$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/23e388ab-876b-3b38-9e99-9d9abacc6148.roa File: 23e388ab-876b-3b38-9e99-9d9abacc6148.roa (raw, json) Hash identifier: ySFM8eKo2BO9FPUQyMfw222OkPsFvubTT75oKeA17kA= Subject key identifier: 31:04:1D:49:E6:08:EE:EF:4C:86:33:D2:94:62:97:66:23:7F:54:C7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F8016EAE1ADB94B1201D80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/23e388ab-876b-3b38-9e99-9d9abacc6148.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 71.251.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:01:6e:ae:1a:db:94:b1:20:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=0cc77fe2-a7e8-4a22-83ee-0ed81737ea67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:19:eb:82:1f:03:91:f0:2a:7e:a1:5b:9e:96: bc:53:d6:53:e7:17:df:81:6e:3e:ee:dd:f2:5c:10: 6b:97:81:ec:25:3a:aa:b9:39:b3:ff:f8:32:1e:66: f7:7b:3a:65:1c:8b:3e:64:41:10:c9:55:f9:19:6d: 65:62:34:b6:bc:64:63:14:9b:fb:26:dd:79:93:ec: 28:75:3c:a0:8d:81:25:cd:3b:89:0d:57:ed:e6:02: 47:4b:75:15:d2:36:a6:f1:27:a5:b6:95:6c:31:45: c1:d5:9d:9d:53:2e:54:1b:f9:aa:bd:b2:30:72:69: 55:d8:a9:5e:5b:e8:19:1f:ae:6f:4d:38:03:f2:b2: 77:33:eb:cf:ba:c1:c2:3e:21:88:8b:07:9e:6b:fb: e0:03:f7:73:fa:31:fd:57:90:77:9c:c1:c6:cb:d1: 4a:fc:27:21:c7:04:7f:05:7d:3f:e3:1d:10:7f:fe: 4d:5b:de:49:bd:b7:a1:27:b9:b5:8b:58:2d:ba:25: 9f:df:35:4b:b3:d6:03:d8:39:51:56:cb:5c:b8:54: aa:7b:52:a8:b4:2e:2d:a4:3c:ec:b0:8e:55:c4:3f: 00:17:ef:47:c3:ea:2a:dc:f7:e8:96:d4:4d:f6:99: a5:63:c6:0f:89:da:27:13:6b:84:8b:9f:a3:46:64: 3a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:04:1D:49:E6:08:EE:EF:4C:86:33:D2:94:62:97:66:23:7F:54:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/23e388ab-876b-3b38-9e99-9d9abacc6148.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.251.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:8b:12:cc:1a:12:08:0a:ee:92:e6:04:c2:48:59:e0:d5:dc: 5d:cc:cb:f0:bd:5a:b8:a4:fd:24:32:da:7d:c7:ca:7c:ff:6a: 16:f4:64:65:39:63:68:f7:01:61:a8:26:06:0d:06:f0:2b:98: 38:dd:e0:c9:13:ce:e4:15:8d:aa:c7:89:9a:a9:07:7e:5c:04: 71:43:12:71:2d:e7:b1:55:e4:ad:9a:2f:c2:2c:7c:b6:f2:2b: 8a:13:de:b9:c8:ce:33:1a:25:f8:af:28:3e:da:2d:f6:6a:7c: 5e:38:4c:9e:e7:55:35:7d:0b:79:a9:d2:46:d7:09:df:22:08: 76:77:28:b8:c4:1b:78:1a:95:93:4d:80:c5:2e:b2:40:33:b1: 26:ee:ff:9d:55:61:26:25:52:23:33:53:fb:f1:b0:99:5f:2b: 98:70:8b:4a:f7:c5:81:ed:ac:95:a5:f1:ca:29:b8:7a:6c:77: 1b:7c:07:f5:c7:d9:f7:de:2b:ed:07:45:2d:fe:cf:28:fb:24: 76:70:70:db:8d:2e:75:53:a3:b5:57:b2:29:90:3c:c0:cf:b5: bf:f0:22:38:29:a3:bf:61:60:89:29:89:36:2c:75:fd:2b:61: 31:ea:c5:79:13:96:42:37:64:f0:1b:d5:5c:67:13:a3:87:4f: bf:ea:30:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy+AFurhrblLEgHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MGNjNzdmZTItYTdlOC00YTIyLTgzZWUtMGVkODE3MzdlYTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRnrgh8DkfAqfqFbnpa8U9ZT5xffgW4+7t3y XBBrl4HsJTqquTmz//gyHmb3ezplHIs+ZEEQyVX5GW1lYjS2vGRjFJv7Jt15k+wo dTygjYElzTuJDVft5gJHS3UV0jam8SeltpVsMUXB1Z2dUy5UG/mqvbIwcmlV2Kle W+gZH65vTTgD8rJ3M+vPusHCPiGIiweea/vgA/dz+jH9V5B3nMHGy9FK/CchxwR/ BX0/4x0Qf/5NW95JvbehJ7m1i1gtuiWf3zVLs9YD2DlRVstcuFSqe1KotC4tpDzs sI5VxD8AF+9Hw+oq3PfoltRN9pmlY8YPidonE2uEi5+jRmQ6gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEEHUnmCO7vTIYz0pRil2Yjf1THMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjNlMzg4YWItODc2Yi0z YjM4LTllOTktOWQ5YWJhY2M2MTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER/vgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+LEswaEggK7pLmBMJIWeDV3F3My/C9Wrik/SQy2n3Hynz/ahb0ZGU5 Y2j3AWGoJgYNBvArmDjd4MkTzuQVjarHiZqpB35cBHFDEnEt57FV5K2aL8IsfLby K4oT3rnIzjMaJfivKD7aLfZqfF44TJ7nVTV9C3mp0kbXCd8iCHZ3KLjEG3galZNN gMUuskAzsSbu/51VYSYlUiMzU/vxsJlfK5hwi0r3xYHtrJWl8copuHpsdxt8B/XH 2ffeK+0HRS3+zyj7JHZwcNuNLnVTo7VXsimQPMDPtb/wIjgpo79hYIkpiTYsdf0r YTHqxXkTlkI3ZPAb1VxnE6OHT7/qMGI= -----END CERTIFICATE-----Generated at Wed Nov 5 16:23:15 2025 by rpki-client