$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/520a5da7-9a52-311a-8d13-6af33c211a8a.roa File: 520a5da7-9a52-311a-8d13-6af33c211a8a.roa (raw, json) Hash identifier: cBh3CBUYdjUMGxxWrY7dZyMXuP/rUmb7hyhcZWz6rhM= Subject key identifier: 7A:27:29:47:7F:AE:55:B9:71:DE:1C:24:2F:3D:7F:2A:2C:54:B2:15 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F807B3D0142111EA9A70E0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/520a5da7-9a52-311a-8d13-6af33c211a8a.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 71.176.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:07:b3:d0:14:21:11:ea:9a:70:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=db08cdde-59be-4d09-ae81-967c76eeb8cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:06:b6:d4:9b:e6:d3:4f:bb:c8:1e:4a:e8:54: 04:14:78:e6:aa:b1:a9:db:62:38:e6:87:9e:b3:77: b0:12:16:89:c3:d9:03:92:2d:5d:7b:33:9f:51:9f: 75:18:40:bc:97:21:2a:27:55:c2:78:26:5d:a8:86: aa:26:93:ca:08:69:67:f8:17:77:33:81:a8:c6:98: e3:9f:ae:45:e0:51:48:1f:03:9f:f1:63:34:31:43: 78:91:e5:45:65:99:51:5b:c0:00:92:a3:cf:ea:c7: 8b:14:c7:4b:4d:12:5a:09:b6:b6:a9:0c:1a:a5:1d: 69:2c:77:6a:4c:ec:9b:8b:d0:7c:e7:6e:2a:81:80: 26:73:70:d6:f9:75:ea:46:4b:b4:f0:7a:05:18:f4: ac:b8:57:a1:69:c4:f7:5f:1d:d5:81:a1:35:f2:b9: 0c:87:44:58:09:ae:41:9b:84:70:e2:c0:5c:2b:3b: 38:73:0c:a7:a4:40:1c:de:63:ce:cb:84:38:6c:b0: 61:11:87:c4:02:ab:6e:c1:2f:7c:1f:1d:f5:93:56: 29:51:86:ae:a1:56:2e:90:24:ae:e0:f4:4e:e8:f3: 77:51:0f:eb:77:52:ec:20:c0:1e:87:66:53:a8:73: eb:ce:34:c6:12:42:9c:0a:de:9f:a4:bc:f6:0b:c8: bd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:27:29:47:7F:AE:55:B9:71:DE:1C:24:2F:3D:7F:2A:2C:54:B2:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/520a5da7-9a52-311a-8d13-6af33c211a8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.176.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:b4:89:00:84:2d:44:a4:29:8a:92:4c:4d:6f:c5:c4:16:34: d6:fc:3a:4c:f1:04:21:16:db:33:a4:65:5c:99:24:fe:e1:a3: 8e:86:73:a9:93:01:02:ee:2a:b3:c8:03:1e:b1:95:b3:13:ae: cc:fc:f8:68:ce:ab:d3:a2:64:17:e2:44:5c:11:a6:83:78:c9: a7:22:44:c9:cb:1c:5b:90:3b:63:56:cb:8f:ab:31:34:66:25: d3:c6:a9:8e:1e:66:64:fd:9d:88:4b:20:d8:7e:7f:74:4d:b3: 46:2c:cb:7e:c9:4b:6f:ff:f9:f4:88:04:78:7d:7c:18:45:11: 26:30:d6:d2:45:00:d6:ae:65:14:8e:d7:09:02:88:7e:8f:8c: 63:c3:c6:9d:b7:e4:38:5b:79:d5:7f:78:f0:00:e1:89:56:0b: d2:58:a9:b6:58:18:4d:ee:35:8c:d3:b5:4a:36:d0:bf:99:6d: 57:30:0c:e5:39:0b:71:a7:7a:3c:a5:a9:c4:1b:ce:a7:b2:84: 1f:09:5e:93:de:c7:4a:e2:40:ed:3f:0d:c3:92:aa:89:39:30: f1:eb:21:85:8b:ca:af:ed:15:96:90:28:86:a7:87:92:c3:f2: 35:65:72:b1:8c:9b:e1:32:7f:aa:cb:c0:a7:78:33:6f:f5:87: 47:ec:e5:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy+Aez0BQhEeqacOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ZGIwOGNkZGUtNTliZS00ZDA5LWFlODEtOTY3Yzc2ZWViOGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwa21Jvm00+7yB5K6FQEFHjmqrGp22I45oee s3ewEhaJw9kDki1dezOfUZ91GEC8lyEqJ1XCeCZdqIaqJpPKCGln+Bd3M4Goxpjj n65F4FFIHwOf8WM0MUN4keVFZZlRW8AAkqPP6seLFMdLTRJaCba2qQwapR1pLHdq TOybi9B8524qgYAmc3DW+XXqRku08HoFGPSsuFehacT3Xx3VgaE18rkMh0RYCa5B m4Rw4sBcKzs4cwynpEAc3mPOy4Q4bLBhEYfEAqtuwS98Hx31k1YpUYauoVYukCSu 4PRO6PN3UQ/rd1LsIMAeh2ZTqHPrzjTGEkKcCt6fpLz2C8i9DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHonKUd/rlW5cd4cJC89fyosVLIVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTIwYTVkYTctOWE1Mi0z MTFhLThkMTMtNmFmMzNjMjExYThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGR7BAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHC0iQCELUSkKYqSTE1vxcQWNNb8OkzxBCEW2zOkZVyZJP7ho46Gc6mT AQLuKrPIAx6xlbMTrsz8+GjOq9OiZBfiRFwRpoN4yaciRMnLHFuQO2NWy4+rMTRm JdPGqY4eZmT9nYhLINh+f3RNs0Ysy37JS2//+fSIBHh9fBhFESYw1tJFANauZRSO 1wkCiH6PjGPDxp235DhbedV/ePAA4YlWC9JYqbZYGE3uNYzTtUo20L+ZbVcwDOU5 C3GnejylqcQbzqeyhB8JXpPex0riQO0/DcOSqok5MPHrIYWLyq/tFZaQKIanh5LD 8jVlcrGMm+Eyf6rLwKd4M2/1h0fs5bg= -----END CERTIFICATE-----Generated at Wed Nov 5 11:12:55 2025 by rpki-client