$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/768b4f71-60ba-3bde-a104-888414103d2f.roa File: 768b4f71-60ba-3bde-a104-888414103d2f.roa (raw, json) Hash identifier: NgKf31DanzjoNpUGOcoN0uIvx1HxGl4Z6YgyXQp29D0= Subject key identifier: AC:3C:16:CD:0F:6D:68:D8:EF:B1:24:43:0A:EC:84:51:F7:95:03:B5 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B84E7669768EE1A8AA6138D40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/768b4f71-60ba-3bde-a104-888414103d2f.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 0 IP address blocks: 63.125.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:66:97:68:ee:1a:8a:a6:13:8d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=96bbc38d-3a9c-4c5e-97f9-6111debe5e7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c7:cf:71:42:4d:bc:7c:92:23:18:0b:87:f6: b4:83:84:21:9b:dd:33:61:a2:c1:9f:11:86:5f:32: 2e:6f:af:54:b4:07:f2:29:23:9c:2b:63:e6:4b:07: 74:53:19:80:a6:a5:0d:64:0c:1c:d1:b3:48:a2:41: a2:b9:c4:da:4f:93:71:70:4e:16:90:4e:c4:45:15: 26:9b:4a:2b:4e:56:d6:3c:ba:74:f1:69:86:10:b8: 18:27:f2:a0:c8:2c:f8:df:87:49:2d:ef:e5:1b:cd: c7:61:e8:b9:6f:c8:b1:41:46:ac:ad:6c:54:98:60: 2b:9e:72:1e:d1:2d:67:da:ff:84:80:49:9d:a8:15: ff:60:04:90:85:13:46:49:bb:44:10:19:e1:6f:ae: 7c:4d:eb:4d:50:7f:81:30:49:9c:6a:7d:b7:7c:83: 9a:85:09:3b:4d:41:6f:a0:fa:2e:bb:8b:ef:3b:a3: d3:cf:1e:4a:d3:ec:92:53:88:65:31:e6:d0:4b:98: 69:77:ff:40:c7:4c:e7:b4:b5:81:c9:dc:bc:73:b8: 99:75:5d:ff:68:79:00:cc:92:b1:4c:10:be:a3:a9: f8:46:d6:7b:85:d2:bd:fd:4c:be:27:4d:9e:30:bb: f3:ad:c7:e8:58:51:8b:e9:5b:19:d8:ed:02:7e:ed: 01:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:3C:16:CD:0F:6D:68:D8:EF:B1:24:43:0A:EC:84:51:F7:95:03:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/768b4f71-60ba-3bde-a104-888414103d2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 63.125.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:12:f6:09:1e:82:85:39:61:0e:6b:79:62:a5:44:8a:e0:fa: 6f:8c:ad:d6:4d:5a:31:14:3d:00:64:5f:27:27:6a:53:1e:c3: 39:c8:04:2e:3b:45:d3:cc:90:aa:ae:9d:d2:33:2f:8f:54:54: 08:af:eb:6c:e1:69:cb:b2:60:30:61:2f:48:29:8c:07:d6:35: 1f:3e:8f:92:cd:c0:c7:0d:2c:7c:ff:58:42:bb:7e:90:da:fa: 11:d5:fc:d3:52:20:8d:e6:1d:ae:27:c4:ac:8f:fa:69:93:5a: 3c:f1:99:55:e3:1d:3d:7f:9e:da:94:0b:48:f5:15:6a:d6:4d: 4a:9b:bf:97:5c:a5:3d:32:f5:8a:7f:82:e0:52:f0:4d:4e:2a: 08:dd:f0:7f:44:44:65:69:0e:fa:ec:86:01:ce:f7:30:71:47: 9a:49:41:fa:26:bc:9c:56:70:46:5a:27:f8:ea:42:25:62:c6: a4:63:61:7e:1e:83:b3:57:ac:26:92:ee:20:05:20:92:5e:a4: 01:00:51:bf:e3:cf:53:f8:aa:47:af:9e:26:85:ca:19:4e:f0: c3:d3:07:ef:22:6f:71:11:43:2a:bb:67:c4:c7:8a:bd:5d:49: e5:18:78:e0:18:53:07:04:01:06:ae:30:5e:e2:0b:8d:0c:1f: 7c:1e:e9:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE52aXaO4aiqYTjUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk OTZiYmMzOGQtM2E5Yy00YzVlLTk3ZjktNjExMWRlYmU1ZTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcfPcUJNvHySIxgLh/a0g4Qhm90zYaLBnxGG XzIub69UtAfyKSOcK2PmSwd0UxmApqUNZAwc0bNIokGiucTaT5NxcE4WkE7ERRUm m0orTlbWPLp08WmGELgYJ/KgyCz434dJLe/lG83HYei5b8ixQUasrWxUmGArnnIe 0S1n2v+EgEmdqBX/YASQhRNGSbtEEBnhb658TetNUH+BMEmcan23fIOahQk7TUFv oPouu4vvO6PTzx5K0+ySU4hlMebQS5hpd/9Ax0zntLWBydy8c7iZdV3/aHkAzJKx TBC+o6n4RtZ7hdK9/Uy+J02eMLvzrcfoWFGL6VsZ2O0Cfu0BeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKw8Fs0PbWjY77EkQwrshFH3lQO1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzY4YjRmNzEtNjBiYS0z YmRlLWExMDQtODg4NDE0MTAzZDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDP31YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUS9gkegoU5YQ5reWKlRIrg+m+MrdZNWjEUPQBkXycnalMewznIBC47 RdPMkKqundIzL49UVAiv62zhacuyYDBhL0gpjAfWNR8+j5LNwMcNLHz/WEK7fpDa +hHV/NNSII3mHa4nxKyP+mmTWjzxmVXjHT1/ntqUC0j1FWrWTUqbv5dcpT0y9Yp/ guBS8E1OKgjd8H9ERGVpDvrshgHO9zBxR5pJQfomvJxWcEZaJ/jqQiVixqRjYX4e g7NXrCaS7iAFIJJepAEAUb/jz1P4qkevniaFyhlO8MPTB+8ib3ERQyq7Z8THir1d SeUYeOAYUwcEAQauMF7iC40MH3we6YM= -----END CERTIFICATE-----Generated at Wed Nov 5 00:14:17 2025 by rpki-client