$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/228fabbc-0b44-3b16-9877-0d67187805d1.roa File: 228fabbc-0b44-3b16-9877-0d67187805d1.roa (raw, json) Hash identifier: +vhoTSEJCZ9LQM3NYOU9oQVaaUUZYEY68zS0fmQjogA= Subject key identifier: BE:7D:5A:98:79:87:1A:E4:48:4F:C8:88:77:CA:DD:89:3A:DC:6D:29 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BABFD24A1FDA795BC7232D1C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/228fabbc-0b44-3b16-9877-0d67187805d1.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 701 IP address blocks: 71.254.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:24:a1:fd:a7:95:bc:72:32:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=12fd07cc-69c0-4456-a83a-98fd6a0de160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:53:5c:13:eb:0a:db:77:cd:9d:8d:9b:74:63: 4d:38:4e:d8:ae:96:23:25:f0:f4:de:ef:59:91:b5: f3:8a:12:4c:45:c0:1c:aa:16:8e:c3:ba:15:21:6b: 47:24:6e:9e:35:76:c7:ca:ca:2d:85:92:48:99:4d: 78:8e:5e:c1:22:06:97:f6:4f:e2:f6:91:29:0f:f2: 78:d8:e6:ce:13:96:0d:f0:c3:36:8a:c0:7f:6e:f0: 29:5c:bf:7b:bf:b5:80:2f:e3:d1:bb:49:91:8b:41: 10:c9:d0:23:04:87:dc:c8:36:89:ee:e9:4e:5d:1c: a9:02:d2:74:aa:54:3a:e8:29:28:2b:0b:8b:ef:bb: ee:70:e9:c5:e5:30:55:1f:0a:9b:f0:cc:0d:70:79: 50:99:85:35:0a:4a:3b:71:54:95:d6:4e:72:18:e9: 35:06:33:be:b9:50:63:97:49:ca:9a:52:1c:b4:49: c4:8b:a8:e5:d3:69:91:01:b9:00:40:f6:32:78:db: dd:cc:a2:35:05:08:aa:9b:df:c9:53:3b:88:c4:fe: 68:7b:61:9e:4b:32:bf:cf:90:11:f2:3b:0d:5f:43: 95:c6:8a:47:28:ef:51:10:47:c2:ed:57:37:a2:4a: 5f:80:6f:78:57:c7:5e:b8:eb:ca:61:76:48:38:78: 69:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:7D:5A:98:79:87:1A:E4:48:4F:C8:88:77:CA:DD:89:3A:DC:6D:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/228fabbc-0b44-3b16-9877-0d67187805d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.254.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:a5:b6:ac:f2:9d:0b:c2:3c:f8:80:79:43:a7:ac:0a:c7:ef: 17:7a:7a:ba:b9:34:b8:ac:ca:d8:73:c0:db:9e:b7:76:fd:81: aa:40:47:b7:57:ac:0c:de:bf:ec:44:f5:51:2d:c2:f2:96:1c: c8:be:a5:f4:9e:a0:81:ab:a4:64:a8:a4:58:24:ef:5a:d8:b9: c4:c6:5c:3f:1a:da:e6:ac:b4:7a:d4:c0:84:35:08:ee:e5:7c: ee:f1:b9:bb:13:57:5e:b7:a9:0e:5e:ab:e1:c2:2d:e1:b8:98: 33:55:d4:f4:92:02:5b:82:16:50:78:f6:94:21:59:cf:66:8f: 95:50:60:fa:c9:b9:a8:f3:76:37:41:09:21:62:f4:6b:88:58: f4:04:5b:97:9c:b1:33:79:b6:d1:2a:c9:02:a4:91:4e:ea:47: ed:40:84:d0:8a:44:fc:6f:10:0e:0a:bc:0a:31:ca:c8:01:ad: b3:dd:a6:5a:b8:6b:86:07:b0:93:25:83:4d:52:aa:1f:46:d3: 9e:e7:20:0d:bc:4e:19:93:e6:8d:65:e2:90:44:4d:b8:5c:13: 5d:aa:25:46:5b:ce:02:80:42:f5:80:50:f5:e8:53:ce:14:ad: 1b:6a:8c:d7:cf:53:45:a5:dc:59:b5:88:72:69:88:52:f1:d9: 8e:7b:85:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/SSh/aeVvHIy0cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk MTJmZDA3Y2MtNjljMC00NDU2LWE4M2EtOThmZDZhMGRlMTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1NcE+sK23fNnY2bdGNNOE7YrpYjJfD03u9Z kbXzihJMRcAcqhaOw7oVIWtHJG6eNXbHysothZJImU14jl7BIgaX9k/i9pEpD/J4 2ObOE5YN8MM2isB/bvApXL97v7WAL+PRu0mRi0EQydAjBIfcyDaJ7ulOXRypAtJ0 qlQ66CkoKwuL77vucOnF5TBVHwqb8MwNcHlQmYU1Cko7cVSV1k5yGOk1BjO+uVBj l0nKmlIctEnEi6jl02mRAbkAQPYyeNvdzKI1BQiqm9/JUzuIxP5oe2GeSzK/z5AR 8jsNX0OVxopHKO9REEfC7Vc3okpfgG94V8deuOvKYXZIOHhpEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL59Wph5hxrkSE/IiHfK3Yk63G0pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjI4ZmFiYmMtMGI0NC0z YjE2LTk4NzctMGQ2NzE4NzgwNWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER/5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSltqzynQvCPPiAeUOnrArH7xd6erq5NLisythzwNuet3b9gapAR7dX rAzev+xE9VEtwvKWHMi+pfSeoIGrpGSopFgk71rYucTGXD8a2uastHrUwIQ1CO7l fO7xubsTV163qQ5eq+HCLeG4mDNV1PSSAluCFlB49pQhWc9mj5VQYPrJuajzdjdB CSFi9GuIWPQEW5ecsTN5ttEqyQKkkU7qR+1AhNCKRPxvEA4KvAoxysgBrbPdplq4 a4YHsJMlg01Sqh9G057nIA28ThmT5o1l4pBETbhcE12qJUZbzgKAQvWAUPXoU84U rRtqjNfPU0Wl3Fm1iHJpiFLx2Y57hak= -----END CERTIFICATE-----Generated at Wed Nov 5 14:44:06 2025 by rpki-client