$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1d1d57d-3058-3aaa-a0c1-1694ba7d1aed.roa File: a1d1d57d-3058-3aaa-a0c1-1694ba7d1aed.roa (raw, json) Hash identifier: k4JblRU0xm2dbmigVWCaOfdWrFwy6q3p/0kAw5cHTpA= Subject key identifier: F1:D0:08:E0:41:9B:A6:CF:C0:71:D0:75:52:28:24:51:69:02:1A:54 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BC2709A6C1AC302479B2CA400 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1d1d57d-3058-3aaa-a0c1-1694ba7d1aed.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 6167 IP address blocks: 97.185.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:9a:6c:1a:c3:02:47:9b:2c:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=f440326d-c770-4824-a8a2-db8d991c80f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7c:65:1a:f4:0a:e4:66:6c:bb:12:31:ca:7f: 26:de:d3:10:49:bd:36:36:1a:8c:ed:ed:30:b4:de: c9:82:a9:09:fc:19:2b:11:de:6a:eb:ef:51:bd:bd: b4:68:c1:12:4a:73:c3:9e:63:1b:de:8a:07:97:7f: a0:92:5b:cb:8a:f3:94:47:d6:45:3d:3b:86:64:c1: fa:34:ed:b0:64:17:18:82:72:4d:76:9e:fc:6a:68: 0e:1c:80:eb:a8:50:e2:4e:4c:b6:29:c1:ce:46:38: 1a:dc:23:5a:f0:7a:1a:46:92:e9:29:cf:3e:5f:29: 68:08:1f:48:d7:23:e4:f4:44:e6:7e:93:45:3b:29: c8:02:bc:c7:22:40:e7:48:80:12:e3:44:77:75:71: 71:50:0f:2b:6b:a8:2c:90:fe:65:a3:66:b1:cd:64: 7f:ff:75:9a:88:2f:47:9d:0c:fa:75:78:62:51:f5: 62:74:7e:04:98:c4:d0:2b:e7:9f:93:0e:09:71:b5: ab:52:8e:82:13:d9:a7:e4:c6:df:ef:51:72:7a:89: e3:37:ae:02:0d:ba:02:7a:bc:95:e6:21:54:06:d5: 34:e8:7b:56:4d:80:4c:9f:6c:6f:c4:ac:31:c0:21: 8a:d5:f7:2c:31:bd:9d:c1:9e:80:c2:bf:42:6a:25: 3a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D0:08:E0:41:9B:A6:CF:C0:71:D0:75:52:28:24:51:69:02:1A:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1d1d57d-3058-3aaa-a0c1-1694ba7d1aed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 97.185.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:13:d6:6b:7c:b1:70:7f:76:14:40:61:6f:65:ad:48:1b:0f: b1:c0:56:39:76:16:6f:c7:3a:4e:26:27:f0:ad:78:82:b6:06: 64:0f:70:b8:c9:7c:66:33:d9:95:b7:c4:df:2f:0c:ea:a7:b9: cf:10:22:57:d6:c9:23:da:1b:56:b7:5e:6a:a6:06:89:36:c9: 5b:90:c4:c9:19:ea:90:a0:90:58:f8:b3:94:4c:f2:66:9f:b4: 15:01:e0:d3:fb:51:5c:dc:09:e8:e4:f7:8f:1a:4c:7e:c8:ed: 05:12:0a:ea:2d:f7:bb:e2:36:b5:1a:ef:d1:3f:bf:c0:6a:20: 15:a5:4e:67:b1:16:17:83:65:9d:6c:29:c8:f3:18:3a:6f:b1: b1:ec:dc:ee:e0:f0:fd:d5:39:3f:57:12:21:1f:57:23:49:6a: 41:23:50:58:60:2e:08:ea:bd:34:71:59:fc:7d:97:58:5e:55: 31:f1:ba:b9:71:cc:56:e4:02:5c:0c:ea:30:74:04:38:fb:b3: a6:3c:72:d5:2c:ab:e6:65:4c:67:19:a1:80:f2:58:91:ea:4c: 24:cd:7e:51:73:f7:3f:55:4a:3b:8f:e3:99:97:ec:4c:e6:df: ac:dc:17:ce:ea:af:eb:57:8f:f3:04:38:fa:66:76:f1:ac:02: a8:2f:39:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvCcJpsGsMCR5sspAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk ZjQ0MDMyNmQtYzc3MC00ODI0LWE4YTItZGI4ZDk5MWM4MGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXxlGvQK5GZsuxIxyn8m3tMQSb02NhqM7e0w tN7JgqkJ/BkrEd5q6+9Rvb20aMESSnPDnmMb3ooHl3+gklvLivOUR9ZFPTuGZMH6 NO2wZBcYgnJNdp78amgOHIDrqFDiTky2KcHORjga3CNa8HoaRpLpKc8+XyloCB9I 1yPk9ETmfpNFOynIArzHIkDnSIAS40R3dXFxUA8ra6gskP5lo2axzWR//3WaiC9H nQz6dXhiUfVidH4EmMTQK+efkw4JcbWrUo6CE9mn5Mbf71FyeonjN64CDboCeryV 5iFUBtU06HtWTYBMn2xvxKwxwCGK1fcsMb2dwZ6Awr9CaiU6AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHQCOBBm6bPwHHQdVIoJFFpAhpUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTFkMWQ1N2QtMzA1OC0z YWFhLWEwYzEtMTY5NGJhN2QxYWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHYbmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAT1mt8sXB/dhRAYW9lrUgbD7HAVjl2Fm/HOk4mJ/CteIK2BmQPcLjJ fGYz2ZW3xN8vDOqnuc8QIlfWySPaG1a3XmqmBok2yVuQxMkZ6pCgkFj4s5RM8maf tBUB4NP7UVzcCejk948aTH7I7QUSCuot97viNrUa79E/v8BqIBWlTmexFheDZZ1s KcjzGDpvsbHs3O7g8P3VOT9XEiEfVyNJakEjUFhgLgjqvTRxWfx9l1heVTHxurlx zFbkAlwM6jB0BDj7s6Y8ctUsq+ZlTGcZoYDyWJHqTCTNflFz9z9VSjuP45mX7Ezm 36zcF87qr+tXj/MEOPpmdvGsAqgvOTc= -----END CERTIFICATE-----Generated at Wed Nov 5 22:14:10 2025 by rpki-client