$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8603f6cc-2f01-380f-b9a7-5e1bd4963b00.roa File: 8603f6cc-2f01-380f-b9a7-5e1bd4963b00.roa (raw, json) Hash identifier: 1Cz00aWDAUmQDh/OL+Ce/+vm3uaAqF5y3e+fRBPS2ds= Subject key identifier: 33:39:6B:71:7C:E4:5F:25:7A:A1:FF:18:C9:3D:11:F0:88:91:55:55 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BA39D310C342BC7CE0D1FC600 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8603f6cc-2f01-380f-b9a7-5e1bd4963b00.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 701 IP address blocks: 64.1.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:31:0c:34:2b:c7:ce:0d:1f:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=1c030031-25a9-43ba-a825-c65ba3b0bf31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:62:28:58:67:50:ba:9b:08:b2:af:a4:39:43: 2e:85:78:34:00:77:81:90:b0:e2:10:1e:03:68:7f: 72:d3:29:36:0f:2b:fa:21:e4:3b:ed:b1:4a:8c:02: 71:50:22:1e:8a:34:3a:12:0d:8e:d6:9c:f6:16:ca: fb:f0:62:91:be:06:49:0b:24:d1:df:e0:0c:45:61: 18:8e:50:c1:10:98:98:96:4f:5f:5a:82:16:a9:bc: 01:91:ff:e8:c3:99:60:69:f0:1b:3b:ee:74:b5:aa: 46:59:ca:de:8c:16:88:eb:23:10:1d:be:ab:cc:aa: c2:67:54:e5:f8:3e:9d:95:13:df:3f:fe:d6:8f:5f: 0f:c5:28:79:bb:a5:4d:de:e7:4b:f7:c2:32:5f:86: 00:ba:e6:ec:65:1b:63:96:1f:54:87:76:69:e9:23: 6d:dd:b3:0c:48:46:00:47:16:94:98:7b:a6:08:0a: 96:a2:e6:5c:61:25:ce:47:21:4f:a1:14:74:32:f4: 7d:52:39:fb:81:f8:a5:26:c4:1a:52:cb:fb:d4:ec: a8:a2:bc:7f:77:4e:6e:97:df:1c:d6:e7:2c:c8:ef: 4c:fb:ea:e4:c3:83:0b:25:4f:bd:8a:5f:9c:97:8d: 21:56:e3:09:fe:fc:86:9a:9f:24:b5:02:b3:d9:42: 2d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:39:6B:71:7C:E4:5F:25:7A:A1:FF:18:C9:3D:11:F0:88:91:55:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8603f6cc-2f01-380f-b9a7-5e1bd4963b00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 64.1.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:21:6f:92:07:1b:db:a9:b5:24:af:d1:db:98:a3:fd:c0:7f: d2:ad:06:54:90:28:36:bb:d9:9f:ac:15:85:c0:79:e5:aa:36: 5a:35:c2:d2:3a:11:d0:17:04:18:5a:0d:35:54:3b:64:b5:89: 45:9a:ca:b5:80:c7:ab:fc:f4:e3:79:da:57:62:76:80:ab:db: 40:95:69:62:1d:6e:82:8f:6c:7c:70:78:6b:35:79:3c:df:a7: 5e:6b:9b:63:a2:97:2b:a7:34:30:34:bd:76:dc:c9:25:3d:08: a2:bd:63:9e:93:50:86:a8:45:a7:c4:99:82:fb:3e:92:1f:9f: a6:70:61:3f:9d:49:82:24:88:65:a4:02:eb:c8:2b:75:39:a3: 1f:58:d2:ff:c5:7f:e4:14:bc:0d:43:10:ff:fa:10:42:1e:1e: e7:dd:68:bd:8f:8b:a6:9d:95:5b:c5:77:59:fc:dc:63:45:f1: ab:95:61:7f:7d:3f:5e:93:5f:c2:a4:53:d6:60:32:7a:5f:8f: 84:3b:a9:00:b4:bc:d7:a5:04:ed:17:c9:39:b3:dc:5e:e9:d1: c3:ad:a8:0e:8c:40:b3:16:59:15:28:ec:5b:8c:77:89:fe:30: 69:da:b7:62:17:39:3e:97:c6:cf:d2:6d:23:77:4f:52:98:c6: e7:9c:87:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTEMNCvHzg0fxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MWMwMzAwMzEtMjVhOS00M2JhLWE4MjUtYzY1YmEzYjBiZjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmIoWGdQupsIsq+kOUMuhXg0AHeBkLDiEB4D aH9y0yk2Dyv6IeQ77bFKjAJxUCIeijQ6Eg2O1pz2Fsr78GKRvgZJCyTR3+AMRWEY jlDBEJiYlk9fWoIWqbwBkf/ow5lgafAbO+50tapGWcrejBaI6yMQHb6rzKrCZ1Tl +D6dlRPfP/7Wj18PxSh5u6VN3udL98IyX4YAuubsZRtjlh9Uh3Zp6SNt3bMMSEYA RxaUmHumCAqWouZcYSXORyFPoRR0MvR9Ujn7gfilJsQaUsv71Oyoorx/d05ul98c 1ucsyO9M++rkw4MLJU+9il+cl40hVuMJ/vyGmp8ktQKz2UIt7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDM5a3F85F8leqH/GMk9EfCIkVVVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODYwM2Y2Y2MtMmYwMS0z ODBmLWI5YTctNWUxYmQ0OTYzYjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJshb5IHG9uptSSv0duYo/3Af9KtBlSQKDa72Z+sFYXAeeWqNlo1wtI6 EdAXBBhaDTVUO2S1iUWayrWAx6v89ON52ldidoCr20CVaWIdboKPbHxweGs1eTzf p15rm2OilyunNDA0vXbcySU9CKK9Y56TUIaoRafEmYL7PpIfn6ZwYT+dSYIkiGWk AuvIK3U5ox9Y0v/Ff+QUvA1DEP/6EEIeHufdaL2Pi6adlVvFd1n83GNF8auVYX99 P16TX8KkU9ZgMnpfj4Q7qQC0vNelBO0XyTmz3F7p0cOtqA6MQLMWWRUo7FuMd4n+ MGnat2IXOT6Xxs/SbSN3T1KYxuech7M= -----END CERTIFICATE-----Generated at Wed Nov 5 11:12:30 2025 by rpki-client