$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aab8c407-8086-3524-9472-9d46b3df9f60.roa File: aab8c407-8086-3524-9472-9d46b3df9f60.roa (raw, json) Hash identifier: gv7RUUaWPkcEc4FOrLX5ScEQZHkPq4Nhcjyp48uEnlY= Subject key identifier: 32:CB:CC:91:23:BF:11:54:96:2D:4A:DB:44:55:4C:90:45:03:01:E0 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BA39D2B21063E8608B545B380 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aab8c407-8086-3524-9472-9d46b3df9f60.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 701 IP address blocks: 204.51.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:2b:21:06:3e:86:08:b5:45:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=248f228f-aaee-4d34-bb2f-bfafdeb4fa00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5a:e3:c7:30:45:01:00:42:1c:f3:73:5b:84: 79:67:01:ee:bb:8b:7c:75:ab:87:cb:72:55:e9:93: d8:3f:5a:90:f6:87:dd:23:a7:16:74:0c:a4:c3:58: 4e:5e:c6:c9:95:92:39:4e:fc:10:e3:10:ef:90:85: ea:9d:00:12:08:27:df:d7:fb:a0:b7:de:eb:91:e6: 9e:1c:78:cd:ad:bc:65:93:43:65:78:30:88:09:7c: 00:f9:87:53:66:ba:6b:94:a0:54:e5:eb:fe:cc:18: a4:04:48:54:24:79:ab:36:4b:04:30:c8:4e:47:44: cd:f9:71:b3:b3:f6:12:80:3d:77:d0:68:7b:e2:9f: bb:0f:4b:d6:4f:2e:d1:67:01:4f:5f:a1:6f:0f:7f: e6:1c:9c:62:66:8f:6e:27:4e:8a:ed:7f:5e:7c:45: f7:d5:01:34:78:a6:9a:db:fc:c3:e8:4b:75:d5:c1: dc:35:78:09:d5:4a:6b:cd:ff:30:67:c1:4c:f4:d3: 5b:27:d6:44:76:9f:0c:82:0b:11:d1:d1:8a:18:5d: 75:93:83:64:ba:4e:df:2b:4a:47:0b:94:aa:c8:00: f8:73:f5:eb:ba:f3:dc:9b:a9:20:54:12:d0:ea:dd: a9:1c:5e:2e:8e:00:00:bf:16:2e:81:18:66:df:82: e4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:CB:CC:91:23:BF:11:54:96:2D:4A:DB:44:55:4C:90:45:03:01:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aab8c407-8086-3524-9472-9d46b3df9f60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 204.51.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:42:20:a2:f5:15:2f:98:91:0b:ab:cc:96:b2:ba:d7:61:08: e6:70:6a:22:3d:a4:4a:5a:74:40:03:ca:3c:ab:0b:29:10:e0: 63:ba:80:82:76:30:b2:2e:35:2e:8a:fa:8e:30:58:6a:34:70: a8:88:d7:ce:4e:bf:fd:f2:46:0c:97:5b:2e:2c:22:73:02:85: 2c:3e:7d:6f:68:37:97:ea:a8:5a:7a:66:f2:e2:9a:dd:31:75: f3:0c:91:3a:1a:be:95:88:b1:c1:98:6e:7b:1f:e6:5d:38:70: 2d:04:85:5f:7a:5c:0f:7b:ab:78:1e:63:7b:b4:cb:fe:f7:62: e3:7c:62:4f:11:c5:24:41:8c:7d:93:4e:05:e8:66:9f:9f:3a: 0c:84:f8:2b:c7:21:c4:1d:22:00:14:91:0a:37:26:97:30:bb: 40:6e:b5:6e:8a:ef:24:aa:5e:ee:42:c7:69:f3:09:f2:4e:bb: 3f:1d:ce:03:dc:ff:0a:fc:16:85:11:c2:56:e3:11:90:16:ee: b8:b8:87:a9:90:cd:9f:d8:34:8f:32:d6:d2:84:60:13:ba:33: ad:09:db:09:cf:02:86:d9:1f:35:29:b3:7a:e2:f7:af:45:8e: c9:64:2c:28:3a:f3:3f:a1:45:78:27:3b:a8:0a:94:b7:ce:2f: 39:49:3b:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSshBj6GCLVFs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MjQ4ZjIyOGYtYWFlZS00ZDM0LWJiMmYtYmZhZmRlYjRmYTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulrjxzBFAQBCHPNzW4R5ZwHuu4t8dauHy3JV 6ZPYP1qQ9ofdI6cWdAykw1hOXsbJlZI5TvwQ4xDvkIXqnQASCCff1/ugt97rkeae HHjNrbxlk0NleDCICXwA+YdTZrprlKBU5ev+zBikBEhUJHmrNksEMMhOR0TN+XGz s/YSgD130Gh74p+7D0vWTy7RZwFPX6FvD3/mHJxiZo9uJ06K7X9efEX31QE0eKaa 2/zD6Et11cHcNXgJ1Uprzf8wZ8FM9NNbJ9ZEdp8MggsR0dGKGF11k4Nkuk7fK0pH C5SqyAD4c/XruvPcm6kgVBLQ6t2pHF4ujgAAvxYugRhm34Lk0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLLzJEjvxFUli1K20RVTJBFAwHgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWFiOGM0MDctODA4Ni0z NTI0LTk0NzItOWQ0NmIzZGY5ZjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzDNZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRCIKL1FS+YkQurzJayutdhCOZwaiI9pEpadEADyjyrCykQ4GO6gIJ2 MLIuNS6K+o4wWGo0cKiI185Ov/3yRgyXWy4sInMChSw+fW9oN5fqqFp6ZvLimt0x dfMMkToavpWIscGYbnsf5l04cC0EhV96XA97q3geY3u0y/73YuN8Yk8RxSRBjH2T TgXoZp+fOgyE+CvHIcQdIgAUkQo3Jpcwu0ButW6K7ySqXu5Cx2nzCfJOuz8dzgPc /wr8FoURwlbjEZAW7ri4h6mQzZ/YNI8y1tKEYBO6M60J2wnPAobZHzUps3ri969F jslkLCg68z+hRXgnO6gKlLfOLzlJO4k= -----END CERTIFICATE-----Generated at Wed Nov 5 12:47:07 2025 by rpki-client