$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a652f60-cec7-329a-b702-fd9ae911cdae.roa File: 3a652f60-cec7-329a-b702-fd9ae911cdae.roa (raw, json) Hash identifier: pxkjRa3vZ6wrjlWXfc2z5m/dchJeF8zU8Yqq3S2HAd8= Subject key identifier: CB:01:88:07:60:73:4A:64:F8:40:BF:9A:B1:58:48:14:70:0D:C8:D2 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BC2708966A9B2CC4EEB479CC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a652f60-cec7-329a-b702-fd9ae911cdae.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 22394 IP address blocks: 141.207.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:89:66:a9:b2:cc:4e:eb:47:9c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=132f877f-8764-41aa-aa9e-99e9ff8ffd50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:84:ef:54:20:d5:80:0d:3c:b4:34:38:03:10: ba:3a:2f:72:49:86:2f:36:d2:d1:e6:12:43:1c:74: 82:91:3a:01:ce:1e:06:10:52:05:31:ce:f7:db:22: 1e:7a:c8:13:89:a0:19:be:7d:58:b6:bc:1f:62:b8: 0e:5c:29:db:d8:69:92:4f:da:40:8c:6f:60:5a:aa: b6:ba:2f:e0:0d:bd:dc:79:87:93:8f:01:23:d9:98: 4e:a0:c6:10:19:c4:43:da:64:50:7f:c9:38:93:31: 0f:2d:d5:85:71:7c:62:0f:15:0e:11:49:d3:bb:a1: 50:91:68:b7:65:08:9f:56:ec:73:31:68:b9:28:71: e4:b0:cc:96:ac:41:49:7d:f1:bb:f3:28:8c:14:5c: 70:70:91:6f:e9:9e:f0:d1:eb:ea:03:ab:a7:b2:f1: 70:27:54:1b:81:39:ae:ad:62:4c:21:63:2d:f8:e1: d5:b7:60:8b:28:c1:8a:39:e2:af:97:6e:f4:dd:6d: df:2a:41:56:ee:5a:f5:8b:ee:e7:9f:da:74:07:90: b9:13:df:7f:1d:5f:f4:66:16:b4:4c:c2:f8:9e:f9: 12:67:d3:74:1d:bd:59:80:a0:20:65:43:92:90:d0: be:a0:3e:d7:5a:de:9f:66:26:a2:94:90:d1:7e:87: 96:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:01:88:07:60:73:4A:64:F8:40:BF:9A:B1:58:48:14:70:0D:C8:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a652f60-cec7-329a-b702-fd9ae911cdae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 141.207.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:16:19:cd:92:36:6c:ea:69:9d:cd:a3:b4:a2:92:1d:0e:b0: ba:ee:71:e7:31:e6:69:00:95:b5:72:a7:e7:41:5e:f8:22:04: 53:ec:d6:e8:84:7a:b2:2c:36:98:0e:f5:14:7f:8e:31:87:d8: 28:70:49:6a:a9:07:58:62:6c:d7:40:b0:d9:11:85:5a:54:54: ca:6f:51:c0:8e:f3:f2:75:14:e8:e5:3e:69:0a:71:b2:8f:1c: b8:9c:99:42:32:60:55:d4:11:de:61:16:db:09:d3:5a:0e:47: d1:b8:c1:ae:ce:7d:ac:44:9d:f9:d5:a8:b8:53:37:50:0a:c7: 80:81:d8:39:5f:df:d7:8f:3f:6b:44:4f:68:49:84:51:e1:41: 8d:19:4a:91:ee:ee:76:eb:e0:06:56:92:c8:61:e8:bd:71:95: f0:25:04:14:3f:a6:5e:5c:1d:4c:b7:64:0d:65:bb:6d:f5:1b: 14:9c:97:6f:42:cd:c2:d8:9e:26:17:51:1b:c8:c3:a1:77:dd: 2e:64:34:89:20:2e:37:93:29:7e:00:7c:45:73:6e:de:4c:ea: 6b:69:33:83:4f:77:24:62:cf:a8:37:fe:00:ef:11:89:9d:c6: 7a:0a:b5:b8:fc:f9:50:c7:05:bd:a9:b7:e4:ff:44:2b:89:ac: 61:f4:e0:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvCcIlmqbLMTutHnMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk MTMyZjg3N2YtODc2NC00MWFhLWFhOWUtOTllOWZmOGZmZDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoTvVCDVgA08tDQ4AxC6Oi9ySYYvNtLR5hJD HHSCkToBzh4GEFIFMc732yIeesgTiaAZvn1YtrwfYrgOXCnb2GmST9pAjG9gWqq2 ui/gDb3ceYeTjwEj2ZhOoMYQGcRD2mRQf8k4kzEPLdWFcXxiDxUOEUnTu6FQkWi3 ZQifVuxzMWi5KHHksMyWrEFJffG78yiMFFxwcJFv6Z7w0evqA6unsvFwJ1QbgTmu rWJMIWMt+OHVt2CLKMGKOeKvl2703W3fKkFW7lr1i+7nn9p0B5C5E99/HV/0Zha0 TML4nvkSZ9N0Hb1ZgKAgZUOSkNC+oD7XWt6fZiailJDRfoeWJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsBiAdgc0pk+EC/mrFYSBRwDcjSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2E2NTJmNjAtY2VjNy0z MjlhLWI3MDItZmQ5YWU5MTFjZGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjc/EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUWGc2SNmzqaZ3No7Sikh0OsLrucecx5mkAlbVyp+dBXvgiBFPs1uiE erIsNpgO9RR/jjGH2ChwSWqpB1hibNdAsNkRhVpUVMpvUcCO8/J1FOjlPmkKcbKP HLicmUIyYFXUEd5hFtsJ01oOR9G4wa7OfaxEnfnVqLhTN1AKx4CB2Dlf39ePP2tE T2hJhFHhQY0ZSpHu7nbr4AZWkshh6L1xlfAlBBQ/pl5cHUy3ZA1lu231GxScl29C zcLYniYXURvIw6F33S5kNIkgLjeTKX4AfEVzbt5M6mtpM4NPdyRiz6g3/gDvEYmd xnoKtbj8+VDHBb2pt+T/RCuJrGH04II= -----END CERTIFICATE-----Generated at Wed Nov 5 16:18:52 2025 by rpki-client