$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/321fb60d-9686-3132-a037-9e5f9e621a79.roa File: 321fb60d-9686-3132-a037-9e5f9e621a79.roa (raw, json) Hash identifier: 07Q599txLMXTgHGLjxnc130IJWHStttbOot9FslS6H8= Subject key identifier: B6:C8:C8:A9:24:EB:8C:4B:82:B7:79:AC:B8:8F:78:58:EC:06:BF:5F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BA39D2CDAD2C75D37E0CEBF80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/321fb60d-9686-3132-a037-9e5f9e621a79.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 701 IP address blocks: 216.156.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:2c:da:d2:c7:5d:37:e0:ce:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=94f764cc-770b-4dfd-82ef-b5757a57cd2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:43:db:e8:ff:02:80:83:b6:c4:b1:10:09:69: f1:7e:28:8f:b0:19:f4:35:ca:80:f2:6f:4a:ea:46: 20:27:d3:95:6d:38:2b:e4:49:1c:a4:9c:59:3a:fc: 2f:c2:6e:2d:8e:3c:4e:7e:47:e9:94:8a:a6:cc:c6: 5f:58:ae:7b:89:37:73:19:b9:85:4c:0b:5f:51:25: 1d:e6:03:74:93:57:fd:ec:70:be:77:90:d0:c1:26: 4a:48:90:4e:ea:71:e4:41:78:f3:c6:f5:4e:ca:ed: a1:3f:d2:64:d9:85:ac:5f:e5:90:fb:8c:68:f3:bb: 39:ff:ab:df:06:dd:80:f9:8a:72:eb:9f:1c:e4:37: 44:04:0d:85:7e:26:36:c6:ce:06:ec:08:4f:6a:8a: ab:8b:84:d1:25:c5:c6:ec:1a:6d:01:81:52:b4:63: ce:bf:c0:b3:d8:85:0f:5e:73:f2:aa:74:59:c9:2d: e6:db:b6:07:3f:92:0c:e3:28:79:6e:f2:d9:31:e8: 9d:7b:54:e7:97:4e:39:ce:d2:a0:e1:3f:bd:f2:45: 7b:d1:5b:e0:1f:b6:d7:26:d6:78:f3:f2:ad:b6:0c: c6:e5:85:ed:45:58:4c:a3:d7:d6:22:39:f9:bf:e9: cd:ce:3c:b8:b5:45:4e:c8:ac:66:a7:6c:df:b9:09: 41:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C8:C8:A9:24:EB:8C:4B:82:B7:79:AC:B8:8F:78:58:EC:06:BF:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/321fb60d-9686-3132-a037-9e5f9e621a79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 216.156.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:8e:8c:0d:f7:9b:a5:9d:29:4f:08:ce:2b:d8:96:5b:3c:db: a9:a3:45:64:06:30:22:f7:f8:e2:49:ba:a4:18:39:fe:a1:00: 47:20:62:21:2d:dc:9b:9d:48:d6:c0:bf:87:1a:5a:b7:18:ce: 9e:7c:88:cc:05:c7:b2:9a:66:77:8b:98:4e:7f:26:a5:fc:a8: e0:e0:ba:99:81:9e:1b:ec:72:75:86:e0:b5:d8:09:a7:62:cf: 30:fe:69:4d:d1:93:a2:64:e6:21:39:59:25:1b:2a:37:c7:2f: 90:1b:4b:53:59:ae:2e:d2:42:23:87:af:4f:95:d2:61:fd:7f: 99:e3:8e:23:90:dd:37:34:a7:34:2a:ee:65:04:0c:e6:9a:02: 38:e5:ff:31:8f:f8:6c:81:71:48:8a:c1:a2:1d:cf:d3:7a:b6: 9d:9e:30:94:09:59:cb:4a:35:b4:58:34:39:84:5f:a4:88:20: ee:4c:6e:2a:58:8a:49:ba:f6:3e:cc:bc:ec:71:ed:54:14:87: 78:76:87:8a:db:66:99:25:f9:c0:d9:89:3c:07:95:4c:fe:5e: 86:8b:44:fd:95:cb:2f:9f:d2:cb:39:83:aa:0a:24:ae:a2:29: a7:17:90:4e:7d:1d:ed:12:6b:25:52:2d:16:a5:b4:9c:01:50: a1:17:9f:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSza0sddN+DOv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OTRmNzY0Y2MtNzcwYi00ZGZkLTgyZWYtYjU3NTdhNTdjZDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokPb6P8CgIO2xLEQCWnxfiiPsBn0NcqA8m9K 6kYgJ9OVbTgr5EkcpJxZOvwvwm4tjjxOfkfplIqmzMZfWK57iTdzGbmFTAtfUSUd 5gN0k1f97HC+d5DQwSZKSJBO6nHkQXjzxvVOyu2hP9Jk2YWsX+WQ+4xo87s5/6vf Bt2A+Ypy658c5DdEBA2FfiY2xs4G7AhPaoqri4TRJcXG7BptAYFStGPOv8Cz2IUP XnPyqnRZyS3m27YHP5IM4yh5bvLZMeide1Tnl045ztKg4T+98kV70VvgH7bXJtZ4 8/KttgzG5YXtRVhMo9fWIjn5v+nNzjy4tUVOyKxmp2zfuQlBiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbIyKkk64xLgrd5rLiPeFjsBr9fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzIxZmI2MGQtOTY4Ni0z MTMyLWEwMzctOWU1ZjllNjIxYTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JyYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6OjA33m6WdKU8IzivYlls826mjRWQGMCL3+OJJuqQYOf6hAEcgYiEt 3JudSNbAv4caWrcYzp58iMwFx7KaZneLmE5/JqX8qODgupmBnhvscnWG4LXYCadi zzD+aU3Rk6Jk5iE5WSUbKjfHL5AbS1NZri7SQiOHr0+V0mH9f5njjiOQ3Tc0pzQq 7mUEDOaaAjjl/zGP+GyBcUiKwaIdz9N6tp2eMJQJWctKNbRYNDmEX6SIIO5MbipY ikm69j7MvOxx7VQUh3h2h4rbZpkl+cDZiTwHlUz+XoaLRP2Vyy+f0ss5g6oKJK6i KacXkE59He0SayVSLRaltJwBUKEXn3A= -----END CERTIFICATE-----Generated at Wed Nov 5 09:32:41 2025 by rpki-client