$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b05b46b5-7c77-3a50-9877-46b5daee4de7.roa File: b05b46b5-7c77-3a50-9877-46b5daee4de7.roa (raw, json) Hash identifier: 1MYyJ3pRcbpnqBfDHmjK9Q9JBMFEIWcpZXZ6VFtazpU= Subject key identifier: 62:19:95:4A:D8:11:0A:96:06:8D:02:C6:B8:0C:0A:9C:D5:93:AD:76 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B6631E7C67AFA629F29D326A0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b05b46b5-7c77-3a50-9877-46b5daee4de7.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 6167 IP address blocks: 97.171.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:31:e7:c6:7a:fa:62:9f:29:d3:26:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=fc158933-1c4e-44da-b57d-a2c0005d1f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:cc:ea:53:44:e2:c2:5d:d8:c2:7d:5f:3f:98: ee:25:63:fa:b6:b9:ef:5b:75:d4:d1:35:24:98:7e: d2:4e:82:5c:05:7b:3f:c9:f8:2d:cd:63:fc:f9:b1: 27:a4:ba:ac:75:23:79:1a:50:9f:3a:a4:3c:e0:e3: 58:08:b7:b2:68:47:7c:06:60:19:93:27:33:f4:f3: 25:8a:9c:8b:33:7e:54:98:d0:c1:85:f1:75:6e:de: 5c:c3:7e:3a:cf:16:84:05:84:8c:60:0e:00:9e:02: 9e:20:13:dc:46:49:21:9f:ba:94:bc:7e:cc:bb:be: 99:13:9f:75:7f:d7:b3:58:44:a6:86:31:4e:54:7e: 0b:2c:db:20:c8:d4:10:20:25:94:6a:ca:11:3b:6f: 14:15:6a:ab:de:ca:4f:6d:1e:0b:0e:03:64:71:86: 24:b2:0d:83:0a:b1:00:a0:0e:9c:86:51:ca:0a:a4: b1:e3:74:d5:79:6e:08:38:20:71:40:97:8e:97:3f: 5f:74:01:c1:eb:e9:b7:5b:dd:e9:77:7b:8a:e0:92: b9:d3:ac:f7:26:62:0a:6a:c6:04:d8:6b:c1:99:55: 75:95:78:64:1f:1e:0f:56:4c:ea:47:50:25:08:a2: 89:e3:62:cf:e4:a1:4a:cb:15:24:4e:64:af:ad:6f: 55:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:19:95:4A:D8:11:0A:96:06:8D:02:C6:B8:0C:0A:9C:D5:93:AD:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b05b46b5-7c77-3a50-9877-46b5daee4de7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 97.171.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:77:f9:d4:b4:ef:a5:0d:f0:87:eb:27:0f:66:02:9c:0a:89: a3:3f:f3:e5:24:fc:55:2b:37:a3:db:5c:fc:51:6e:93:c8:53: 9b:b0:c7:3b:5b:22:00:85:b2:27:42:cf:c8:7d:77:8a:6f:af: 4e:53:41:7f:3f:77:06:6d:92:e4:f6:0d:73:53:51:2d:a8:04: fe:66:ef:69:bd:79:1a:45:e1:34:db:d4:33:38:71:9b:5e:54: 8e:ba:87:21:7e:a6:fd:c7:11:40:ab:84:20:05:a2:22:8f:ce: c9:28:09:62:dd:06:68:84:17:f3:98:d5:7e:ab:ff:0d:b6:e7: 12:b9:1d:73:52:62:6d:8b:9d:4e:4e:f8:c5:52:38:f5:8d:08: 2f:3f:01:6c:66:99:d0:f9:2b:77:64:88:28:89:69:ec:f6:26: ae:90:ba:17:a5:08:a4:44:e7:82:13:99:2c:70:73:8a:d0:68: ce:ac:1d:3b:1d:d9:df:9d:5e:59:ec:c4:0a:99:02:48:02:d5: fc:34:1d:fc:f1:ff:3d:8e:a1:c2:77:82:d1:8c:3a:ad:29:1b: 5f:0e:6d:26:35:4f:87:5a:53:fd:9d:cd:9b:4e:90:27:f6:74: 3d:0f:7c:d9:fe:d4:c3:27:11:d9:fe:59:23:f4:d7:67:65:d4: f6:e0:4f:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMefGevpinynTJqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk ZmMxNTg5MzMtMWM0ZS00NGRhLWI1N2QtYTJjMDAwNWQxZjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMzqU0Tiwl3Ywn1fP5juJWP6trnvW3XU0TUk mH7SToJcBXs/yfgtzWP8+bEnpLqsdSN5GlCfOqQ84ONYCLeyaEd8BmAZkycz9PMl ipyLM35UmNDBhfF1bt5cw346zxaEBYSMYA4AngKeIBPcRkkhn7qUvH7Mu76ZE591 f9ezWESmhjFOVH4LLNsgyNQQICWUasoRO28UFWqr3spPbR4LDgNkcYYksg2DCrEA oA6chlHKCqSx43TVeW4IOCBxQJeOlz9fdAHB6+m3W93pd3uK4JK506z3JmIKasYE 2GvBmVV1lXhkHx4PVkzqR1AlCKKJ42LP5KFKyxUkTmSvrW9ViwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIZlUrYEQqWBo0CxrgMCpzVk612MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjA1YjQ2YjUtN2M3Ny0z YTUwLTk4NzctNDZiNWRhZWU0ZGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHYauAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADV3+dS076UN8IfrJw9mApwKiaM/8+Uk/FUrN6PbXPxRbpPIU5uwxztb IgCFsidCz8h9d4pvr05TQX8/dwZtkuT2DXNTUS2oBP5m72m9eRpF4TTb1DM4cZte VI66hyF+pv3HEUCrhCAFoiKPzskoCWLdBmiEF/OY1X6r/w225xK5HXNSYm2LnU5O +MVSOPWNCC8/AWxmmdD5K3dkiCiJaez2Jq6QuhelCKRE54ITmSxwc4rQaM6sHTsd 2d+dXlnsxAqZAkgC1fw0Hfzx/z2OocJ3gtGMOq0pG18ObSY1T4daU/2dzZtOkCf2 dD0PfNn+1MMnEdn+WSP012dl1PbgT/Y= -----END CERTIFICATE-----Generated at Wed Nov 5 10:51:44 2025 by rpki-client