$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a535c59e-2c45-3850-a45d-c635cd99514e.roa File: a535c59e-2c45-3850-a45d-c635cd99514e.roa (raw, json) Hash identifier: 1EMSwZMNA+WkG9ll7P7nf4xnyWtCmWPRcUH2cVlo/BA= Subject key identifier: 66:E5:C7:66:5C:6B:1D:F8:4C:52:3F:53:A4:A1:9E:77:BB:E6:77:16 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F7DADBC786150165F81900 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a535c59e-2c45-3850-a45d-c635cd99514e.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 71.162.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:da:db:c7:86:15:01:65:f8:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=a95d5773-3dee-4b30-8028-5ebcae913bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:36:ae:11:5c:8b:87:c8:4e:57:0b:f0:85:71: f4:94:89:8c:7a:62:7d:25:48:ca:fd:54:ee:ac:61: 40:b2:ac:e1:7a:c1:17:db:35:95:55:6c:b3:4d:1d: a4:57:a1:ba:78:27:38:36:e0:ed:93:f9:9b:e8:20: cb:be:50:fe:14:d4:3d:c4:04:f6:e7:c2:b0:f3:8b: 7e:9f:20:c5:2a:87:dd:bb:64:57:88:ee:8a:1d:8b: c3:1c:58:72:44:0f:f3:fe:5f:95:d1:7a:9d:62:c7: 59:1b:85:98:38:08:4f:16:f5:bb:d9:f5:fd:ad:cf: 0f:20:15:1a:7e:16:4c:3f:03:1a:07:e0:e7:e7:9e: c3:b7:01:60:a2:61:5a:e5:cf:56:94:8f:d9:b6:34: 4d:29:db:b5:73:5c:72:25:96:12:d5:98:dd:83:b1: 5e:5d:83:08:d3:1d:e2:57:df:12:0a:a8:f7:0a:f5: e1:03:55:da:1b:0c:aa:c2:0a:11:79:c3:0b:eb:f8: 2e:6e:29:bf:61:f4:e5:fa:c2:9f:4d:b0:f0:35:be: 8f:f0:f7:b6:a3:b6:b3:1a:db:dc:85:c4:6f:b4:05: d9:d8:76:fb:4c:10:c2:30:e2:96:50:96:fa:0f:f6: c4:8c:55:f4:2d:7f:db:08:06:e9:22:3c:77:da:07: 56:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E5:C7:66:5C:6B:1D:F8:4C:52:3F:53:A4:A1:9E:77:BB:E6:77:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a535c59e-2c45-3850-a45d-c635cd99514e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.162.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:2e:18:67:0c:b8:0e:80:4e:a8:2e:ba:18:e9:5d:61:0e:79: 42:25:2f:18:1a:60:03:b1:70:30:a1:ef:11:ac:90:92:44:0a: bb:3a:d2:68:1a:36:ad:47:a7:ce:0b:ee:cf:fc:f7:ad:f6:58: 9f:4e:c6:18:41:c2:9b:32:ad:ed:e6:e6:51:70:66:7c:34:2f: 16:9d:51:17:4a:a6:c9:37:0e:b5:a7:52:5f:cb:c1:f3:20:27: 94:74:e1:cf:2f:a9:11:cf:b3:ac:06:54:72:3c:e4:2d:f3:43: 1f:63:e9:14:5c:15:0a:01:1c:6e:9a:62:15:4d:bb:ed:c0:76: c9:99:ec:6b:90:f7:30:8d:c8:58:1d:05:46:6d:86:21:e2:cf: 9c:16:f3:67:99:30:ef:30:aa:c8:1a:2a:04:5b:42:50:bb:98: ba:9c:c1:3c:52:44:77:b7:ee:4c:05:e7:91:2c:44:12:eb:87: 93:e7:75:a1:1b:ee:b6:4b:74:ae:ab:69:c2:ce:fc:14:b6:96: 0d:b0:5b:d6:90:a8:0d:cd:18:c3:24:1c:01:4c:22:5d:6b:4f: 63:a7:3b:55:19:eb:4e:c6:79:f7:cd:e7:8b:b0:8c:c9:ee:f1: 00:8a:be:90:48:76:c5:ee:b4:31:2c:a4:00:b9:6b:5b:59:7b: ab:bf:31:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy99rbx4YVAWX4GQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk YTk1ZDU3NzMtM2RlZS00YjMwLTgwMjgtNWViY2FlOTEzYmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDauEVyLh8hOVwvwhXH0lImMemJ9JUjK/VTu rGFAsqzhesEX2zWVVWyzTR2kV6G6eCc4NuDtk/mb6CDLvlD+FNQ9xAT258Kw84t+ nyDFKofdu2RXiO6KHYvDHFhyRA/z/l+V0XqdYsdZG4WYOAhPFvW72fX9rc8PIBUa fhZMPwMaB+Dn557DtwFgomFa5c9WlI/ZtjRNKdu1c1xyJZYS1Zjdg7FeXYMI0x3i V98SCqj3CvXhA1XaGwyqwgoRecML6/gubim/YfTl+sKfTbDwNb6P8Pe2o7azGtvc hcRvtAXZ2Hb7TBDCMOKWUJb6D/bEjFX0LX/bCAbpIjx32gdW3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGblx2Zcax34TFI/U6Shnne75ncWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTUzNWM1OWUtMmM0NS0z ODUwLWE0NWQtYzYzNWNkOTk1MTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHR6KAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0uGGcMuA6ATqguuhjpXWEOeUIlLxgaYAOxcDCh7xGskJJECrs60mga Nq1Hp84L7s/89632WJ9OxhhBwpsyre3m5lFwZnw0LxadURdKpsk3DrWnUl/LwfMg J5R04c8vqRHPs6wGVHI85C3zQx9j6RRcFQoBHG6aYhVNu+3AdsmZ7GuQ9zCNyFgd BUZthiHiz5wW82eZMO8wqsgaKgRbQlC7mLqcwTxSRHe37kwF55EsRBLrh5PndaEb 7rZLdK6racLO/BS2lg2wW9aQqA3NGMMkHAFMIl1rT2OnO1UZ607GeffN54uwjMnu 8QCKvpBIdsXutDEspAC5a1tZe6u/Md0= -----END CERTIFICATE-----Generated at Wed Nov 5 16:18:54 2025 by rpki-client