$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/968b086e-6286-3da3-9160-aabed5113be2.roa File: 968b086e-6286-3da3-9160-aabed5113be2.roa (raw, json) Hash identifier: Ef9oT8VZNdIOfr1V+5BhZ5fIHB2vTg7027A5ySmGC6Q= Subject key identifier: 46:55:73:12:47:0E:8F:87:6A:5A:16:D4:C8:C5:7B:4D:34:EE:A5:AB Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F7DB212B258CC6FD3D7500 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/968b086e-6286-3da3-9160-aabed5113be2.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 71.179.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:db:21:2b:25:8c:c6:fd:3d:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=df61f4cd-368b-425c-a3ce-c0c823367ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0c:81:ad:00:ce:5a:8b:43:00:fa:f6:89:0c: 84:a6:03:72:df:01:9a:be:f1:09:5e:b9:51:a4:b1: ba:cd:89:c8:7a:bb:38:df:28:75:cf:a1:6e:63:13: 7a:69:e3:c0:5c:57:4c:10:e6:57:4e:6e:51:30:25: 3a:cf:e6:03:cb:6d:8b:59:59:6a:69:0a:32:0b:39: 09:cb:cf:84:87:32:8d:ca:d8:08:11:6e:a8:8c:88: 09:8b:c8:40:b4:0b:44:7d:99:bb:1a:b0:c4:96:3c: b6:bd:eb:56:22:42:0c:6f:ee:6d:47:8b:56:58:76: 90:2e:47:e1:a9:74:29:9c:74:37:f0:28:c5:89:49: dd:a6:5d:d9:46:9c:af:61:f0:fe:69:bb:9f:99:ec: 9a:f6:53:2c:47:e5:7d:b8:71:89:31:ab:21:eb:f1: c1:b9:76:b1:78:da:cd:58:56:69:09:e7:a9:83:34: 10:0f:c0:a0:65:f4:89:b7:d7:9f:04:21:8a:6d:d2: 15:df:03:5d:22:00:5e:58:39:c1:0f:83:b5:24:a8: 5a:c3:b4:46:5f:e0:27:c1:d6:4b:46:0c:ac:b1:89: b2:ca:ea:e5:91:51:17:b3:4a:14:30:67:a8:91:29: 32:79:d8:6a:65:50:51:0e:90:f5:94:0b:72:c3:6b: 69:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:55:73:12:47:0E:8F:87:6A:5A:16:D4:C8:C5:7B:4D:34:EE:A5:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/968b086e-6286-3da3-9160-aabed5113be2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.179.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:31:bf:87:59:a1:52:4a:e0:16:14:a2:2e:d4:fa:07:89:c7: fc:b7:e9:96:d0:7e:3d:cb:6a:12:00:68:cb:2b:77:37:01:48: 80:d2:b9:78:22:d6:46:c4:2f:ec:d5:1c:ca:95:1e:45:13:25: d0:29:84:53:04:42:68:07:0e:54:4e:c6:7b:d8:ed:e1:fe:8e: 68:60:fb:3a:e7:63:f4:40:35:34:ef:00:de:08:3c:ff:54:b2: 75:6d:3e:b8:97:b2:1d:73:f6:80:a5:f5:70:44:92:40:90:bc: 7d:c1:8f:1f:5a:9d:b6:e2:bb:04:43:a5:e7:b2:9f:21:91:9b: c9:09:bb:f7:b8:f2:f2:66:cb:92:d9:05:3c:89:10:39:67:d8: b0:e1:3d:d7:eb:d5:6a:67:d8:8d:54:1c:91:65:a6:13:60:b2: 9e:c4:fe:20:3a:2e:e1:7c:18:69:47:20:5b:a3:af:a7:98:4d: 59:fa:c9:90:4e:e8:51:62:e2:55:af:1c:6e:f0:b0:20:84:8f: 39:9c:0c:69:6b:32:cf:81:d9:30:2b:3f:7e:bb:b5:02:69:99: dc:24:50:6a:3d:b6:d7:4f:1a:e4:11:6e:64:83:25:60:77:3d: 15:5e:c8:1e:7f:bc:2f:63:e6:3d:eb:c7:ff:ac:a4:e9:06:b7: 8d:8a:21:b2 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuy99shKyWMxv09dQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ZGY2MWY0Y2QtMzY4Yi00MjVjLWEzY2UtYzBjODIzMzY3ZWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQyBrQDOWotDAPr2iQyEpgNy3wGavvEJXrlR pLG6zYnIers43yh1z6FuYxN6aePAXFdMEOZXTm5RMCU6z+YDy22LWVlqaQoyCzkJ y8+EhzKNytgIEW6ojIgJi8hAtAtEfZm7GrDEljy2vetWIkIMb+5tR4tWWHaQLkfh qXQpnHQ38CjFiUndpl3ZRpyvYfD+abufmeya9lMsR+V9uHGJMash6/HBuXaxeNrN WFZpCeepgzQQD8CgZfSJt9efBCGKbdIV3wNdIgBeWDnBD4O1JKhaw7RGX+AnwdZL RgyssYmyyurlkVEXs0oUMGeokSkyedhqZVBRDpD1lAtyw2tp4QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEZVcxJHDo+HaloW1MjFe0007qWrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTY4YjA4NmUtNjI4Ni0z ZGEzLTkxNjAtYWFiZWQ1MTEzYmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAR7MwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAGTG/h1mhUkrgFhSiLtT6B4nH/LfpltB+PctqEgBoyyt3NwFIgNK5eCLW RsQv7NUcypUeRRMl0CmEUwRCaAcOVE7Ge9jt4f6OaGD7Oudj9EA1NO8A3gg8/1Sy dW0+uJeyHXP2gKX1cESSQJC8fcGPH1qdtuK7BEOl57KfIZGbyQm797jy8mbLktkF PIkQOWfYsOE91+vVamfYjVQckWWmE2CynsT+IDou4XwYaUcgW6Ovp5hNWfrJkE7o UWLiVa8cbvCwIISPOZwMaWsyz4HZMCs/fru1AmmZ3CRQaj22108a5BFuZIMlYHc9 FV7IHn+8L2PmPevH/6yk6Qa3jYohsg== -----END CERTIFICATE-----Generated at Wed Nov 5 12:47:02 2025 by rpki-client