$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35c1df24-99da-325c-ab92-21410a3f50a8.roa File: 35c1df24-99da-325c-ab92-21410a3f50a8.roa (raw, json) Hash identifier: cQmXur91gfNMw58DUZGYbQiHTduCHH5n0va6HBHbAwM= Subject key identifier: 39:8E:7B:2C:2D:B0:5E:56:55:19:4E:59:5C:BB:FD:E3:5A:C1:35:4B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BA39D2D2265E5F92172689700 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35c1df24-99da-325c-ab92-21410a3f50a8.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 701 IP address blocks: 71.114.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:2d:22:65:e5:f9:21:72:68:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=f5349e7b-ed7e-4f26-b9e5-b20c7f6e55dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b2:40:55:ac:4c:32:16:7e:45:29:f3:82:0c: 99:73:c6:6d:ed:83:4b:ea:f1:8c:59:47:c2:d2:cd: 80:ac:12:52:ce:a9:c6:ab:22:e8:f8:d2:cd:40:66: 77:18:27:a2:fb:c4:aa:10:95:e0:2e:39:ad:59:50: 41:c4:9b:ba:25:b3:ff:a2:cd:c7:85:a4:5b:03:f4: b5:f7:af:e4:bb:a7:1c:cd:86:b6:59:e0:ae:cb:44: 40:96:33:57:ba:9c:8a:92:25:ab:15:29:61:2c:40: 3c:b6:02:a9:6a:c5:f9:63:a4:98:50:18:fc:78:c5: ba:4a:21:be:b1:5c:b4:d0:de:ea:4c:f2:11:af:39: fc:78:53:41:53:aa:4a:de:26:32:e1:74:91:76:5c: a6:81:f6:dd:d4:2b:ce:a0:bd:b2:62:e1:9d:45:71: 24:15:ef:47:d2:a9:50:97:78:70:5d:8e:25:19:cc: 8d:fb:51:75:c7:45:78:f6:32:a8:d7:3b:fe:a5:17: 5c:5f:77:98:bf:9b:9c:e4:78:22:1d:80:80:f6:a9: 0c:18:ee:ee:50:e5:cb:d6:55:15:d3:2d:df:a3:27: 6f:b5:49:7d:84:fb:b1:c4:b3:16:56:2c:7d:7e:95: 93:c6:b7:b5:04:47:06:7b:b6:6d:70:c6:5d:ee:9c: 70:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:8E:7B:2C:2D:B0:5E:56:55:19:4E:59:5C:BB:FD:E3:5A:C1:35:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35c1df24-99da-325c-ab92-21410a3f50a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.114.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:3a:c3:7d:5e:dc:4a:f9:68:cf:c5:79:9e:0b:87:f1:b8:71: 3c:53:8d:2f:7a:65:1a:17:7f:2f:78:9b:10:04:7a:d8:c4:ac: 37:9a:0e:60:29:01:c3:45:30:ea:84:e9:72:9a:22:c4:f8:12: bc:c2:04:6e:fd:d4:9e:22:cd:dd:bd:c3:18:b2:92:eb:83:09: fe:40:22:b6:bd:be:91:b5:54:9a:e3:5e:41:48:a7:8d:94:59: 45:6b:6e:87:ec:be:28:ff:48:48:86:d4:d7:2c:57:c9:8b:68: b7:62:c3:bf:00:cb:8f:04:54:99:37:98:8d:2e:44:57:f5:fe: 11:6b:9d:fd:89:4a:8d:6d:17:35:93:a1:12:73:41:70:38:20: 17:dc:6d:58:6d:d5:03:a5:69:a3:db:cf:55:ba:8d:45:c1:52: ec:1f:58:ad:98:9b:7b:e0:bf:fb:a9:b9:df:49:5a:6e:0e:91: 77:23:35:69:43:3a:1f:fd:16:d3:c3:8a:31:09:14:1e:c9:3c: 5b:e5:5c:7a:ff:ca:2f:c6:ba:a1:87:27:2f:24:3f:12:87:95: a6:85:bc:4f:73:4b:f6:9a:25:d2:92:00:2c:7e:69:d8:f4:75: 9a:0b:4a:6e:8e:37:f3:0c:d2:ba:5c:97:fd:b8:f5:5c:59:6d: 61:d3:31:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnS0iZeX5IXJolwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZjUzNDllN2ItZWQ3ZS00ZjI2LWI5ZTUtYjIwYzdmNmU1NWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrJAVaxMMhZ+RSnzggyZc8Zt7YNL6vGMWUfC 0s2ArBJSzqnGqyLo+NLNQGZ3GCei+8SqEJXgLjmtWVBBxJu6JbP/os3HhaRbA/S1 96/ku6cczYa2WeCuy0RAljNXupyKkiWrFSlhLEA8tgKpasX5Y6SYUBj8eMW6SiG+ sVy00N7qTPIRrzn8eFNBU6pK3iYy4XSRdlymgfbd1CvOoL2yYuGdRXEkFe9H0qlQ l3hwXY4lGcyN+1F1x0V49jKo1zv+pRdcX3eYv5uc5HgiHYCA9qkMGO7uUOXL1lUV 0y3foydvtUl9hPuxxLMWVix9fpWTxre1BEcGe7ZtcMZd7pxwRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmOeywtsF5WVRlOWVy7/eNawTVLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzVjMWRmMjQtOTlkYS0z MjVjLWFiOTItMjE0MTBhM2Y1MGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER3JgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE46w31e3Er5aM/FeZ4Lh/G4cTxTjS96ZRoXfy94mxAEetjErDeaDmAp AcNFMOqE6XKaIsT4ErzCBG791J4izd29wxiykuuDCf5AIra9vpG1VJrjXkFIp42U WUVrbofsvij/SEiG1NcsV8mLaLdiw78Ay48EVJk3mI0uRFf1/hFrnf2JSo1tFzWT oRJzQXA4IBfcbVht1QOlaaPbz1W6jUXBUuwfWK2Ym3vgv/upud9JWm4OkXcjNWlD Oh/9FtPDijEJFB7JPFvlXHr/yi/GuqGHJy8kPxKHlaaFvE9zS/aaJdKSACx+adj0 dZoLSm6ON/MM0rpcl/249VxZbWHTMeY= -----END CERTIFICATE-----Generated at Wed Nov 5 17:48:35 2025 by rpki-client