$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aad83d5b-8945-38be-85c0-f24fefd6a02e.roa File: aad83d5b-8945-38be-85c0-f24fefd6a02e.roa (raw, json) Hash identifier: 3gXeOl0dkef2r4MDbnqrI8C1d6MdNCxsXQVC8dY0r0o= Subject key identifier: 52:A7:37:23:AF:2E:FD:64:E4:8A:D0:34:7B:B1:11:BF:C9:F3:A3:9E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AE2FBC5073B0DD7769D3ABB80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aad83d5b-8945-38be-85c0-f24fefd6a02e.roa Signing time: Sun 17 Aug 2025 13:00:41 +0000 ROA not before: Sun 17 Aug 2025 13:00:41 +0000 ROA not after: Sat 15 Nov 2025 14:00:41 +0000 asID: 6167 IP address blocks: 97.204.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e2:fb:c5:07:3b:0d:d7:76:9d:3a:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 17 13:00:41 2025 GMT Not After : Nov 15 14:00:41 2025 GMT Subject: CN=31cb8f26-0be4-4acd-8d2e-ab0107b407f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f9:88:ab:00:a7:14:23:3b:dc:89:8e:e7:d1: de:08:43:0b:54:ea:98:12:5a:2a:36:39:8c:d5:ff: 96:69:a8:7e:5b:3b:7c:76:7e:09:72:98:9c:ea:2b: 7c:f8:85:e8:e7:c2:89:bd:81:f5:7a:f2:aa:4b:9f: 3d:07:77:a9:33:2e:f0:20:93:5f:16:f0:7d:d9:65: b4:85:ad:f1:3c:6a:78:c3:37:f0:3e:29:45:84:ef: 00:76:91:9b:2b:b8:53:99:59:7a:41:de:b8:6f:aa: d1:eb:0b:b4:d5:6d:ee:d5:c1:ed:a9:f2:c0:40:02: 71:e5:46:3d:12:bd:11:df:58:2a:11:2e:04:b3:9b: 1f:a4:3d:e1:37:28:7f:e9:55:0e:80:cf:25:61:6f: 41:97:39:99:40:cf:e2:40:4e:5e:1f:af:45:44:29: 6c:35:bb:a2:19:49:dd:32:d8:a3:80:79:d5:dc:f9: 04:51:30:3f:49:42:e1:7a:50:0a:a5:17:b5:29:c3: 2d:62:cf:ea:d0:50:21:7a:6a:56:45:a6:5e:a7:30: 0c:fe:55:c7:34:33:cd:af:6d:15:25:90:f1:d9:51: 40:61:99:e3:c3:99:3d:34:97:58:84:f0:4c:cf:dc: 7a:e6:9f:29:38:28:81:f6:35:70:08:b2:b7:55:85: b3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A7:37:23:AF:2E:FD:64:E4:8A:D0:34:7B:B1:11:BF:C9:F3:A3:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aad83d5b-8945-38be-85c0-f24fefd6a02e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 97.204.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:97:da:45:f5:46:3e:5d:1a:82:2c:c9:3a:6b:98:a6:7b:13: 00:3a:05:e3:65:18:ef:ad:b8:8b:e1:cb:6a:b0:05:5e:6a:71: df:e7:aa:89:b2:6b:73:5f:d7:35:be:5a:1f:e8:bd:48:5c:24: 12:a1:5b:73:dc:0b:62:ae:bf:3e:4f:4d:0e:a9:b7:6d:16:b1: bc:c0:1d:a5:32:c6:d0:92:6e:9f:3d:17:6b:22:f8:55:02:f5: ed:5c:56:cf:90:d1:c4:73:85:f9:51:23:a3:b7:d5:f0:9a:68: 9b:c6:92:fc:06:c6:84:f6:d8:4f:d0:e2:58:99:3e:98:fc:d0: 9a:36:0a:1c:a4:d2:06:51:c9:7a:21:6b:cb:a7:d9:19:72:68: 92:15:db:7f:cd:2f:74:27:55:5b:4e:e5:eb:e5:58:5f:99:d2: 97:2d:11:2d:e4:8c:4b:4d:fb:5f:5f:86:1c:21:cb:f9:d1:4a: 49:60:6e:43:48:d0:14:27:49:bd:0d:e5:57:59:a3:0b:02:33: 63:01:31:14:99:83:1f:52:6d:4f:dc:56:b7:c9:c5:2d:21:18: 29:c2:ef:18:61:3a:25:4f:7f:74:80:86:2c:71:99:0c:26:dd: c1:2b:b6:8c:24:e6:8b:d2:45:ad:f9:23:8e:7e:a1:ac:45:72: eb:6e:2f:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEri+8UHOw3Xdp06u4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxNzEzMDA0MVoXDTI1MTExNTE0MDA0MVowLzEtMCsGA1UEAxMk MzFjYjhmMjYtMGJlNC00YWNkLThkMmUtYWIwMTA3YjQwN2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfmIqwCnFCM73ImO59HeCEMLVOqYEloqNjmM 1f+Waah+Wzt8dn4Jcpic6it8+IXo58KJvYH1evKqS589B3epMy7wIJNfFvB92WW0 ha3xPGp4wzfwPilFhO8AdpGbK7hTmVl6Qd64b6rR6wu01W3u1cHtqfLAQAJx5UY9 Er0R31gqES4Es5sfpD3hNyh/6VUOgM8lYW9BlzmZQM/iQE5eH69FRClsNbuiGUnd MtijgHnV3PkEUTA/SULhelAKpRe1KcMtYs/q0FAhempWRaZepzAM/lXHNDPNr20V JZDx2VFAYZnjw5k9NJdYhPBMz9x65p8pOCiB9jVwCLK3VYWzuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKnNyOvLv1k5IrQNHuxEb/J86OeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWFkODNkNWItODk0NS0z OGJlLTg1YzAtZjI0ZmVmZDZhMDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHYcyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCX2kX1Rj5dGoIsyTprmKZ7EwA6BeNlGO+tuIvhy2qwBV5qcd/nqomy a3Nf1zW+Wh/ovUhcJBKhW3PcC2Kuvz5PTQ6pt20WsbzAHaUyxtCSbp89F2si+FUC 9e1cVs+Q0cRzhflRI6O31fCaaJvGkvwGxoT22E/Q4liZPpj80Jo2Chyk0gZRyXoh a8un2RlyaJIV23/NL3QnVVtO5evlWF+Z0pctES3kjEtN+19fhhwhy/nRSklgbkNI 0BQnSb0N5VdZowsCM2MBMRSZgx9SbU/cVrfJxS0hGCnC7xhhOiVPf3SAhixxmQwm 3cErtowk5ovSRa35I45+oaxFcutuL4I= -----END CERTIFICATE-----Generated at Wed Nov 5 12:23:19 2025 by rpki-client