$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34a808d4-f39b-3eaf-802a-46c77c6d1558.roa File: 34a808d4-f39b-3eaf-802a-46c77c6d1558.roa (raw, json) Hash identifier: qCX7hi0/D0KbCLabm59uZAV2+2WSaajZKyZOv/435HQ= Subject key identifier: CB:31:3A:E6:DA:5F:C3:10:80:C8:15:8B:C8:EF:F6:D0:3D:75:3D:A5 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F7E23FB66D89F305202800 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34a808d4-f39b-3eaf-802a-46c77c6d1558.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 108.21.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:e2:3f:b6:6d:89:f3:05:20:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=a9f81268-c452-4f25-874e-4d53723cdd4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:23:14:2c:76:29:d2:54:22:23:9a:09:fa:3f: 08:5d:33:11:e4:4f:ad:c2:a9:f2:9b:12:9c:c2:a7: 2c:ee:64:e6:4f:3c:9b:70:06:04:c9:d1:d9:5a:de: a7:59:20:a2:64:25:d0:a7:27:5a:90:f2:14:a0:77: be:d6:e1:1b:fe:7e:be:be:d0:7f:57:f9:ae:50:ec: 27:f6:27:cc:82:94:14:80:68:70:ca:fd:2a:0f:89: d1:3b:81:2e:e3:20:1f:99:4f:e7:b1:c0:f2:d4:9f: 6d:bb:d3:0f:d6:1a:da:e4:17:1a:21:46:81:1d:2a: 98:1e:7a:42:c0:67:f6:45:e4:4e:06:8f:1e:3c:02: c5:de:80:8b:e0:bb:1d:36:73:8e:49:fe:91:6f:59: 3a:5b:0c:a2:ec:8e:e9:57:8f:d3:37:33:3e:d8:e5: 61:df:a5:cd:48:63:82:92:06:df:ad:97:24:8b:f0: 8d:0f:8b:9a:c4:72:d1:75:0c:e3:df:51:7b:8a:6a: 3f:01:d0:54:84:ea:9f:9f:a2:d3:a9:6c:29:9c:30: 6c:65:be:3c:65:96:64:bb:e2:82:0e:50:3a:f4:e0: 6e:a1:e0:cc:4a:4c:53:01:31:c1:6b:b9:71:0c:e1: d2:ee:d6:3c:9c:1d:a4:c6:d7:8a:d2:8a:a7:54:80: 2d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:31:3A:E6:DA:5F:C3:10:80:C8:15:8B:C8:EF:F6:D0:3D:75:3D:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/34a808d4-f39b-3eaf-802a-46c77c6d1558.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.21.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:0e:19:06:dc:ad:cb:4f:c7:f1:94:be:6e:c2:68:05:3e:02: b3:86:0f:99:3c:3d:a6:71:8d:14:a9:ef:24:09:c2:36:62:b5: b4:6e:83:8b:9b:ad:1f:33:79:d1:6b:86:aa:71:72:17:e0:13: 61:f4:35:b1:07:1b:66:14:e1:0f:6c:a7:75:b7:f4:06:7c:0b: 47:fb:72:76:34:92:ba:84:b3:32:cf:94:e6:70:cd:53:5c:84: af:d8:dd:12:be:27:6f:fe:e8:31:ac:85:3a:8c:c4:37:cd:f3: 79:a0:c6:93:bd:0a:44:ea:98:b4:ce:d9:9b:81:f4:48:2b:3e: c4:cd:e5:12:fb:37:38:9f:72:10:d2:03:8d:df:f9:97:93:84: 29:70:fd:2c:1e:30:21:a0:77:74:05:a9:54:ce:ef:71:5e:41: 3c:98:54:0e:3b:bf:19:ab:0d:22:a4:35:17:af:d5:33:18:a9: 9f:a0:63:0f:b0:1c:8e:93:e4:f6:1f:ee:64:6b:46:81:aa:79: 38:ac:04:31:8a:86:41:03:1d:fa:af:2f:15:8c:f0:6e:06:ec: ce:36:bf:1e:0e:94:37:04:04:bb:b5:97:12:a2:80:ab:b5:31: 6f:dc:46:49:c1:74:5f:96:00:37:b2:2f:99:04:c7:83:d4:8b: 07:d9:d7:12 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuy9+I/tm2J8wUgKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk YTlmODEyNjgtYzQ1Mi00ZjI1LTg3NGUtNGQ1MzcyM2NkZDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiMULHYp0lQiI5oJ+j8IXTMR5E+twqnymxKc wqcs7mTmTzybcAYEydHZWt6nWSCiZCXQpydakPIUoHe+1uEb/n6+vtB/V/muUOwn 9ifMgpQUgGhwyv0qD4nRO4Eu4yAfmU/nscDy1J9tu9MP1hra5BcaIUaBHSqYHnpC wGf2ReROBo8ePALF3oCL4LsdNnOOSf6Rb1k6Wwyi7I7pV4/TNzM+2OVh36XNSGOC kgbfrZcki/CND4uaxHLRdQzj31F7imo/AdBUhOqfn6LTqWwpnDBsZb48ZZZku+KC DlA69OBuoeDMSkxTATHBa7lxDOHS7tY8nB2kxteK0oqnVIAtgQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMsxOubaX8MQgMgVi8jv9tA9dT2lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzRhODA4ZDQtZjM5Yi0z ZWFmLTgwMmEtNDZjNzdjNmQxNTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAbBUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAiA4ZBtyty0/H8ZS+bsJoBT4Cs4YPmTw9pnGNFKnvJAnCNmK1tG6Di5ut HzN50WuGqnFyF+ATYfQ1sQcbZhThD2yndbf0BnwLR/tydjSSuoSzMs+U5nDNU1yE r9jdEr4nb/7oMayFOozEN83zeaDGk70KROqYtM7Zm4H0SCs+xM3lEvs3OJ9yENID jd/5l5OEKXD9LB4wIaB3dAWpVM7vcV5BPJhUDju/GasNIqQ1F6/VMxipn6BjD7Ac jpPk9h/uZGtGgap5OKwEMYqGQQMd+q8vFYzwbgbszja/Hg6UNwQEu7WXEqKAq7Ux b9xGScF0X5YAN7IvmQTHg9SLB9nXEg== -----END CERTIFICATE-----Generated at Wed Nov 5 14:46:22 2025 by rpki-client