$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8c91d3a6-5e09-3f50-904d-8da2570c5d2c.roa File: 8c91d3a6-5e09-3f50-904d-8da2570c5d2c.roa (raw, json) Hash identifier: IzSPRlaKBkYllwTrPnCSFGbeJ3ooU/IaUaI3EQ3yF2w= Subject key identifier: 23:20:EE:2A:5C:74:00:22:D5:97:FF:0D:27:E6:17:C9:31:78:13:75 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BA2378BC02DF32F332EA51200 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8c91d3a6-5e09-3f50-904d-8da2570c5d2c.roa Signing time: Sat 25 Oct 2025 01:00:31 +0000 ROA not before: Sat 25 Oct 2025 01:00:31 +0000 ROA not after: Fri 23 Jan 2026 02:00:31 +0000 asID: 6167 IP address blocks: 97.224.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a2:37:8b:c0:2d:f3:2f:33:2e:a5:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 25 01:00:31 2025 GMT Not After : Jan 23 02:00:31 2026 GMT Subject: CN=892cce7f-c783-4388-b24a-4c79c2a65dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7f:c7:f0:40:87:0f:16:62:51:00:6a:c2:40: c0:d5:70:cc:ed:dd:9b:c1:9b:59:d7:66:92:0d:8a: 75:ac:23:7f:61:f3:dc:69:41:52:65:fd:e4:20:b3: 74:34:65:de:16:92:e6:2b:06:4c:47:2b:09:15:53: 6e:87:19:4b:4d:b7:b3:8e:4f:b7:bb:cc:e9:9e:a0: e4:3a:42:3c:6f:2f:93:ba:c8:d5:be:ce:14:fd:75: a0:00:86:60:83:9b:79:a5:dd:97:3b:b8:41:0a:a9: 54:60:3a:29:2d:2e:d7:8b:77:a9:d3:90:ee:ce:3d: 0a:30:08:06:00:ac:aa:01:ab:0a:ae:40:f0:49:e2: 5a:ae:3f:71:af:63:76:66:85:23:ac:49:92:4f:c6: bc:e7:f8:4b:b4:3e:49:00:54:fd:f5:7b:5b:aa:d4: 34:bb:c4:00:0a:96:65:5b:18:5b:b8:a9:07:00:1d: 3f:1b:f5:fb:8c:3c:00:45:a6:86:71:3a:ee:8b:7d: 11:62:91:86:0c:c6:d1:99:fc:b9:1f:cc:e3:9c:54: 23:c4:5f:3e:d5:0e:f5:9e:49:13:59:aa:83:7f:1c: d7:3f:34:46:51:5f:21:09:78:10:77:21:41:26:01: ed:74:3e:87:28:7a:78:74:53:28:06:7a:54:c6:73: 5b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:20:EE:2A:5C:74:00:22:D5:97:FF:0D:27:E6:17:C9:31:78:13:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8c91d3a6-5e09-3f50-904d-8da2570c5d2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 97.224.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:a3:82:51:a2:b6:96:7d:c0:cc:b4:66:7b:9e:7b:56:09:e9: 86:bc:48:12:4c:fd:09:b2:2d:be:02:ba:44:c3:4b:fa:7d:7d: 0a:11:1d:65:0d:f1:d1:fc:85:ea:c7:2f:0d:0a:e8:4a:a8:43: 9d:62:90:6a:09:f5:a5:53:78:3a:22:97:65:15:7f:4e:71:93: b5:3f:27:43:c2:32:77:4e:bb:7b:52:78:46:77:b4:01:27:43: 8e:a9:ae:2e:bd:06:fd:93:ca:32:df:93:5f:8e:98:f9:5a:b8: 27:fc:60:8f:b4:c2:53:e1:fa:1f:b0:c2:93:d5:46:43:c4:e4: cb:a8:f4:97:95:57:1f:e0:5b:bd:54:70:00:ab:c5:89:ba:2a: 3c:f8:ef:34:f0:36:1a:f9:17:cd:5f:40:78:5b:c9:ee:03:e3: 2f:f3:6d:e3:c7:5a:1b:34:4f:a2:e3:9c:7b:88:2f:9c:6b:8a: ac:ad:81:9f:3c:df:00:0b:84:e2:4e:a9:d1:b4:5c:0c:ac:a9: 70:43:67:0f:ae:c3:81:b6:6f:38:4a:9c:ec:a8:9f:95:62:9c: 65:47:62:2e:9c:5a:21:b5:67:53:88:b2:0b:40:a0:fa:b7:58: bc:cc:6a:2d:76:0b:0b:2e:57:30:3f:41:0c:59:d2:41:60:82: bc:16:dd:3c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuiN4vALfMvMy6lEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyNTAxMDAzMVoXDTI2MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk ODkyY2NlN2YtYzc4My00Mzg4LWIyNGEtNGM3OWMyYTY1ZGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX/H8ECHDxZiUQBqwkDA1XDM7d2bwZtZ12aS DYp1rCN/YfPcaUFSZf3kILN0NGXeFpLmKwZMRysJFVNuhxlLTbezjk+3u8zpnqDk OkI8by+TusjVvs4U/XWgAIZgg5t5pd2XO7hBCqlUYDopLS7Xi3ep05Duzj0KMAgG AKyqAasKrkDwSeJarj9xr2N2ZoUjrEmST8a85/hLtD5JAFT99XtbqtQ0u8QACpZl WxhbuKkHAB0/G/X7jDwARaaGcTrui30RYpGGDMbRmfy5H8zjnFQjxF8+1Q71nkkT WaqDfxzXPzRGUV8hCXgQdyFBJgHtdD6HKHp4dFMoBnpUxnNbmQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCMg7ipcdAAi1Zf/DSfmF8kxeBN1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGM5MWQzYTYtNWUwOS0z ZjUwLTkwNGQtOGRhMjU3MGM1ZDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYeAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAeaOCUaK2ln3AzLRme557VgnphrxIEkz9CbItvgK6RMNL+n19ChEdZQ3x 0fyF6scvDQroSqhDnWKQagn1pVN4OiKXZRV/TnGTtT8nQ8Iyd067e1J4Rne0ASdD jqmuLr0G/ZPKMt+TX46Y+Vq4J/xgj7TCU+H6H7DCk9VGQ8Tky6j0l5VXH+BbvVRw AKvFiboqPPjvNPA2GvkXzV9AeFvJ7gPjL/Nt48daGzRPouOce4gvnGuKrK2Bnzzf AAuE4k6p0bRcDKypcENnD67DgbZvOEqc7KiflWKcZUdiLpxaIbVnU4iyC0Cg+rdY vMxqLXYLCy5XMD9BDFnSQWCCvBbdPA== -----END CERTIFICATE-----Generated at Wed Nov 5 13:49:48 2025 by rpki-client