$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1cf81e99-fec0-332a-b40b-0045842ea557.roa File: 1cf81e99-fec0-332a-b40b-0045842ea557.roa (raw, json) Hash identifier: 9Rbm3HLx1Aas0PmqRUSrSM1/3SAVHMHtSESL/Fn4XCY= Subject key identifier: 0C:23:9C:D2:30:38:EA:32:18:0C:27:78:74:E3:11:37:03:29:59:04 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BABFCFAE304EE2CAA5DB3F780 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1cf81e99-fec0-332a-b40b-0045842ea557.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 6167 IP address blocks: 97.233.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fc:fa:e3:04:ee:2c:aa:5d:b3:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=b8ef41dc-3251-4d26-bfda-346acffffa93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:bb:7f:3c:bc:be:be:e5:3d:74:d3:d0:0b:c5: d5:96:24:f1:09:14:ed:f5:c1:6e:28:77:79:5b:4d: 8a:5b:f1:4b:d7:92:55:5f:30:2f:4e:6d:c1:4f:70: b2:57:16:01:22:73:f8:cc:ab:fa:b5:86:30:da:51: 7a:e2:c1:11:a9:4a:cf:c6:3c:b0:41:90:41:cc:a9: 44:03:a8:31:db:b2:ab:4d:27:7c:08:96:a8:91:57: 06:25:6d:81:fe:93:71:a2:0f:63:69:7b:61:40:c9: ba:44:0d:57:7a:4c:0e:38:93:b2:6f:c4:94:41:0c: e6:d4:35:30:da:e4:87:25:32:0c:54:44:de:89:e0: 91:37:4b:c6:ab:c2:82:73:eb:81:f6:43:65:01:a8: 6a:e4:14:98:a2:e0:fb:9b:e5:f1:e4:7f:73:e7:88: 99:0e:df:87:90:8c:44:39:51:9e:69:92:d3:76:98: 91:c4:95:86:9a:96:31:77:d5:f5:57:92:1b:d5:6c: dc:3d:69:73:b0:f7:03:31:27:50:c5:a8:d4:0f:9b: 15:45:7d:83:ed:0d:a5:ac:75:5e:bf:b1:10:d8:bb: 55:cb:a3:89:bc:e6:8a:96:4d:85:58:aa:87:b2:1e: b9:e7:c9:84:6d:82:1e:c5:e6:93:24:a5:37:8a:32: 35:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:23:9C:D2:30:38:EA:32:18:0C:27:78:74:E3:11:37:03:29:59:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1cf81e99-fec0-332a-b40b-0045842ea557.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 97.233.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:5b:84:29:f6:3a:81:19:7a:51:85:81:2f:aa:28:be:f2:03: 63:66:46:8b:8b:cc:d8:de:4c:ce:7e:18:91:4c:21:7a:52:c6: 21:0d:95:1c:89:84:11:84:40:ac:4d:7b:9b:36:09:5e:31:b0: 87:b2:85:74:41:e1:90:14:fe:9c:f8:60:82:ec:4f:14:78:c6: d2:dc:c1:3b:4b:dc:7e:3b:da:99:fd:04:c4:7f:a7:26:f9:fd: f5:1a:e9:41:0c:99:f0:b5:bb:a7:ba:90:d2:e3:41:2a:c4:c4: 9b:6f:05:68:ae:97:db:00:65:3b:c4:b0:7a:3a:e1:3b:f7:2b: 1f:81:80:58:87:bd:d6:50:af:41:d7:08:d5:50:e7:4e:69:27: 11:a8:4f:f7:a2:6c:bf:0e:b0:1f:3e:4e:69:c9:6b:d3:6c:55: e7:e1:75:ba:d5:dc:6f:46:d2:97:47:80:a5:78:3f:53:63:4b: 33:ef:98:52:4a:05:20:8f:af:27:9c:61:1f:9c:4b:ad:ed:ff: 09:c8:f5:ec:ef:ba:87:47:a7:31:3b:9d:6d:b3:a6:c0:04:e5: 50:e2:95:3e:3b:41:38:bc:af:53:e9:eb:79:81:62:21:5c:78: dd:e6:21:06:e3:7f:2e:28:ba:b9:32:22:4d:80:a3:57:96:71: 19:e7:bb:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/PrjBO4sql2z94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk YjhlZjQxZGMtMzI1MS00ZDI2LWJmZGEtMzQ2YWNmZmZmYTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirt/PLy+vuU9dNPQC8XVliTxCRTt9cFuKHd5 W02KW/FL15JVXzAvTm3BT3CyVxYBInP4zKv6tYYw2lF64sERqUrPxjywQZBBzKlE A6gx27KrTSd8CJaokVcGJW2B/pNxog9jaXthQMm6RA1XekwOOJOyb8SUQQzm1DUw 2uSHJTIMVETeieCRN0vGq8KCc+uB9kNlAahq5BSYouD7m+Xx5H9z54iZDt+HkIxE OVGeaZLTdpiRxJWGmpYxd9X1V5Ib1WzcPWlzsPcDMSdQxajUD5sVRX2D7Q2lrHVe v7EQ2LtVy6OJvOaKlk2FWKqHsh6558mEbYIexeaTJKU3ijI19QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwjnNIwOOoyGAwneHTjETcDKVkEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWNmODFlOTktZmVjMC0z MzJhLWI0MGItMDA0NTg0MmVhNTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHYekAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJbhCn2OoEZelGFgS+qKL7yA2NmRouLzNjeTM5+GJFMIXpSxiENlRyJ hBGEQKxNe5s2CV4xsIeyhXRB4ZAU/pz4YILsTxR4xtLcwTtL3H472pn9BMR/pyb5 /fUa6UEMmfC1u6e6kNLjQSrExJtvBWiul9sAZTvEsHo64Tv3Kx+BgFiHvdZQr0HX CNVQ505pJxGoT/eibL8OsB8+TmnJa9NsVefhdbrV3G9G0pdHgKV4P1NjSzPvmFJK BSCPryecYR+cS63t/wnI9ezvuodHpzE7nW2zpsAE5VDilT47QTi8r1Pp63mBYiFc eN3mIQbjfy4ourkyIk2Ao1eWcRnnuzs= -----END CERTIFICATE-----Generated at Wed Nov 5 11:02:08 2025 by rpki-client