$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aff2bfb3-c3d0-3e02-92c8-63451cf75683.roa File: aff2bfb3-c3d0-3e02-92c8-63451cf75683.roa (raw, json) Hash identifier: oX16YQAp5UUFJbskGR/hsd3NLpfP65sbrcEJOUbYyrg= Subject key identifier: 3A:70:3C:53:BB:3F:CF:1E:DF:C2:03:EC:70:41:D7:4F:9A:F1:01:B1 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F80D87B2A8460CD5932180 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aff2bfb3-c3d0-3e02-92c8-63451cf75683.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 173.59.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:0d:87:b2:a8:46:0c:d5:93:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=de40096c-ce22-4d97-968f-50c66bcfac94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:fc:f4:2a:57:d1:93:1a:a0:a1:b6:26:d4:08: cb:8f:85:44:00:1e:01:88:b5:10:d0:4b:d7:6a:f6: b7:df:2b:0f:ae:79:2b:39:af:45:e2:23:4e:d7:b3: de:54:52:ba:1e:3a:b8:d1:bd:94:11:06:b2:82:a0: 24:94:7e:39:24:85:14:7d:ab:d0:7f:b5:46:41:98: d9:21:e3:0a:42:86:d1:90:c8:9f:a0:07:67:53:ba: 02:6d:84:88:65:ad:d6:88:76:6b:73:34:01:f7:30: 5b:f8:5a:df:3f:ca:2a:15:95:9f:ce:58:00:bc:f7: 98:fa:bf:77:c5:fe:90:e3:1e:69:f5:6e:08:7a:e3: 78:20:da:76:6b:c0:11:e6:1d:48:98:dc:2c:86:be: 45:67:37:8d:5c:96:28:ab:18:28:00:d2:7b:06:cb: 33:b2:0d:4b:64:ea:5c:49:c0:2c:68:4b:27:65:34: 8e:e2:10:4c:d9:db:58:b0:69:f4:bd:4d:fe:b6:07: 08:e1:62:02:40:76:24:08:0c:af:7c:87:fc:a4:df: 57:b6:2d:76:23:da:f9:90:50:da:7c:d5:a5:5a:49: 12:e0:96:80:0d:20:77:c4:9f:2c:c2:d3:b3:54:94: 6b:d7:f9:0c:53:45:59:f8:83:bd:30:34:23:60:01: e5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:70:3C:53:BB:3F:CF:1E:DF:C2:03:EC:70:41:D7:4F:9A:F1:01:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aff2bfb3-c3d0-3e02-92c8-63451cf75683.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 173.59.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:bf:dc:d3:35:6d:5d:68:28:56:15:fe:f1:9d:43:dd:af:cd: c4:a2:d4:ca:d6:a6:67:a1:bc:ce:6e:d6:e9:62:02:94:78:25: 43:39:6e:a8:28:d3:22:0b:84:0c:05:4c:e5:f6:c3:99:20:17: 99:d0:d4:ed:59:15:be:55:9b:c4:5a:04:79:1d:4d:4b:f9:f7: cd:51:be:56:b6:83:fc:c8:fc:fd:2c:5a:0b:2f:1d:fb:fc:7a: 29:11:99:54:a8:f3:4c:e7:82:33:13:a9:1f:36:b8:0e:c2:5d: 01:a3:c2:f5:37:0c:b8:95:96:eb:fe:98:98:ce:fc:34:df:d9: 2d:c4:3f:46:91:87:dd:4f:e2:95:86:c0:b0:cd:bf:09:79:e8: 88:be:69:0b:88:0f:6a:c1:ff:74:53:6a:4d:fe:11:d7:58:10: ff:27:08:f7:a5:cb:00:94:dd:f1:33:f1:9b:36:fc:cd:dd:bd: ff:b7:d4:eb:5d:76:22:14:4f:22:4e:b6:3d:4e:01:fc:e6:44: 88:6b:0b:5a:ab:95:4c:b6:23:db:b7:51:cd:ec:cb:ac:42:6f: 7a:b9:c8:73:0f:a3:d8:a7:57:77:f8:96:6a:0b:33:7e:4a:6d: c5:e6:51:14:4b:9d:f3:a8:51:f8:c2:6c:f0:76:91:d8:e2:a3: 39:d6:11:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy+A2HsqhGDNWTIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ZGU0MDA5NmMtY2UyMi00ZDk3LTk2OGYtNTBjNjZiY2ZhYzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fz0KlfRkxqgobYm1AjLj4VEAB4BiLUQ0EvX ava33ysPrnkrOa9F4iNO17PeVFK6Hjq40b2UEQaygqAklH45JIUUfavQf7VGQZjZ IeMKQobRkMifoAdnU7oCbYSIZa3WiHZrczQB9zBb+FrfP8oqFZWfzlgAvPeY+r93 xf6Q4x5p9W4IeuN4INp2a8AR5h1ImNwshr5FZzeNXJYoqxgoANJ7Bsszsg1LZOpc ScAsaEsnZTSO4hBM2dtYsGn0vU3+tgcI4WICQHYkCAyvfIf8pN9Xti12I9r5kFDa fNWlWkkS4JaADSB3xJ8swtOzVJRr1/kMU0VZ+IO9MDQjYAHlxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpwPFO7P88e38ID7HBB10+a8QGxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWZmMmJmYjMtYzNkMC0z ZTAyLTkyYzgtNjM0NTFjZjc1NjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrTtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAu/3NM1bV1oKFYV/vGdQ92vzcSi1MrWpmehvM5u1uliApR4JUM5bqgo 0yILhAwFTOX2w5kgF5nQ1O1ZFb5Vm8RaBHkdTUv5981Rvla2g/zI/P0sWgsvHfv8 eikRmVSo80zngjMTqR82uA7CXQGjwvU3DLiVluv+mJjO/DTf2S3EP0aRh91P4pWG wLDNvwl56Ii+aQuID2rB/3RTak3+EddYEP8nCPelywCU3fEz8Zs2/M3dvf+31Otd diIUTyJOtj1OAfzmRIhrC1qrlUy2I9u3Uc3sy6xCb3q5yHMPo9inV3f4lmoLM35K bcXmURRLnfOoUfjCbPB2kdjioznWEbE= -----END CERTIFICATE-----Generated at Wed Nov 5 04:05:28 2025 by rpki-client