$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ece903d-52be-317b-af18-f2a1344c3da8.roa File: 3ece903d-52be-317b-af18-f2a1344c3da8.roa (raw, json) Hash identifier: 2POepG9TsvwJcIJv8d1F5t09G4Cz+0M5v2HEjAg+gjk= Subject key identifier: 46:9E:52:EE:2D:7C:BD:91:8E:54:5F:2C:24:74:79:4E:B8:08:D5:24 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F7BB6307719FD017BD0BC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ece903d-52be-317b-af18-f2a1344c3da8.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 108.22.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:bb:63:07:71:9f:d0:17:bd:0b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=0abbaade-6016-4b82-a597-0f7ccc4898ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:55:1d:31:47:34:8d:6e:78:1d:d0:2b:b0:6f: 52:bf:4b:1b:1c:f7:3f:fe:ed:38:0f:40:f1:95:ba: 32:79:73:05:ab:00:1c:06:aa:12:ba:8f:f5:b0:d0: c0:bb:c6:fa:6b:fb:ec:56:07:3d:35:9f:a4:54:08: d9:d2:8d:74:dd:83:6e:e2:c1:0c:65:6f:86:50:99: 83:b3:c1:af:ad:0e:c6:a1:f0:f1:e3:b0:37:a2:4a: 98:11:e2:ad:22:eb:5c:a9:29:c5:af:59:27:ee:09: a4:c3:48:f9:5b:85:fc:0d:21:23:e4:87:a4:f5:06: 5b:ff:a4:24:38:7a:da:c3:51:ea:f8:3a:ee:29:37: fc:35:9c:cc:63:fd:1b:7c:ee:f8:35:cb:f7:1f:45: 4a:94:13:f4:dd:99:1d:71:b6:85:e6:2b:38:5f:ef: 32:1e:17:f7:0f:c7:42:e6:d1:61:43:5a:22:05:f6: a0:fc:e1:86:d1:34:82:1e:9f:ce:38:08:fa:b6:2a: 8f:00:67:b5:c0:3e:ef:47:e4:a2:48:0f:f4:34:c8: f1:30:2a:76:fc:1b:37:1b:68:14:fd:33:c4:3a:da: 34:39:05:ec:11:be:ec:bf:69:51:09:68:5d:2d:89: cc:1c:75:8a:6b:c2:70:97:82:42:44:51:f7:a2:ae: e8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:9E:52:EE:2D:7C:BD:91:8E:54:5F:2C:24:74:79:4E:B8:08:D5:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ece903d-52be-317b-af18-f2a1344c3da8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.22.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:ea:6d:41:53:2b:bf:55:01:f7:aa:5c:68:6b:4c:4b:20:77: 18:13:c1:7e:10:8d:a3:73:71:bc:cf:a9:15:82:09:f1:3b:d2: 16:a8:d2:f6:be:08:89:04:2a:ea:42:82:80:a0:eb:fa:f3:c8: f9:63:50:55:55:74:9f:8d:79:49:17:d6:07:15:ce:0e:7e:27: 39:8f:04:4e:b0:98:9e:5a:8e:7d:a1:e4:85:57:f7:4b:77:25: 52:cd:13:90:17:aa:f0:e2:a7:e1:37:dc:62:bb:61:55:78:08: 5c:33:e1:c5:6c:62:f1:0c:f8:cf:71:26:b5:6c:9b:c3:41:0b: d2:91:a8:b5:b6:eb:9f:87:07:86:b6:f7:9c:1a:98:aa:24:18: 35:87:e4:7d:a2:d2:47:bb:c2:2d:9a:93:36:ef:e7:aa:ea:6d: 93:26:d5:be:1a:43:4f:a3:1f:d3:13:a5:50:47:5c:bd:12:14: 0e:ca:a6:9f:a1:59:73:48:25:10:85:b8:e9:76:b6:a3:9c:c8: 5c:e0:44:68:4a:e2:2c:de:a6:5c:15:e5:45:6a:ab:4f:2c:e1: 14:5b:ba:5c:ee:9c:cf:11:0a:14:e5:ed:07:0c:65:97:63:0d: 63:b9:51:b3:a4:6a:06:bb:22:2d:23:b3:f8:01:ab:c3:a9:21: 31:4b:b0:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy97tjB3Gf0Be9C8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MGFiYmFhZGUtNjAxNi00YjgyLWE1OTctMGY3Y2NjNDg5OGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVUdMUc0jW54HdArsG9Sv0sbHPc//u04D0Dx lboyeXMFqwAcBqoSuo/1sNDAu8b6a/vsVgc9NZ+kVAjZ0o103YNu4sEMZW+GUJmD s8GvrQ7GofDx47A3okqYEeKtIutcqSnFr1kn7gmkw0j5W4X8DSEj5Iek9QZb/6Qk OHraw1Hq+DruKTf8NZzMY/0bfO74Ncv3H0VKlBP03ZkdcbaF5is4X+8yHhf3D8dC 5tFhQ1oiBfag/OGG0TSCHp/OOAj6tiqPAGe1wD7vR+SiSA/0NMjxMCp2/Bs3G2gU /TPEOto0OQXsEb7sv2lRCWhdLYnMHHWKa8Jwl4JCRFH3oq7o5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEaeUu4tfL2RjlRfLCR0eU64CNUkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2VjZTkwM2QtNTJiZS0z MTdiLWFmMTgtZjJhMTM0NGMzZGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbBYLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHqbUFTK79VAfeqXGhrTEsgdxgTwX4QjaNzcbzPqRWCCfE70hao0va+ CIkEKupCgoCg6/rzyPljUFVVdJ+NeUkX1gcVzg5+JzmPBE6wmJ5ajn2h5IVX90t3 JVLNE5AXqvDip+E33GK7YVV4CFwz4cVsYvEM+M9xJrVsm8NBC9KRqLW265+HB4a2 95wamKokGDWH5H2i0ke7wi2akzbv56rqbZMm1b4aQ0+jH9MTpVBHXL0SFA7Kpp+h WXNIJRCFuOl2tqOcyFzgRGhK4izeplwV5UVqq08s4RRbulzunM8RChTl7QcMZZdj DWO5UbOkaga7Ii0js/gBq8OpITFLsEQ= -----END CERTIFICATE-----Generated at Wed Nov 5 02:19:31 2025 by rpki-client