$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d71cbad-4a85-34f1-9836-1bcdb60d81d2.roa File: 8d71cbad-4a85-34f1-9836-1bcdb60d81d2.roa (raw, json) Hash identifier: +zLNhnSQ0WkXcf7XuGtCjxY905ccUEzF+GPoJPGUAug= Subject key identifier: 28:1C:45:F0:9D:52:39:A8:D6:3C:C3:DE:7D:35:0F:8C:52:DC:4C:96 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B891780B0DCE5706ADC169F80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d71cbad-4a85-34f1-9836-1bcdb60d81d2.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 0 IP address blocks: 63.69.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:80:b0:dc:e5:70:6a:dc:16:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=cb0d91dd-421f-41dc-ac0a-082c2ba2524e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cf:9f:f2:19:e4:75:63:35:c2:0d:c2:58:b0: 3f:cb:99:c9:da:97:f0:c0:85:86:54:b7:db:04:cc: b2:e9:9a:cc:3d:34:74:bf:7f:a2:63:6d:15:08:1e: 2e:6a:fc:69:13:20:4d:5f:48:66:6d:2b:55:72:4c: f8:a0:88:2d:d4:ad:cf:01:84:b2:f2:76:1a:ed:4b: b2:c5:74:c7:ce:80:23:d0:f0:7d:5b:b8:09:06:fa: de:fe:00:dd:2b:cb:5d:35:41:e1:dd:cd:c4:87:1c: 10:73:bc:ea:95:19:26:b7:5f:83:77:16:b3:ad:4a: 44:e8:45:c5:ef:13:cd:dc:f0:a6:54:4c:cf:7d:0c: 75:e4:37:52:dd:ac:36:86:61:09:60:3d:b6:4e:35: 0a:73:dc:45:bc:1e:2f:eb:c6:18:6c:ec:8e:b0:e0: 85:b2:0d:3b:dc:90:3a:f5:4c:57:74:9c:56:8e:02: a6:29:ae:d6:c2:3b:65:8d:2c:b1:9b:67:c1:27:c4: 48:ca:44:25:64:7a:29:1c:d8:d6:5a:a2:b4:49:62: 72:b1:15:e5:6f:d3:97:c2:ad:1c:2f:79:40:33:dc: 54:4e:3a:68:a0:6b:02:78:a8:5b:0b:6f:a9:e4:8e: c1:21:d4:fe:5d:ef:86:e8:dc:d1:a3:73:bf:bc:3c: 6f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:1C:45:F0:9D:52:39:A8:D6:3C:C3:DE:7D:35:0F:8C:52:DC:4C:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d71cbad-4a85-34f1-9836-1bcdb60d81d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 63.69.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:55:96:8e:96:f5:61:4e:35:1b:da:da:e4:e2:b3:46:ab:11: 57:cb:22:94:60:8c:f7:3c:6a:f4:1c:88:8b:5d:ff:02:94:b6: a1:25:19:c2:65:93:c0:2c:11:ac:08:e4:38:fb:1d:7a:5e:17: 3b:ea:96:1d:7e:c5:6d:2d:7a:45:a2:ac:27:90:36:59:5e:7a: f4:27:d7:84:0e:f6:76:21:e4:bc:6f:05:52:ff:0b:51:e4:16: 83:57:14:40:fa:02:18:4f:02:09:aa:27:43:e1:6b:73:a6:2b: d1:bd:3c:af:15:4a:b6:d7:6d:d6:62:73:f4:ea:32:27:84:1f: c1:90:e5:65:bc:50:ed:7d:14:a4:41:24:f5:7b:de:95:ce:a2: 31:9d:59:4f:b3:14:49:da:13:22:42:e1:18:cb:f2:05:0b:6e: 89:35:57:45:06:98:3c:3a:2b:5c:c4:1f:ec:3c:b8:d3:b6:f8: 3c:0f:f8:82:28:a1:ca:71:5e:83:28:0d:45:0a:3a:9d:a5:e2: 20:1c:1e:4d:a5:d1:33:a8:65:6f:f0:f3:e1:b4:0e:36:7b:90: 90:a7:77:94:e4:36:58:4c:9b:f9:b4:8b:6d:9b:c2:47:33:b4: bf:19:69:4b:78:84:49:9b:06:5a:e6:b6:a2:f4:ff:cd:64:24: fb:ce:35:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF4Cw3OVwatwWn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk Y2IwZDkxZGQtNDIxZi00MWRjLWFjMGEtMDgyYzJiYTI1MjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc+f8hnkdWM1wg3CWLA/y5nJ2pfwwIWGVLfb BMyy6ZrMPTR0v3+iY20VCB4uavxpEyBNX0hmbStVckz4oIgt1K3PAYSy8nYa7Uuy xXTHzoAj0PB9W7gJBvre/gDdK8tdNUHh3c3EhxwQc7zqlRkmt1+DdxazrUpE6EXF 7xPN3PCmVEzPfQx15DdS3aw2hmEJYD22TjUKc9xFvB4v68YYbOyOsOCFsg073JA6 9UxXdJxWjgKmKa7WwjtljSyxm2fBJ8RIykQlZHopHNjWWqK0SWJysRXlb9OXwq0c L3lAM9xUTjpooGsCeKhbC2+p5I7BIdT+Xe+G6NzRo3O/vDxvMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgcRfCdUjmo1jzD3n01D4xS3EyWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGQ3MWNiYWQtNGE4NS0z NGYxLTk4MzYtMWJjZGI2MGQ4MWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDP0UoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRVlo6W9WFONRva2uTis0arEVfLIpRgjPc8avQciItd/wKUtqElGcJl k8AsEawI5Dj7HXpeFzvqlh1+xW0tekWirCeQNlleevQn14QO9nYh5LxvBVL/C1Hk FoNXFED6AhhPAgmqJ0Pha3OmK9G9PK8VSrbXbdZic/TqMieEH8GQ5WW8UO19FKRB JPV73pXOojGdWU+zFEnaEyJC4RjL8gULbok1V0UGmDw6K1zEH+w8uNO2+DwP+IIo ocpxXoMoDUUKOp2l4iAcHk2l0TOoZW/w8+G0DjZ7kJCnd5TkNlhMm/m0i22bwkcz tL8ZaUt4hEmbBlrmtqL0/81kJPvONS8= -----END CERTIFICATE-----Generated at Wed Nov 5 00:06:53 2025 by rpki-client