$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4408a2c6-2b4c-3c08-b37f-b6a63152f7c1.roa File: 4408a2c6-2b4c-3c08-b37f-b6a63152f7c1.roa (raw, json) Hash identifier: 2G5znLCnUxlgSwr12APWb5eF1HroiZbaBHU1cvr6xko= Subject key identifier: DE:3C:67:BB:A7:DB:48:DD:A1:74:45:44:21:32:30:FA:49:4A:0C:7C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F7E2B3B826D0C22A30F900 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4408a2c6-2b4c-3c08-b37f-b6a63152f7c1.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 108.36.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:e2:b3:b8:26:d0:c2:2a:30:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=28d12b54-3a91-4936-9f2c-133c6427a561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:18:8c:13:cd:67:39:9e:4d:e1:c8:7f:f5:91: d8:84:16:2b:47:7c:4e:49:9a:6d:58:bf:ea:40:ed: f4:d9:0d:85:88:5b:11:e5:fd:ab:00:be:e2:66:cb: 28:7b:f3:86:35:95:05:b0:ce:b4:b3:97:c3:76:61: 56:a4:87:91:e7:39:5d:b6:8a:a7:c1:5c:2d:2b:3c: 1f:2c:b8:8f:f6:18:10:d4:3b:a5:77:4a:d3:47:d0: 14:e1:ea:0d:38:61:c4:43:9b:f1:fa:d5:a2:40:a4: 90:ac:25:3d:38:68:55:fd:ef:83:72:26:98:e2:78: f5:e6:1e:0b:a6:57:9a:4d:0a:cc:30:2c:e3:0f:0c: 97:63:2e:50:f6:58:ec:63:f9:9a:29:26:d4:5f:06: fb:27:59:5c:9a:d9:fc:c7:8f:05:9a:54:27:0b:90: 13:03:e0:b4:66:c1:0e:12:1f:91:29:6d:eb:da:22: ac:08:bf:bb:e9:56:10:5b:8b:a2:7a:2a:25:13:7d: 97:4b:d1:15:65:e8:4b:5a:31:ff:ce:f7:77:19:b7: 46:9a:b1:fd:19:23:82:67:ea:f4:3c:8d:e9:0d:70: 8d:0b:e9:16:52:6f:d1:72:48:f4:56:7e:4b:b6:7a: a1:33:a7:2e:ec:ec:d7:df:4c:54:62:0b:fe:4c:1b: 7a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:3C:67:BB:A7:DB:48:DD:A1:74:45:44:21:32:30:FA:49:4A:0C:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4408a2c6-2b4c-3c08-b37f-b6a63152f7c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.36.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:cf:14:39:20:3c:c9:a6:b3:23:46:ae:bc:df:25:bb:de:02: 29:ab:67:8d:3d:98:40:b2:19:5d:cc:0d:95:38:be:9f:7f:73: 19:1a:c8:68:be:f8:e4:67:e8:59:87:cb:4f:f2:cb:93:0a:dd: d0:1b:0d:93:b3:cd:1f:eb:8e:73:4b:fe:8f:cb:4e:02:60:98: ba:56:36:30:bc:d4:51:0c:28:e2:9e:8d:8b:56:4d:1f:89:78: ba:53:f4:e6:7d:89:6a:fe:27:8d:e1:75:17:92:e0:6e:c8:4d: c2:fa:a9:83:37:ca:56:b0:82:68:fb:d3:a9:aa:8c:77:46:ba: ac:63:7a:bc:f3:47:5b:de:c5:33:37:08:51:04:b8:34:d8:43: 1e:fd:9f:5e:a5:2d:05:29:02:82:00:e8:9b:74:f3:f3:36:0a: 84:f1:e3:c5:ea:fa:62:fc:01:8e:df:75:68:b1:62:e6:35:ee: 07:37:3e:05:a1:89:2b:55:38:b5:a9:7e:b3:74:41:d2:74:6d: e0:95:44:c1:eb:4f:5d:e6:b8:78:c5:30:b7:01:7c:c4:eb:2b: 39:5a:4e:d2:8f:13:d9:e5:b8:de:99:25:b6:41:64:2a:32:5f: 1d:db:21:9c:c5:ce:3b:ab:d4:f6:2e:a4:6c:b0:88:f8:85:38: 5a:eb:e3:1b -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuy9+KzuCbQwiow+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MjhkMTJiNTQtM2E5MS00OTM2LTlmMmMtMTMzYzY0MjdhNTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBiME81nOZ5N4ch/9ZHYhBYrR3xOSZptWL/q QO302Q2FiFsR5f2rAL7iZssoe/OGNZUFsM60s5fDdmFWpIeR5zldtoqnwVwtKzwf LLiP9hgQ1Duld0rTR9AU4eoNOGHEQ5vx+tWiQKSQrCU9OGhV/e+DciaY4nj15h4L pleaTQrMMCzjDwyXYy5Q9ljsY/maKSbUXwb7J1lcmtn8x48FmlQnC5ATA+C0ZsEO Eh+RKW3r2iKsCL+76VYQW4uieiolE32XS9EVZehLWjH/zvd3GbdGmrH9GSOCZ+r0 PI3pDXCNC+kWUm/Rckj0Vn5LtnqhM6cu7OzX30xUYgv+TBt6zwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFN48Z7un20jdoXRFRCEyMPpJSgx8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDQwOGEyYzYtMmI0Yy0z YzA4LWIzN2YtYjZhNjMxNTJmN2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAbCQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAfc8UOSA8yaazI0auvN8lu94CKatnjT2YQLIZXcwNlTi+n39zGRrIaL74 5GfoWYfLT/LLkwrd0BsNk7PNH+uOc0v+j8tOAmCYulY2MLzUUQwo4p6Ni1ZNH4l4 ulP05n2Jav4njeF1F5LgbshNwvqpgzfKVrCCaPvTqaqMd0a6rGN6vPNHW97FMzcI UQS4NNhDHv2fXqUtBSkCggDom3Tz8zYKhPHjxer6YvwBjt91aLFi5jXuBzc+BaGJ K1U4tal+s3RB0nRt4JVEwetPXea4eMUwtwF8xOsrOVpO0o8T2eW43pkltkFkKjJf HdshnMXOO6vU9i6kbLCI+IU4WuvjGw== -----END CERTIFICATE-----Generated at Wed Nov 5 02:21:05 2025 by rpki-client