$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/925c2239-6cc5-3995-ae48-316caf8ec98c.roa File: 925c2239-6cc5-3995-ae48-316caf8ec98c.roa (raw, json) Hash identifier: YoVQLQjIIFFoyeO8/hLey4D/qw8R9fzL9Dz6Q5IZNYw= Subject key identifier: 95:C6:34:8F:97:14:35:5A:E8:D5:C1:00:88:A2:86:5A:05:FC:76:BE Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F80B31C524773D5D102B80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/925c2239-6cc5-3995-ae48-316caf8ec98c.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 108.22.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:0b:31:c5:24:77:3d:5d:10:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=b23b61d7-b5df-4aa2-be7f-7e3eebf94244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:34:5e:fe:bd:d1:9f:97:1a:e9:a9:d2:5a:1d: 9d:c3:5e:d8:29:3e:a7:34:79:36:ac:d1:5d:16:5d: 2b:55:67:52:18:62:31:4a:2d:8b:9f:49:9b:e1:2c: 3c:0f:6c:e5:90:76:ce:35:7d:ab:46:0f:d3:59:cc: 76:e4:15:e9:3c:15:c4:c8:ef:37:62:f6:8b:8a:2e: 4c:1b:c5:08:86:1e:12:0d:b4:b8:d8:3f:1a:3c:fa: 1f:ea:f2:b3:82:a7:3a:d6:ba:e3:f3:ee:00:79:3f: 16:d7:0e:2b:99:66:67:a2:8e:2d:ae:dd:da:ee:81: 35:0e:15:2d:1c:e1:10:28:28:7b:e8:71:9f:4a:26: a7:d4:50:e1:63:9e:55:c3:cc:c5:b4:78:35:27:80: 52:c3:6a:4a:13:73:54:f7:06:ec:38:ca:f6:bc:ef: cf:52:85:77:86:25:de:66:b5:ff:f2:db:df:75:57: 32:3f:2f:04:5d:a0:16:63:5c:90:e2:f4:24:a6:84: b8:83:b4:32:b2:5f:a8:f1:b8:c2:0f:59:2a:60:e3: 5c:23:2c:44:7a:1a:7e:1a:fb:7b:38:61:fd:2b:84: b2:40:d5:fb:46:27:f7:4f:eb:95:bb:26:fd:7b:a6: c9:75:51:8a:39:c0:3b:33:3d:29:6f:66:61:c4:3a: e9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C6:34:8F:97:14:35:5A:E8:D5:C1:00:88:A2:86:5A:05:FC:76:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/925c2239-6cc5-3995-ae48-316caf8ec98c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.22.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:de:dc:71:f7:76:91:b4:c5:31:d6:15:4f:f1:8d:d8:77:2c: 1d:2d:72:b3:4f:65:bd:28:a8:e6:29:0a:62:18:d7:d9:e1:48: 44:19:17:6c:05:7c:39:e7:85:4f:06:51:9b:67:5c:b1:3d:f4: f5:26:30:a4:c0:28:69:b6:f7:28:19:da:81:00:ab:d6:01:19: d2:f8:37:62:87:01:c7:14:59:a2:7d:ef:e5:2e:dc:8d:bf:e8: 66:ba:0f:52:5d:1f:46:b5:39:d4:cd:43:ba:dd:50:f8:58:12: 0e:2b:4b:1b:ec:cf:ab:cd:d6:5c:88:30:28:d7:08:e1:de:e1: cd:82:76:36:9e:35:58:5b:ea:b1:a3:10:f1:96:f7:67:fc:d6: 46:ac:99:8a:af:a1:c9:bf:12:77:3b:24:bd:4a:4f:a9:78:2a: 25:5b:f3:20:b1:fc:d8:84:d6:79:d1:4d:39:ce:87:14:6b:23: c5:00:f7:35:df:8d:69:f1:33:57:58:87:d0:15:0b:6b:7e:15: 0b:64:eb:8f:f2:eb:ae:01:ea:20:35:be:88:95:97:12:b8:0d: 59:d6:e6:db:06:d8:11:3d:a2:a6:72:fd:80:90:00:c5:48:b8: ba:ba:0b:a2:4d:f1:0e:4d:1a:ea:e0:51:57:58:92:dc:13:32: 0a:d2:c5:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy+AsxxSR3PV0QK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk YjIzYjYxZDctYjVkZi00YWEyLWJlN2YtN2UzZWViZjk0MjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTRe/r3Rn5ca6anSWh2dw17YKT6nNHk2rNFd Fl0rVWdSGGIxSi2Ln0mb4Sw8D2zlkHbONX2rRg/TWcx25BXpPBXEyO83YvaLii5M G8UIhh4SDbS42D8aPPof6vKzgqc61rrj8+4AeT8W1w4rmWZnoo4trt3a7oE1DhUt HOEQKCh76HGfSian1FDhY55Vw8zFtHg1J4BSw2pKE3NU9wbsOMr2vO/PUoV3hiXe ZrX/8tvfdVcyPy8EXaAWY1yQ4vQkpoS4g7Qysl+o8bjCD1kqYONcIyxEehp+Gvt7 OGH9K4SyQNX7Rif3T+uVuyb9e6bJdVGKOcA7Mz0pb2ZhxDrpawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXGNI+XFDVa6NXBAIiihloF/Ha+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTI1YzIyMzktNmNjNS0z OTk1LWFlNDgtMzE2Y2FmOGVjOThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFbBZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADne3HH3dpG0xTHWFU/xjdh3LB0tcrNPZb0oqOYpCmIY19nhSEQZF2wF fDnnhU8GUZtnXLE99PUmMKTAKGm29ygZ2oEAq9YBGdL4N2KHAccUWaJ97+Uu3I2/ 6Ga6D1JdH0a1OdTNQ7rdUPhYEg4rSxvsz6vN1lyIMCjXCOHe4c2CdjaeNVhb6rGj EPGW92f81kasmYqvocm/Enc7JL1KT6l4KiVb8yCx/NiE1nnRTTnOhxRrI8UA9zXf jWnxM1dYh9AVC2t+FQtk64/y664B6iA1voiVlxK4DVnW5tsG2BE9oqZy/YCQAMVI uLq6C6JN8Q5NGurgUVdYktwTMgrSxTE= -----END CERTIFICATE-----Generated at Wed Nov 5 13:02:12 2025 by rpki-client