$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a5e6d856-a0a9-3273-8466-54b9fac287ab.roa File: a5e6d856-a0a9-3273-8466-54b9fac287ab.roa (raw, json) Hash identifier: W2j6fIGyyoL//u03nDTWvslQJde2mTZq/kRJzFE82z0= Subject key identifier: B3:3A:2E:61:FA:88:33:5E:7D:B8:0C:0B:52:F9:6E:8C:43:10:BD:59 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F806CF13E3CDFACA7EC800 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a5e6d856-a0a9-3273-8466-54b9fac287ab.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 98.111.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:06:cf:13:e3:cd:fa:ca:7e:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=575ac315-81a0-4a51-8a1d-858d2d75108e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:73:a0:76:6a:45:fe:e6:92:52:60:93:7a:dc: fc:f0:b7:d7:76:a2:82:76:96:e4:01:f2:38:75:f7: 0f:57:da:49:cb:9c:a4:b0:1e:64:79:ff:59:4d:3b: a8:49:ab:ae:49:d1:06:67:49:c1:72:e3:75:a4:e2: 54:4a:45:80:e1:7a:50:22:9a:a4:90:f2:b4:f4:3f: 0b:cc:c8:4b:bf:46:b6:c6:f1:17:b4:21:14:13:49: 90:49:37:0d:22:dd:24:4f:9a:9f:d4:30:f2:37:d6: ec:11:d9:93:ef:ae:44:93:58:f4:70:4d:88:d2:18: c9:f0:71:9f:d5:6e:75:9a:97:31:68:09:ed:df:f1: 1d:e8:5f:78:d3:96:10:01:d3:2c:9e:bb:7f:43:0a: 41:8f:79:5b:fc:58:d5:35:ec:a6:9e:0d:a6:45:ff: b2:3c:bb:43:d9:be:0d:5d:5a:0d:dc:51:66:64:10: e5:9b:06:93:6d:94:d3:66:22:e3:00:75:c7:94:af: 77:a0:b2:cc:ab:ed:cb:0c:ac:0f:31:aa:d9:8a:08: 2a:e3:c9:7b:38:13:6a:d5:10:6f:42:f8:f3:8d:86: 09:05:9f:d7:76:0c:69:b0:72:ab:df:96:5d:de:42: 98:97:66:cb:6d:59:91:c5:cc:52:1e:68:60:f2:5a: f3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:3A:2E:61:FA:88:33:5E:7D:B8:0C:0B:52:F9:6E:8C:43:10:BD:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a5e6d856-a0a9-3273-8466-54b9fac287ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 98.111.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:2a:f5:8a:bc:0f:ba:88:67:3e:63:99:f5:88:d8:12:a4:47: 59:c3:45:32:b0:35:f9:a4:5e:bb:ef:89:b7:a5:76:7f:f4:7a: a3:11:d9:5d:3f:94:d3:9b:78:56:8d:5d:cc:69:13:04:39:d3: dd:fd:94:6a:73:fa:7f:61:df:57:92:38:28:08:13:8b:b2:03: 38:4d:5c:25:55:58:ea:4e:eb:21:ee:ae:34:39:93:63:e4:82: 1b:52:8b:63:27:30:34:c4:76:00:47:ca:31:d1:77:86:94:17: 88:86:87:7b:d8:d3:c6:c4:1c:1f:be:71:9f:32:b4:ed:af:ec: 29:4b:86:ad:1f:46:75:9c:26:73:df:fe:25:e3:db:57:14:65: a2:f3:25:ed:cc:c9:9b:24:c2:a3:47:e7:b1:7c:3d:02:f3:8a: 82:77:db:3d:75:a8:d7:46:d6:eb:07:d6:c8:ab:c9:ca:56:8a: a0:64:ad:ab:92:2a:d7:cf:9f:96:1f:fc:28:cd:b4:1e:22:a0: c8:1f:54:cb:73:4a:11:85:f0:1f:62:7d:36:6a:da:14:03:e5: 49:0c:d0:5c:16:b9:d6:63:17:0f:06:3a:60:bf:d1:5a:ce:c0: 3e:ac:b4:8a:4f:59:38:96:b0:49:ec:8f:0f:b9:f6:fb:20:e1: 17:59:86:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy+AbPE+PN+sp+yAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NTc1YWMzMTUtODFhMC00YTUxLThhMWQtODU4ZDJkNzUxMDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknOgdmpF/uaSUmCTetz88LfXdqKCdpbkAfI4 dfcPV9pJy5yksB5kef9ZTTuoSauuSdEGZ0nBcuN1pOJUSkWA4XpQIpqkkPK09D8L zMhLv0a2xvEXtCEUE0mQSTcNIt0kT5qf1DDyN9bsEdmT765Ek1j0cE2I0hjJ8HGf 1W51mpcxaAnt3/Ed6F9405YQAdMsnrt/QwpBj3lb/FjVNeymng2mRf+yPLtD2b4N XVoN3FFmZBDlmwaTbZTTZiLjAHXHlK93oLLMq+3LDKwPMarZiggq48l7OBNq1RBv QvjzjYYJBZ/XdgxpsHKr35Zd3kKYl2bLbVmRxcxSHmhg8lrzOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLM6LmH6iDNefbgMC1L5boxDEL1ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTVlNmQ4NTYtYTBhOS0z MjczLTg0NjYtNTRiOWZhYzI4N2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGYm+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAq9Yq8D7qIZz5jmfWI2BKkR1nDRTKwNfmkXrvvibeldn/0eqMR2V0/ lNObeFaNXcxpEwQ50939lGpz+n9h31eSOCgIE4uyAzhNXCVVWOpO6yHurjQ5k2Pk ghtSi2MnMDTEdgBHyjHRd4aUF4iGh3vY08bEHB++cZ8ytO2v7ClLhq0fRnWcJnPf /iXj21cUZaLzJe3MyZskwqNH57F8PQLzioJ32z11qNdG1usH1sirycpWiqBkrauS KtfPn5Yf/CjNtB4ioMgfVMtzShGF8B9ifTZq2hQD5UkM0FwWudZjFw8GOmC/0VrO wD6stIpPWTiWsEnsjw+59vsg4RdZhic= -----END CERTIFICATE-----Generated at Wed Nov 5 11:11:12 2025 by rpki-client