$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34027a47-a831-381c-89c6-ffb729e6f592.roa File: 34027a47-a831-381c-89c6-ffb729e6f592.roa (raw, json) Hash identifier: 003cYXL1FFzfGGyh4Y8haEXM4VZTDHVMp7FMHb28BHw= Subject key identifier: D2:EB:25:23:8F:6E:71:DE:51:A1:AF:24:DA:EA:5C:64:9D:2F:2B:AF Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F80EF481764DB0B5AEFF40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34027a47-a831-381c-89c6-ffb729e6f592.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 108.53.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:0e:f4:81:76:4d:b0:b5:ae:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=e947206c-f2a6-4411-8b65-1c31af846fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fc:cd:9d:dd:b9:29:76:e4:56:40:25:0a:3d: 71:ce:03:2a:b4:b2:96:30:03:43:d5:f2:09:4b:35: 36:3f:ca:6e:fe:e2:6b:54:7d:c4:ff:fd:cd:5d:ac: a4:20:c7:aa:87:5a:f8:b8:3b:13:30:a6:47:5a:fe: d0:15:ec:c2:8a:e6:35:23:3b:85:0f:53:75:c7:fc: 07:76:e3:ce:9c:77:bc:4e:cf:44:56:80:fc:de:89: 12:d9:2f:24:04:e2:38:94:76:7d:d5:8b:4b:c7:b3: 80:19:62:b0:f9:65:31:db:e6:e9:5d:fd:2b:d1:8c: 75:a9:79:49:59:4c:a0:14:3c:b9:85:a2:ec:f1:0c: 9d:03:58:d9:eb:42:fe:97:5e:e8:0e:09:79:4d:a6: 21:7b:36:c8:83:da:6f:8f:f8:7c:c7:e3:36:b8:c5: b5:c1:90:f2:70:7e:76:e1:6d:f4:a7:3d:ce:8e:2b: f3:bf:82:a2:3e:45:b9:61:09:d8:2f:f0:d2:19:c8: 58:87:97:43:96:05:84:75:62:88:5c:35:fb:5d:f3: c0:ac:7a:e5:b3:96:cc:aa:9b:f6:88:23:d2:f2:eb: b9:45:12:1f:c0:72:bc:e4:e5:20:b4:33:aa:94:37: 9c:50:71:0d:7f:3e:3e:6d:68:11:3d:7a:5a:a0:bc: 8f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:EB:25:23:8F:6E:71:DE:51:A1:AF:24:DA:EA:5C:64:9D:2F:2B:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34027a47-a831-381c-89c6-ffb729e6f592.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.53.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:63:63:de:bd:39:71:58:c0:73:37:69:14:0e:81:c7:d1:5f: 4d:54:30:f2:3c:24:4c:05:fc:de:7f:7f:f2:c9:e7:7f:5f:8c: 70:dd:86:93:45:71:bb:08:bd:8c:71:e8:14:80:90:4a:f6:8e: 98:5d:5b:eb:5e:25:d6:98:d1:dd:79:b7:3d:9a:3b:fa:e4:72: e1:aa:00:bb:35:0a:23:46:5e:5d:15:26:40:8a:8d:54:5c:50: bd:12:20:63:8c:48:ed:0f:9c:13:29:a2:42:25:a4:0e:90:46: 26:e7:a8:4c:16:9e:73:dd:66:14:02:a5:a6:67:00:2c:2a:de: a6:bd:cd:50:04:0a:53:48:a3:34:ad:39:7e:90:31:76:e5:bd: 4d:24:a3:f7:d8:37:fd:70:d4:bd:a8:39:e8:ea:4c:08:fd:f5: 53:f6:00:31:08:17:78:14:f7:27:e3:77:05:26:da:c6:04:c0: e5:df:f2:81:86:19:31:eb:8e:41:70:12:f9:76:6f:4f:f2:18: 9b:03:e6:fd:73:0a:71:04:31:68:00:16:05:bb:ca:f7:30:7b: 7e:70:32:33:f5:05:86:ae:5c:f8:0a:c2:f1:53:29:10:0d:5a: 06:d8:f3:3e:1e:bf:2b:77:3a:ef:17:63:fe:d6:8c:a6:bc:3b: c1:bd:fe:53 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuy+A70gXZNsLWu/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ZTk0NzIwNmMtZjJhNi00NDExLThiNjUtMWMzMWFmODQ2ZmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvzNnd25KXbkVkAlCj1xzgMqtLKWMAND1fIJ SzU2P8pu/uJrVH3E//3NXaykIMeqh1r4uDsTMKZHWv7QFezCiuY1IzuFD1N1x/wH duPOnHe8Ts9EVoD83okS2S8kBOI4lHZ91YtLx7OAGWKw+WUx2+bpXf0r0Yx1qXlJ WUygFDy5haLs8QydA1jZ60L+l17oDgl5TaYhezbIg9pvj/h8x+M2uMW1wZDycH52 4W30pz3Ojivzv4KiPkW5YQnYL/DSGchYh5dDlgWEdWKIXDX7XfPArHrls5bMqpv2 iCPS8uu5RRIfwHK85OUgtDOqlDecUHENfz4+bWgRPXpaoLyPmQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNLrJSOPbnHeUaGvJNrqXGSdLyuvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzQwMjdhNDctYTgzMS0z ODFjLTg5YzYtZmZiNzI5ZTZmNTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAbDUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAmmNj3r05cVjAczdpFA6Bx9FfTVQw8jwkTAX83n9/8snnf1+McN2Gk0Vx uwi9jHHoFICQSvaOmF1b614l1pjR3Xm3PZo7+uRy4aoAuzUKI0ZeXRUmQIqNVFxQ vRIgY4xI7Q+cEymiQiWkDpBGJueoTBaec91mFAKlpmcALCrepr3NUAQKU0ijNK05 fpAxduW9TSSj99g3/XDUvag56OpMCP31U/YAMQgXeBT3J+N3BSbaxgTA5d/ygYYZ MeuOQXAS+XZvT/IYmwPm/XMKcQQxaAAWBbvK9zB7fnAyM/UFhq5c+ArC8VMpEA1a BtjzPh6/K3c67xdj/taMprw7wb3+Uw== -----END CERTIFICATE-----Generated at Wed Nov 5 14:31:18 2025 by rpki-client