e2:cb:56:55:12:1f:b8:14:a5:76:1f:4a:7e:64: 69:fb:da:14:60:e7:77:41:22:f0:15:3e:c2:60:b2: 99:63:28:c2:14:a2:7b:af:a8:df:50:1a:bf:95:9e: 70:4f:f4:7c:fa:06:19:26:4e:97:fd:c0:73:92:11: 0b:05:8c:d2:4a:c7:db:ae:2e:84:78:56:04:f3:b0: 0c:7d:bc:75:dd:b6:af:c8:85:e3:d5:1e:68:2b:90: 89:3c:67:ea:3b:46:d9:d9:e9:77:af:93:7e:11:92: 8e:23:5c:85:a1:12:b4:33:79:06:0f:e1:19:6d:5d: 45:48:76:04:ae:27:4e:5d:c4:03:d7:51:f1:fb:d1: aa:42:68:b8:12:9c:1b:48:d8:97:3e:5d:25:fe:4e: b4:2a:74:01:67:31:eb:93:36:3b:06:e7:73:4f:6c: bc:cb:3f:38:32:cc:f1:1e:8e:02:2f:be:cc:4a:5d: 48:1b:71:f3:7f:8d:7d:3d:21:fc:bd:ec:b3:91:5b: 10:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:44:D0:F8:78:3A:F1:A7:71:2E:88:5A:4A:E3:70:7F:10:D7:8F:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1aca1dff-ffc7-3618-81f8-3ac7d53f3eb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 70.19.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:51:72:80:42:6b:5a:a9:3c:26:fb:b6:50:8f:bf:ae:31:32: 02:1a:a9:e2:24:9a:d3:68:98:2d:7b:d0:b0:2b:54:4b:38:c5: 4b:02:81:43:0b:a2:e0:70:c7:01:52:5c:c3:ea:a1:4d:87:53: d3:c5:a0:5a:34:ea:15:be:2c:c0:2a:50:ce:2d:b4:e0:41:25: c2:7c:bd:40:5f:0b:ae:ab:94:0d:d5:c3:c2:08:9d:a1:ee:c0: b2:4b:7c:e0:f8:c2:ed:2a:3a:67:58:8d:0c:b1:ad:cf:5c:04: c1:21:f0:d0:51:df:1c:f9:4b:2a:d7:33:fb:f3:a9:4a:4c:b7: 3f:ee:5a:0a:7d:c8:c2:f9:bb:fe:ad:6b:70:f8:0c:75:99:d3: cb:0c:eb:84:f3:51:34:23:6b:c9:95:7f:93:50:d3:4d:94:70: a6:f7:44:19:ab:3f:dd:e2:b0:7a:4c:16:83:61:3d:c7:2b:d5: 2a:db:40:ba:9a:ff:4d:b3:73:af:b5:30:b1:38:a8:17:7a:3b: 01:23:aa:32:ce:2f:e7:a5:3d:a1:27:33:be:d5:cd:88:d7:d9: 06:a6:0c:2f:35:49:c4:31:a3:02:b3:c7:df:f2:f3:56:a4:a8: cd:1a:fc:94:51:f3:68:47:22:35:18:9e:4a:3f:87:12:0d:c7: 33:34:80:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy+AeSwS8X7cFJeEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk YjZiYWYzNzMtM2RmNy00Zjc1LTgzNzAtMDcwOTBmYWM3NjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkawQRtbcCrKW3x0XqNdeL9HoYAttfz+LlO3 PJx/55rLfBg4n3Z3wiUKrznJV/S5RBTVtrNEKBMHznLb4stWVRIfuBSldh9KfmRp +9oUYOd3QSLwFT7CYLKZYyjCFKJ7r6jfUBq/lZ5wT/R8+gYZJk6X/cBzkhELBYzS Ssfbri6EeFYE87AMfbx13bavyIXj1R5oK5CJPGfqO0bZ2el3r5N+EZKOI1yFoRK0 M3kGD+EZbV1FSHYEridOXcQD11Hx+9GqQmi4EpwbSNiXPl0l/k60KnQBZzHrkzY7 BudzT2y8yz84MszxHo4CL77MSl1IG3Hzf419PSH8veyzkVsQNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpE0Ph4OvGncS6IWkrjcH8Q149lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWFjYTFkZmYtZmZjNy0z NjE4LTgxZjgtM2FjN2Q1M2YzZWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRhMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlRcoBCa1qpPCb7tlCPv64xMgIaqeIkmtNomC170LArVEs4xUsCgUML ouBwxwFSXMPqoU2HU9PFoFo06hW+LMAqUM4ttOBBJcJ8vUBfC66rlA3Vw8IInaHu wLJLfOD4wu0qOmdYjQyxrc9cBMEh8NBR3xz5SyrXM/vzqUpMtz/uWgp9yML5u/6t a3D4DHWZ08sM64TzUTQja8mVf5NQ002UcKb3RBmrP93isHpMFoNhPccr1SrbQLqa /02zc6+1MLE4qBd6OwEjqjLOL+elPaEnM77VzYjX2QamDC81ScQxowKzx9/y81ak qM0a/JRR82hHIjUYnko/hxINxzM0gIU= -----END CERTIFICATE-----Generated at Wed Nov 5 02:19:53 2025 by rpki-client