$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d2d2fdf-d19c-3fb7-b50f-a36179645077.roa File: 4d2d2fdf-d19c-3fb7-b50f-a36179645077.roa (raw, json) Hash identifier: XbrGhHR1YTgshvldmoJ4I4vbgJ3K/DOj1biAHFG8hu8= Subject key identifier: CC:CB:A4:5D:20:DD:FA:21:14:6F:A0:CF:ED:CF:25:50:3A:74:5C:E4 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F7CF2E9887886DA08C0340 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d2d2fdf-d19c-3fb7-b50f-a36179645077.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 33699 IP address blocks: 65.196.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:cf:2e:98:87:88:6d:a0:8c:03:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=fdeca0ff-c67f-4c65-9f7b-ce744168f772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:93:f7:3c:27:e7:d9:91:2c:36:92:76:fe:f4: 6d:9b:5d:e8:0c:c8:00:4e:e5:db:e7:ca:87:43:ad: 9b:ae:2b:66:e9:70:2a:cb:61:7f:9e:f2:a1:2b:c7: 74:77:2a:a3:fa:f4:4a:84:5e:94:0e:19:b3:c1:eb: 45:4b:a0:47:f0:92:28:8b:c5:32:58:ff:e2:81:35: 76:72:23:10:54:cc:f7:b5:0c:bd:7f:8b:5c:19:4e: 7e:ad:65:d3:fc:49:e9:6c:2a:3c:c7:b5:eb:e1:66: f3:70:4e:90:d8:a6:76:53:1d:17:f3:62:90:ec:cf: ed:e5:e0:38:9c:c0:e1:23:2a:ab:87:25:5e:3d:15: bb:8d:a9:72:d9:7f:bf:09:66:85:64:43:1c:c6:be: d7:d2:9b:85:8b:8c:43:4b:5d:01:b0:26:c0:ff:92: 3b:b7:8c:0e:22:96:1b:30:17:44:63:47:af:c8:b0: 3e:89:e5:ad:f3:bc:b3:dc:19:54:9f:f3:37:de:91: 8b:52:89:97:3e:d9:a1:ef:6e:7a:4f:ba:69:43:87: 23:33:ad:d9:b0:49:e3:44:38:58:b0:5f:aa:b1:30: 03:59:26:af:c9:07:0f:15:bf:72:2c:22:05:df:2c: 21:0c:92:37:4b:0d:b8:cd:99:1a:b3:bd:6e:fd:d2: 66:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:CB:A4:5D:20:DD:FA:21:14:6F:A0:CF:ED:CF:25:50:3A:74:5C:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d2d2fdf-d19c-3fb7-b50f-a36179645077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 65.196.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:fb:09:21:56:e7:4f:14:f6:92:4f:47:d8:32:90:37:55:30: 81:64:ad:77:0c:10:59:d7:aa:da:44:66:72:1e:27:d5:89:90: 3f:d3:91:e2:d3:8f:9f:45:37:bd:38:a6:db:f8:17:81:37:d9: 5f:9c:fd:e8:99:29:b9:24:4d:8b:5e:8f:ed:ad:6c:37:12:5e: 54:f1:2c:2b:9d:c7:d9:90:c9:77:c2:8e:f2:56:34:b5:25:b5: d7:6b:57:78:29:c7:4f:d9:fe:b3:93:b5:62:e0:f3:25:88:7c: b7:40:58:23:6c:1c:0a:b2:4e:85:be:83:b7:40:c5:50:bf:dd: 46:c4:20:6e:c5:f0:07:4f:35:e4:05:6b:48:01:4e:36:76:7d: 6c:0a:57:a2:3a:af:26:01:a2:c5:d4:8d:8c:47:5e:35:78:e7: 6d:13:fd:ea:39:56:93:65:2f:56:97:7a:5e:76:b9:1a:9b:d4: d9:bb:03:09:ce:65:d9:ae:7e:eb:ce:1d:94:f3:27:0e:22:25: 03:e8:e1:3a:03:d3:02:13:cb:07:35:8d:e4:2e:56:cf:85:5f: 69:8c:39:83:35:9d:7a:bf:05:27:ce:af:f3:c9:a9:f1:78:a8: 12:d1:e4:57:1c:ab:d6:b6:c3:74:77:a1:40:7b:45:92:c9:95: 18:0e:8d:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy988umIeIbaCMA0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ZmRlY2EwZmYtYzY3Zi00YzY1LTlmN2ItY2U3NDQxNjhmNzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupP3PCfn2ZEsNpJ2/vRtm13oDMgATuXb58qH Q62britm6XAqy2F/nvKhK8d0dyqj+vRKhF6UDhmzwetFS6BH8JIoi8UyWP/igTV2 ciMQVMz3tQy9f4tcGU5+rWXT/EnpbCo8x7Xr4WbzcE6Q2KZ2Ux0X82KQ7M/t5eA4 nMDhIyqrhyVePRW7jaly2X+/CWaFZEMcxr7X0puFi4xDS10BsCbA/5I7t4wOIpYb MBdEY0evyLA+ieWt87yz3BlUn/M33pGLUomXPtmh7256T7ppQ4cjM63ZsEnjRDhY sF+qsTADWSavyQcPFb9yLCIF3ywhDJI3Sw24zZkas71u/dJm8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzLpF0g3fohFG+gz+3PJVA6dFzkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGQyZDJmZGYtZDE5Yy0z ZmI3LWI1MGYtYTM2MTc5NjQ1MDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQcQHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADz7CSFW508U9pJPR9gykDdVMIFkrXcMEFnXqtpEZnIeJ9WJkD/TkeLT j59FN704ptv4F4E32V+c/eiZKbkkTYtej+2tbDcSXlTxLCudx9mQyXfCjvJWNLUl tddrV3gpx0/Z/rOTtWLg8yWIfLdAWCNsHAqyToW+g7dAxVC/3UbEIG7F8AdPNeQF a0gBTjZ2fWwKV6I6ryYBosXUjYxHXjV4520T/eo5VpNlL1aXel52uRqb1Nm7AwnO ZdmufuvOHZTzJw4iJQPo4ToD0wITywc1jeQuVs+FX2mMOYM1nXq/BSfOr/PJqfF4 qBLR5Fccq9a2w3R3oUB7RZLJlRgOjfc= -----END CERTIFICATE-----Generated at Wed Nov 5 15:14:31 2025 by rpki-client