$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/46caa585-df4a-302c-9a7f-e69d38ba8b27.roa File: 46caa585-df4a-302c-9a7f-e69d38ba8b27.roa (raw, json) Hash identifier: aYiCw3LzJJGPWEKuph7edl3J4DJW1uLQWl2rUEFRNpw= Subject key identifier: 35:C2:03:EE:F0:4B:09:08:16:13:B8:F8:D3:A2:FB:AD:BC:EF:C5:26 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F7DE81D20EAD5080569A00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/46caa585-df4a-302c-9a7f-e69d38ba8b27.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 108.3.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:de:81:d2:0e:ad:50:80:56:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=9105b8ff-a86f-41d4-b73c-3011be198dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ec:8f:9d:ed:84:cd:96:dc:34:00:35:2d:ac: 59:11:69:e5:ac:08:c8:0a:7b:b4:67:5a:13:ac:74: 6f:8b:71:07:2c:12:06:23:59:0b:9b:9e:b1:a4:e2: 9a:46:ad:86:bb:55:e5:24:a0:1c:1e:75:ee:21:f5: 96:05:29:35:27:d1:43:4f:ec:b5:9a:00:44:16:db: 70:5f:32:02:75:f2:cf:9c:51:4f:9e:99:81:d2:bd: b4:be:f6:58:22:02:42:1a:bb:30:9a:23:28:cd:24: 2f:c6:26:87:fa:69:97:8c:ae:8f:6b:2c:18:d0:c0: 6e:ba:24:ed:2c:dc:fd:02:ec:c9:a9:9e:5f:44:3f: b9:e6:7e:12:43:50:9b:17:b2:a1:3f:14:78:8a:52: 76:a1:22:89:2c:9a:a0:40:4d:94:80:d4:7c:90:1e: 6e:de:fc:57:80:28:f1:39:db:15:47:26:6c:fd:75: 6e:a3:e9:d5:e9:39:a0:c2:d3:49:0a:5f:a2:7a:c7: 94:10:67:29:aa:70:71:44:63:29:0e:35:91:a3:73: 06:e0:ca:42:e2:7c:d0:f9:df:61:87:55:22:dc:5c: d7:d2:dc:99:8a:0b:6c:37:b1:b9:8e:a9:20:8f:20: bc:28:af:f0:b1:1c:30:6d:e1:ac:af:0e:4f:01:20: c8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C2:03:EE:F0:4B:09:08:16:13:B8:F8:D3:A2:FB:AD:BC:EF:C5:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/46caa585-df4a-302c-9a7f-e69d38ba8b27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.3.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:0c:93:2d:d4:80:0e:4a:3d:b3:3d:45:9e:17:6c:70:94:ae: 2a:ec:ac:a4:5f:d0:57:d7:92:ec:44:c2:f3:b6:41:14:c8:e6: 6c:16:51:0e:de:8f:fc:bd:58:fe:0b:1b:95:61:4b:39:8a:2d: ff:be:1e:a9:a3:b9:0a:97:df:94:31:82:40:72:c6:92:5b:5a: 41:6b:33:48:19:45:04:da:ad:61:22:6d:ff:cd:00:50:69:56: fd:55:d1:db:9a:cd:42:1c:55:c7:fe:24:dc:69:18:a0:b9:64: db:35:c5:25:4b:c6:92:ed:6f:ce:6d:08:23:21:84:80:03:31: e3:3c:e1:dd:20:eb:7f:ec:a6:c2:1a:8c:26:55:6a:c7:87:4a: ac:28:66:75:40:8d:2b:0f:6c:45:50:6a:b4:86:8a:7f:e3:fe: a4:ed:3c:8a:ed:09:c6:d2:2f:a9:bf:75:70:94:8e:07:26:27: 97:2b:bf:ed:25:5e:d0:dc:4f:5a:8b:88:cc:78:e5:14:90:03: 0d:ae:56:5c:47:24:24:43:cf:9c:20:4d:c8:8c:ea:94:b1:83: 1d:5c:47:db:90:c4:89:00:48:31:85:fa:3e:74:10:32:7f:88: 31:00:b3:ac:32:8e:6a:88:26:1f:e7:8e:88:f7:3f:1d:fd:f9: b7:42:d3:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy996B0g6tUIBWmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk OTEwNWI4ZmYtYTg2Zi00MWQ0LWI3M2MtMzAxMWJlMTk4ZGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+yPne2EzZbcNAA1LaxZEWnlrAjICnu0Z1oT rHRvi3EHLBIGI1kLm56xpOKaRq2Gu1XlJKAcHnXuIfWWBSk1J9FDT+y1mgBEFttw XzICdfLPnFFPnpmB0r20vvZYIgJCGrswmiMozSQvxiaH+mmXjK6PaywY0MBuuiTt LNz9AuzJqZ5fRD+55n4SQ1CbF7KhPxR4ilJ2oSKJLJqgQE2UgNR8kB5u3vxXgCjx OdsVRyZs/XVuo+nV6TmgwtNJCl+ieseUEGcpqnBxRGMpDjWRo3MG4MpC4nzQ+d9h h1Ui3FzX0tyZigtsN7G5jqkgjyC8KK/wsRwwbeGsrw5PASDInwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXCA+7wSwkIFhO4+NOi+62878UmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDZjYWE1ODUtZGY0YS0z MDJjLTlhN2YtZTY5ZDM4YmE4YjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGbANAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsMky3UgA5KPbM9RZ4XbHCUrirsrKRf0FfXkuxEwvO2QRTI5mwWUQ7e j/y9WP4LG5VhSzmKLf++HqmjuQqX35QxgkByxpJbWkFrM0gZRQTarWEibf/NAFBp Vv1V0duazUIcVcf+JNxpGKC5ZNs1xSVLxpLtb85tCCMhhIADMeM84d0g63/spsIa jCZVaseHSqwoZnVAjSsPbEVQarSGin/j/qTtPIrtCcbSL6m/dXCUjgcmJ5crv+0l XtDcT1qLiMx45RSQAw2uVlxHJCRDz5wgTciM6pSxgx1cR9uQxIkASDGF+j50EDJ/ iDEAs6wyjmqIJh/njoj3Px39+bdC0wY= -----END CERTIFICATE-----Generated at Wed Nov 5 02:21:09 2025 by rpki-client