$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a358a7c-990d-3102-a452-644b23508594.roa File: 3a358a7c-990d-3102-a452-644b23508594.roa (raw, json) Hash identifier: UzMlh6MgP8LsW9wEOCwKlJF8eLbJnLSafquzLaB1tU8= Subject key identifier: 96:4F:BF:86:63:BC:43:C2:DE:57:F1:F2:3A:5F:02:D0:99:35:AE:3F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F8023969DC9295C213A580 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a358a7c-990d-3102-a452-644b23508594.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 71.244.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:02:39:69:dc:92:95:c2:13:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=141c3304-a386-4201-97ce-ccca64cb0d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:78:d7:88:bc:19:63:3b:99:21:88:7d:40:75: 6b:fe:91:48:76:ca:54:16:26:15:1d:19:71:89:f3: c9:b2:87:42:02:5d:8a:77:e7:2d:00:da:40:45:8c: 9d:1f:2d:a4:90:be:ee:f4:e2:fb:c2:6c:09:60:89: 84:7c:28:ea:a5:84:8f:a2:46:ce:d6:fa:67:4a:0e: 68:27:2e:b7:ae:4a:a1:97:78:13:71:8b:75:27:f8: d6:7e:b0:5c:50:a6:53:f3:1d:51:36:c1:90:db:b3: 7c:9e:54:59:33:76:50:f2:58:0a:96:5c:d5:8e:a1: cd:c0:7d:59:34:24:83:90:d1:a9:41:77:d8:98:88: b8:c6:d6:14:50:97:b9:dd:98:84:d1:80:c2:ec:94: 22:f3:51:f0:a2:bd:71:47:63:20:4a:22:f7:81:f1: af:5d:c4:e3:3e:52:d3:17:2c:a0:8b:6d:f4:cb:39: a8:f4:26:44:5f:8a:84:ea:62:57:5e:d1:88:db:82: 9d:0b:d5:4a:3b:40:e3:fd:4e:06:ca:ff:a0:67:0f: a3:fd:e4:31:72:5d:28:a4:7d:5d:be:3c:fc:ac:88: 2d:24:29:72:72:3b:f4:66:ce:46:ad:e3:72:fa:6b: 20:a3:21:ac:26:a0:3f:74:9b:13:42:b5:78:0d:ba: 87:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4F:BF:86:63:BC:43:C2:DE:57:F1:F2:3A:5F:02:D0:99:35:AE:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a358a7c-990d-3102-a452-644b23508594.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.244.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:62:4f:55:56:c4:66:9c:12:18:3e:f9:c2:0d:eb:0f:21:8b: 97:9a:a9:3c:38:f9:3c:9c:f2:fe:a0:3b:e0:e7:75:78:b8:f6: dc:65:7b:9b:f5:34:78:85:4d:8b:5e:6f:aa:0b:ed:28:ee:e8: 36:35:88:8a:be:08:18:eb:49:f0:e8:63:b2:47:28:81:0e:0d: 78:71:4f:47:29:e0:51:76:5f:b2:dd:7a:05:e4:b4:57:40:e8: e7:a4:a6:11:86:65:d1:fd:26:cf:95:6b:08:60:a9:ce:9f:17: 26:a6:77:fb:26:e8:ed:e1:f4:68:a5:7c:4a:4d:31:2b:eb:e7: 67:22:0b:a1:9c:ba:98:05:b5:68:e5:b0:34:8a:d0:dd:a2:e1: fa:1a:de:1c:84:da:45:ef:e9:96:dc:9a:d0:5a:17:54:9d:e1: 49:6f:15:d9:bb:e7:3b:24:7c:85:b0:ae:47:46:9d:3b:2e:ae: 07:d1:0f:e3:48:83:95:16:70:22:06:5c:28:06:bd:35:0e:8b: 3b:9e:c3:cf:79:0c:23:0f:31:6e:ee:83:e1:a5:75:94:71:36: ad:3b:a3:db:a5:79:3b:0e:a1:37:6f:43:da:ee:1b:c3:d5:18: b6:07:8d:a3:ce:e4:6a:1e:5e:99:8f:f8:86:b6:7b:68:dc:c2: ba:07:10:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy+AI5adySlcITpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MTQxYzMzMDQtYTM4Ni00MjAxLTk3Y2UtY2NjYTY0Y2IwZDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHjXiLwZYzuZIYh9QHVr/pFIdspUFiYVHRlx ifPJsodCAl2Kd+ctANpARYydHy2kkL7u9OL7wmwJYImEfCjqpYSPokbO1vpnSg5o Jy63rkqhl3gTcYt1J/jWfrBcUKZT8x1RNsGQ27N8nlRZM3ZQ8lgKllzVjqHNwH1Z NCSDkNGpQXfYmIi4xtYUUJe53ZiE0YDC7JQi81Hwor1xR2MgSiL3gfGvXcTjPlLT Fyygi230yzmo9CZEX4qE6mJXXtGI24KdC9VKO0Dj/U4Gyv+gZw+j/eQxcl0opH1d vjz8rIgtJClycjv0Zs5GreNy+msgoyGsJqA/dJsTQrV4DbqH1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZPv4ZjvEPC3lfx8jpfAtCZNa4/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2EzNThhN2MtOTkwZC0z MTAyLWE0NTItNjQ0YjIzNTA4NTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER/RAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK5iT1VWxGacEhg++cIN6w8hi5eaqTw4+Tyc8v6gO+DndXi49txle5v1 NHiFTYteb6oL7Sju6DY1iIq+CBjrSfDoY7JHKIEODXhxT0cp4FF2X7LdegXktFdA 6OekphGGZdH9Js+Vawhgqc6fFyamd/sm6O3h9GilfEpNMSvr52ciC6GcupgFtWjl sDSK0N2i4foa3hyE2kXv6ZbcmtBaF1Sd4UlvFdm75zskfIWwrkdGnTsurgfRD+NI g5UWcCIGXCgGvTUOizuew895DCMPMW7ug+GldZRxNq07o9uleTsOoTdvQ9ruG8PV GLYHjaPO5GoeXpmP+Ia2e2jcwroHEOQ= -----END CERTIFICATE-----Generated at Wed Nov 5 13:14:55 2025 by rpki-client