$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5faa5aec-f1b2-326f-98aa-22729eb5bc26.roa File: 5faa5aec-f1b2-326f-98aa-22729eb5bc26.roa (raw, json) Hash identifier: vBW7eh9zqny2SeWSvrFbPVDAE3T/a+7MZuHsWfCGTDA= Subject key identifier: AE:FC:27:2A:98:54:F6:9B:D1:26:56:97:14:4E:B6:55:07:58:85:73 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F80E2A4FE3D986DA781000 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5faa5aec-f1b2-326f-98aa-22729eb5bc26.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 100.40.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:0e:2a:4f:e3:d9:86:da:78:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=a07df78b-e606-4ee6-bb8d-b42043a9f8d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a1:d1:74:39:ce:50:86:83:42:14:74:b9:68: 25:e7:e3:43:55:65:32:b7:43:c2:07:6d:cd:be:b3: ae:0a:22:54:ea:d4:a6:71:39:14:b4:3a:70:aa:ab: 31:3b:66:81:9a:08:bf:99:14:79:2c:6d:92:d4:4a: e6:b8:89:e0:73:5b:a4:05:e8:c0:b8:df:4c:06:2d: 32:2f:a7:8a:d7:16:60:ab:fd:59:fb:ef:b3:2a:0b: 53:a9:6c:e8:49:5d:a9:05:61:e4:f3:f9:87:54:41: 8c:de:2f:18:dc:93:65:90:3c:47:22:dd:c8:59:1d: e0:36:cc:f7:bc:25:14:54:63:f2:f7:64:38:98:6c: 50:4e:c6:57:92:c1:34:ec:84:2f:01:d5:2a:1a:bd: fd:53:3f:85:24:27:90:21:97:79:d2:bd:b3:19:ca: f0:4c:33:cc:4f:b6:8b:b2:7c:64:c5:d6:65:ec:85: 13:19:19:75:4a:b6:a7:a9:d8:aa:75:db:ab:b9:60: 91:2e:73:f7:79:e5:04:ec:2a:14:dc:1e:e1:96:72: cf:df:1d:c7:6f:94:84:0a:f9:28:4e:52:71:45:f0: 3d:91:64:52:c4:de:75:0a:c2:fd:e6:6f:f5:10:e0: 2c:c9:f3:83:e9:70:05:5c:41:77:3c:c2:0f:f4:3b: 13:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:FC:27:2A:98:54:F6:9B:D1:26:56:97:14:4E:B6:55:07:58:85:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5faa5aec-f1b2-326f-98aa-22729eb5bc26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 100.40.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:2b:1a:09:5b:95:a3:1a:fd:ac:c1:c9:c1:76:d0:ad:bb:fe: d3:52:74:e5:3b:68:0b:d3:9e:8e:34:29:39:3c:8c:e4:c1:75: 60:0b:68:ab:2d:4f:2d:4b:c5:04:e2:e4:0d:0c:37:6a:dd:0c: ff:fd:8e:bc:44:a2:3f:03:77:31:1b:bc:55:b9:58:1f:8e:62: 3a:e2:45:09:bb:2a:92:60:49:02:6f:dd:e9:dc:93:e5:39:47: 75:5e:92:38:c7:f3:d1:c4:fe:37:3e:0d:7f:cf:df:15:08:e9: f9:a9:a2:e8:60:83:ca:13:67:df:e7:1b:2e:b7:c0:3a:f1:75: 8e:4d:4d:10:cb:89:90:73:9c:e0:32:09:67:8f:32:b6:76:60: 43:5d:3c:57:50:0e:cf:80:b5:f8:f2:67:26:0f:fd:0d:ea:3a: af:bd:29:7a:ec:9c:8b:09:c3:db:6c:87:03:29:c3:df:d1:14: 32:87:2d:84:67:e4:d7:90:40:c1:d1:22:9f:86:0d:c6:c9:57: e6:03:45:52:97:3a:97:ca:2b:61:4a:81:d2:8a:58:1e:ca:38: f7:06:94:f4:23:14:32:50:27:3b:5c:c5:21:1f:09:29:af:b9: 6f:fd:71:0e:46:60:98:33:37:f6:fa:99:64:17:33:11:bb:82: 7c:78:e2:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy+A4qT+PZhtp4EAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk YTA3ZGY3OGItZTYwNi00ZWU2LWJiOGQtYjQyMDQzYTlmOGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKHRdDnOUIaDQhR0uWgl5+NDVWUyt0PCB23N vrOuCiJU6tSmcTkUtDpwqqsxO2aBmgi/mRR5LG2S1ErmuIngc1ukBejAuN9MBi0y L6eK1xZgq/1Z+++zKgtTqWzoSV2pBWHk8/mHVEGM3i8Y3JNlkDxHIt3IWR3gNsz3 vCUUVGPy92Q4mGxQTsZXksE07IQvAdUqGr39Uz+FJCeQIZd50r2zGcrwTDPMT7aL snxkxdZl7IUTGRl1SranqdiqdduruWCRLnP3eeUE7CoU3B7hlnLP3x3Hb5SECvko TlJxRfA9kWRSxN51CsL95m/1EOAsyfOD6XAFXEF3PMIP9DsTeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK78JyqYVPab0SZWlxROtlUHWIVzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWZhYTVhZWMtZjFiMi0z MjZmLTk4YWEtMjI3MjllYjViYzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHZCgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHorGglblaMa/azBycF20K27/tNSdOU7aAvTno40KTk8jOTBdWALaKst Ty1LxQTi5A0MN2rdDP/9jrxEoj8DdzEbvFW5WB+OYjriRQm7KpJgSQJv3enck+U5 R3VekjjH89HE/jc+DX/P3xUI6fmpouhgg8oTZ9/nGy63wDrxdY5NTRDLiZBznOAy CWePMrZ2YENdPFdQDs+AtfjyZyYP/Q3qOq+9KXrsnIsJw9tshwMpw9/RFDKHLYRn 5NeQQMHRIp+GDcbJV+YDRVKXOpfKK2FKgdKKWB7KOPcGlPQjFDJQJztcxSEfCSmv uW/9cQ5GYJgzN/b6mWQXMxG7gnx44gg= -----END CERTIFICATE-----Generated at Wed Nov 5 13:03:13 2025 by rpki-client