$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1b1dc2a4-287e-3fe6-b5a3-35ce414126f4.roa File: 1b1dc2a4-287e-3fe6-b5a3-35ce414126f4.roa (raw, json) Hash identifier: wzkfyaHqLnFHpPXIdRg0bXINCOPbCF/uX0lT5BCm4hM= Subject key identifier: F8:89:9B:48:79:12:D1:6A:2D:BC:70:2D:CE:7C:69:B0:21:87:E1:6F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F80E5CB923C75D1B192840 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1b1dc2a4-287e-3fe6-b5a3-35ce414126f4.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 100.14.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:0e:5c:b9:23:c7:5d:1b:19:28:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=76dbb7ea-a7c5-415a-bd97-7611fd1729af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:28:26:27:64:40:ec:01:ee:9d:9b:f0:f8:44: 5d:40:64:47:0f:56:33:56:fd:34:43:e9:ae:aa:8a: 01:82:97:23:b7:a7:c6:d4:68:35:ad:10:dc:14:15: f0:08:03:23:ff:4c:a1:fc:87:2a:f7:12:10:39:c5: 5e:91:71:94:f8:33:69:f2:57:64:cd:74:87:da:7e: 42:e6:de:a7:18:9b:4c:40:2f:58:3f:af:5c:55:f8: 28:43:cd:8c:26:dc:bc:d1:0a:58:12:50:00:d2:3a: 24:02:1f:4a:f2:a4:b7:ed:cd:b7:21:ff:51:4d:01: 3e:ac:c5:cd:03:ab:85:dc:78:25:74:45:60:ec:94: 0e:08:4c:63:00:8a:cf:64:1a:72:29:3c:9e:7a:e1: bd:5f:bc:a4:18:17:f4:d7:b0:84:a8:d0:71:a5:66: 5d:03:f5:98:be:0f:7f:48:f7:b6:fb:10:f3:c5:df: 6e:74:71:0b:50:6a:a5:fc:df:00:62:1e:dd:09:af: f5:69:22:53:fb:88:a3:1c:12:9d:58:78:a0:42:8f: 3c:4b:a0:3e:f9:d9:37:07:b6:d2:5a:cb:7d:1d:74: 27:80:1b:eb:6b:55:af:01:fb:5b:c3:81:7b:94:72: 12:08:09:30:7c:2c:82:37:6c:e9:9f:ef:75:e4:b9: 0a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:89:9B:48:79:12:D1:6A:2D:BC:70:2D:CE:7C:69:B0:21:87:E1:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1b1dc2a4-287e-3fe6-b5a3-35ce414126f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 100.14.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:4a:92:7e:cf:af:ab:f5:a8:1a:a9:43:91:8c:57:ff:40:1a: ae:db:e0:97:f4:4c:b8:56:58:bc:24:33:f3:f2:bf:4b:78:9a: 9a:1c:32:ea:5b:e5:32:1a:b2:73:3b:16:2d:56:d9:3b:f5:b8: 58:80:79:10:da:1e:b3:e1:dc:81:b7:20:86:52:a3:c9:87:d5: fd:3d:8a:0a:25:96:c5:53:43:60:50:7d:88:98:0c:46:60:ce: 2a:29:73:e5:64:f4:1c:6e:80:22:5f:7d:d9:7e:08:3b:30:fc: e7:a4:f4:bf:70:3a:7d:0b:8b:3d:c6:ba:0f:24:a0:32:7c:66: 53:b2:b4:e1:77:87:d9:71:1e:80:e6:1c:02:e2:19:eb:66:ba: fe:b4:6e:c5:de:8c:b1:ac:e5:c8:fa:ed:4a:3c:38:2f:ab:f6: c9:46:86:a8:32:5f:34:56:7e:c5:8b:d5:68:98:3d:54:16:59: 0a:99:53:b9:ff:85:f7:56:47:75:6b:6d:7c:4f:bc:b6:a7:e2: fc:28:fe:0f:01:60:8c:e9:b4:b1:07:5e:88:e5:86:4f:e7:c5: 0d:43:a3:50:5d:a3:d1:15:8c:08:4a:ac:e4:a7:64:83:86:5f: 87:65:1b:2b:77:26:19:dc:c8:25:20:bb:da:9e:a9:58:0b:d9: 26:32:e8:5d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuy+A5cuSPHXRsZKEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NzZkYmI3ZWEtYTdjNS00MTVhLWJkOTctNzYxMWZkMTcyOWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSgmJ2RA7AHunZvw+ERdQGRHD1YzVv00Q+mu qooBgpcjt6fG1Gg1rRDcFBXwCAMj/0yh/Icq9xIQOcVekXGU+DNp8ldkzXSH2n5C 5t6nGJtMQC9YP69cVfgoQ82MJty80QpYElAA0jokAh9K8qS37c23If9RTQE+rMXN A6uF3HgldEVg7JQOCExjAIrPZBpyKTyeeuG9X7ykGBf017CEqNBxpWZdA/WYvg9/ SPe2+xDzxd9udHELUGql/N8AYh7dCa/1aSJT+4ijHBKdWHigQo88S6A++dk3B7bS Wst9HXQngBvra1WvAftbw4F7lHISCAkwfCyCN2zpn+915LkK6QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPiJm0h5EtFqLbxwLc58abAhh+FvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWIxZGMyYTQtMjg3ZS0z ZmU2LWI1YTMtMzVjZTQxNDEyNmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAZA4wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAGEqSfs+vq/WoGqlDkYxX/0Aartvgl/RMuFZYvCQz8/K/S3iamhwy6lvl MhqyczsWLVbZO/W4WIB5ENoes+HcgbcghlKjyYfV/T2KCiWWxVNDYFB9iJgMRmDO Kilz5WT0HG6AIl992X4IOzD856T0v3A6fQuLPca6DySgMnxmU7K04XeH2XEegOYc AuIZ62a6/rRuxd6MsazlyPrtSjw4L6v2yUaGqDJfNFZ+xYvVaJg9VBZZCplTuf+F 91ZHdWttfE+8tqfi/Cj+DwFgjOm0sQdeiOWGT+fFDUOjUF2j0RWMCEqs5Kdkg4Zf h2UbK3cmGdzIJSC72p6pWAvZJjLoXQ== -----END CERTIFICATE-----Generated at Wed Nov 5 04:08:46 2025 by rpki-client