$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70db925b-72c6-31de-bede-8dfe1846dad0.roa File: 70db925b-72c6-31de-bede-8dfe1846dad0.roa (raw, json) Hash identifier: 94kimM7FMXG6v6CezWRQ3nyn7SFG3DGc+NmS6vaWHxg= Subject key identifier: 45:83:AE:89:16:A4:ED:8A:A0:7A:27:46:93:9A:A5:2D:8B:5A:96:A7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F80A341253FC8D6D3F6780 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70db925b-72c6-31de-bede-8dfe1846dad0.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 100.4.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:0a:34:12:53:fc:8d:6d:3f:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=9fc56053-ce62-499e-bafb-38d61139c180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d1:f0:ee:42:0f:4c:ce:9f:42:87:55:66:4e: fc:58:e9:46:b9:2d:7b:8a:87:d5:ad:65:99:8e:b2: cc:d1:59:1f:2b:db:b6:c5:60:7c:af:55:47:cb:11: 9f:ea:98:a1:e6:1c:85:7b:04:f4:5d:ca:05:36:c1: 35:6f:1d:f5:50:5b:a8:6f:12:54:4b:1f:04:11:30: 08:d6:f3:32:77:7a:cc:a5:41:7a:19:cd:9c:61:8e: 48:e9:01:77:86:80:bb:26:ad:64:e5:37:0f:e1:7f: 50:e4:a0:22:dc:b3:36:7d:be:47:e8:48:a1:54:97: d3:cd:92:a7:e1:d7:cf:ce:a5:29:62:b1:83:8a:20: 57:0e:b7:f8:4c:d6:4e:3b:b8:66:98:08:a0:91:eb: f9:dd:ce:e1:4b:94:d6:bd:28:3d:4b:1d:66:3a:a6: a2:83:0e:72:42:e2:af:64:02:16:b3:ba:ec:bf:05: b7:d9:b4:21:a9:b1:94:e7:18:64:35:42:f8:9f:79: ef:cb:7c:e3:e5:50:9b:33:66:fb:ff:27:ad:4a:f8: 3c:d7:09:af:cf:c4:09:b5:52:1a:46:2b:7d:4f:3c: ee:bd:ca:f8:92:22:b3:fb:0f:bb:2c:c3:37:6e:8c: 52:f6:5b:c6:a5:4c:98:ce:41:67:4b:f8:cb:b1:cb: d8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:83:AE:89:16:A4:ED:8A:A0:7A:27:46:93:9A:A5:2D:8B:5A:96:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70db925b-72c6-31de-bede-8dfe1846dad0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 100.4.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:b4:f8:69:46:65:2d:e5:bb:c9:e4:b9:05:b1:78:0e:06:99: 8e:0a:9b:84:67:08:03:f2:95:a5:27:80:1f:54:df:fa:83:07: c3:d2:fb:28:9e:51:f1:e6:0f:72:3e:12:b1:0d:28:f7:10:69: 07:78:d5:21:50:2a:36:c9:e7:ee:f5:07:aa:cf:8e:44:3e:d6: 07:97:d4:94:d2:fa:fb:a7:3e:fd:54:cf:25:f0:16:5d:dc:2b: 63:a4:37:6b:33:98:8d:63:62:d8:d1:f2:92:c6:81:26:b0:c3: eb:ea:f2:8c:48:42:cf:1c:10:98:cd:6d:68:36:a4:12:99:17: 9a:5c:1c:d6:ef:72:ba:94:67:db:cd:74:e0:2c:8d:12:41:b8: 04:04:79:58:5a:c6:b2:2f:ee:a5:0c:f6:90:2c:cd:1c:36:f0: 8e:08:6d:4a:88:05:3a:78:57:29:c3:27:51:ae:dd:63:b3:57: a2:2a:6f:8a:33:ce:1e:14:ce:5d:ef:43:be:9c:f3:c3:b2:b6: a2:9f:3e:18:53:e4:45:05:9d:48:1c:a8:13:a0:1b:1c:41:4d: e2:27:43:06:2b:9c:a6:11:2e:70:2b:8d:6b:fb:47:6e:72:70: 11:3f:36:95:d3:78:f4:97:58:e2:22:e5:8a:87:e5:df:a5:53: 88:7e:73:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy+Ao0ElP8jW0/Z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk OWZjNTYwNTMtY2U2Mi00OTllLWJhZmItMzhkNjExMzljMTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNHw7kIPTM6fQodVZk78WOlGuS17iofVrWWZ jrLM0VkfK9u2xWB8r1VHyxGf6pih5hyFewT0XcoFNsE1bx31UFuobxJUSx8EETAI 1vMyd3rMpUF6Gc2cYY5I6QF3hoC7Jq1k5TcP4X9Q5KAi3LM2fb5H6EihVJfTzZKn 4dfPzqUpYrGDiiBXDrf4TNZOO7hmmAigkev53c7hS5TWvSg9Sx1mOqaigw5yQuKv ZAIWs7rsvwW32bQhqbGU5xhkNUL4n3nvy3zj5VCbM2b7/yetSvg81wmvz8QJtVIa Rit9Tzzuvcr4kiKz+w+7LMM3boxS9lvGpUyYzkFnS/jLscvYVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWDrokWpO2KoHonRpOapS2LWpanMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzBkYjkyNWItNzJjNi0z MWRlLWJlZGUtOGRmZTE4NDZkYWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHZASAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIy0+GlGZS3lu8nkuQWxeA4GmY4Km4RnCAPylaUngB9U3/qDB8PS+yie UfHmD3I+ErENKPcQaQd41SFQKjbJ5+71B6rPjkQ+1geX1JTS+vunPv1UzyXwFl3c K2OkN2szmI1jYtjR8pLGgSaww+vq8oxIQs8cEJjNbWg2pBKZF5pcHNbvcrqUZ9vN dOAsjRJBuAQEeVhaxrIv7qUM9pAszRw28I4IbUqIBTp4VynDJ1Gu3WOzV6Iqb4oz zh4Uzl3vQ76c88OytqKfPhhT5EUFnUgcqBOgGxxBTeInQwYrnKYRLnArjWv7R25y cBE/NpXTePSXWOIi5YqH5d+lU4h+c70= -----END CERTIFICATE-----Generated at Wed Nov 5 10:59:50 2025 by rpki-client