$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a0b57f6e-b364-3e5f-a287-5570d9c98658.roa File: a0b57f6e-b364-3e5f-a287-5570d9c98658.roa (raw, json) Hash identifier: EXE5QaUupWzlOR791oAakYOjDL2LV7dd27CLyVserhs= Subject key identifier: 50:5B:59:CD:F8:09:92:AF:30:B3:62:3B:8F:30:71:99:82:A9:7D:3B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F7E0FDAF1BB0375FFAC480 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a0b57f6e-b364-3e5f-a287-5570d9c98658.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 108.3.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:e0:fd:af:1b:b0:37:5f:fa:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=57aff873-f4b5-47f1-b13d-b25791a6d5b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b0:d1:20:05:8a:b0:39:e3:eb:56:94:1f:bc: 4e:95:d5:c8:85:a5:50:7e:09:14:80:13:01:c7:fd: 4d:a0:b0:30:de:97:8c:0a:96:17:56:50:86:c5:60: 52:dd:2c:fb:9d:fd:5f:e7:a9:39:32:a3:3a:f9:b7: 73:7a:45:75:98:ef:c6:49:4c:d9:d8:87:2a:37:37: 7b:12:c2:21:84:39:aa:6c:25:b1:d8:e7:74:da:40: 68:4d:06:41:51:7e:13:c7:a5:90:d4:e2:a4:3b:d7: 15:e7:d7:d5:2c:20:2b:e5:a4:7a:4a:a6:e6:f0:e8: b3:f2:ba:9c:7d:ca:0f:6b:8e:81:31:0a:0c:9b:bc: 1f:d4:71:ea:46:cc:10:2d:a9:8e:f1:59:a3:2a:29: 6e:7e:ef:ca:c4:2d:97:db:66:4a:0a:0d:fb:45:48: 5d:22:d8:86:d5:e9:61:86:27:19:8e:9e:1f:74:9c: 0c:1e:22:ae:38:55:46:26:aa:ea:96:40:c4:27:8c: c2:6c:57:ff:bc:0e:48:39:9d:5a:7c:53:42:36:13: 5f:5d:2b:26:dc:82:34:ba:47:e1:ff:dc:92:4a:4a: f1:19:6b:37:2f:97:2d:e0:b0:ab:ac:d5:0c:48:ae: 2c:57:bf:ae:2d:cc:2d:8e:8c:46:f5:13:1d:25:4f: 1e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:5B:59:CD:F8:09:92:AF:30:B3:62:3B:8F:30:71:99:82:A9:7D:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a0b57f6e-b364-3e5f-a287-5570d9c98658.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.3.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:64:96:ad:38:2c:56:da:61:ce:4f:7b:fd:0a:d1:7f:1b:f4: dd:9a:45:1b:37:ba:bb:57:5b:24:f6:8c:25:b6:e7:4f:54:31: 6a:aa:d9:17:f9:95:63:94:d8:dd:98:54:08:53:69:74:49:e4: 1b:ab:4b:f1:0f:d4:63:0e:69:22:2a:f9:bc:8b:b4:52:07:0e: 0b:b1:4d:f5:b4:31:ad:4d:77:22:1f:f5:2d:b7:9f:98:26:da: 75:67:bd:b5:5b:10:a6:6f:9a:27:26:fc:f8:68:e8:d7:1f:af: e2:65:1e:95:f9:18:97:b7:fd:f2:f9:55:0c:52:c5:ce:01:d0: 23:c2:a7:de:4e:30:da:32:a1:48:4d:19:b6:02:18:b7:90:2c: 9b:ea:44:b0:70:2a:b7:ae:e3:52:9e:43:03:b4:fc:57:a9:6b: b8:9c:40:ba:0e:77:96:33:d4:8c:d1:3d:c7:55:67:04:50:e9: 6d:0a:c3:94:1c:29:5a:ee:72:a9:31:fd:8c:04:7c:ea:3a:22: 63:1a:70:70:dc:7e:44:b1:c5:83:f6:b6:2b:d0:fe:29:55:1f: b8:55:75:bb:34:29:70:77:e2:bd:59:58:28:12:71:fd:4d:5b: 9b:24:48:10:80:99:94:69:f5:06:92:1b:f9:0f:3b:fc:e7:83: 82:1d:ea:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy9+D9rxuwN1/6xIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NTdhZmY4NzMtZjRiNS00N2YxLWIxM2QtYjI1NzkxYTZkNWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLDRIAWKsDnj61aUH7xOldXIhaVQfgkUgBMB x/1NoLAw3peMCpYXVlCGxWBS3Sz7nf1f56k5MqM6+bdzekV1mO/GSUzZ2IcqNzd7 EsIhhDmqbCWx2Od02kBoTQZBUX4Tx6WQ1OKkO9cV59fVLCAr5aR6Sqbm8Oiz8rqc fcoPa46BMQoMm7wf1HHqRswQLamO8VmjKilufu/KxC2X22ZKCg37RUhdItiG1elh hicZjp4fdJwMHiKuOFVGJqrqlkDEJ4zCbFf/vA5IOZ1afFNCNhNfXSsm3II0ukfh /9ySSkrxGWs3L5ct4LCrrNUMSK4sV7+uLcwtjoxG9RMdJU8e5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBbWc34CZKvMLNiO48wcZmCqX07MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTBiNTdmNmUtYjM2NC0z ZTVmLWEyODctNTU3MGQ5Yzk4NjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHbAOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdklq04LFbaYc5Pe/0K0X8b9N2aRRs3urtXWyT2jCW2509UMWqq2Rf5 lWOU2N2YVAhTaXRJ5BurS/EP1GMOaSIq+byLtFIHDguxTfW0Ma1NdyIf9S23n5gm 2nVnvbVbEKZvmicm/Pho6Ncfr+JlHpX5GJe3/fL5VQxSxc4B0CPCp95OMNoyoUhN GbYCGLeQLJvqRLBwKreu41KeQwO0/Fepa7icQLoOd5Yz1IzRPcdVZwRQ6W0Kw5Qc KVrucqkx/YwEfOo6ImMacHDcfkSxxYP2tivQ/ilVH7hVdbs0KXB34r1ZWCgScf1N W5skSBCAmZRp9QaSG/kPO/zng4Id6sE= -----END CERTIFICATE-----Generated at Wed Nov 5 02:19:55 2025 by rpki-client