$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b2f387c2-d258-3adb-92f3-0f2fd1a29b2e.roa File: b2f387c2-d258-3adb-92f3-0f2fd1a29b2e.roa (raw, json) Hash identifier: Bo1FUexVKBYuVgl/8vyH7kcfniN3bb7aBYsWwS1kRYU= Subject key identifier: 46:95:A4:67:70:3B:C7:75:9B:A5:DD:D7:F1:E6:51:F4:27:4F:63:52 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BA39D320C1141067F74743380 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b2f387c2-d258-3adb-92f3-0f2fd1a29b2e.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 701 IP address blocks: 216.0.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:32:0c:11:41:06:7f:74:74:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=bb1292a6-9bac-4e90-a386-d0d2421ced4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f3:c1:f1:9d:60:95:51:6d:36:7e:fe:8a:12: 55:2a:77:34:00:af:3a:75:49:e5:b2:dd:3a:37:6e: a3:88:9d:d2:3d:c9:8a:72:b6:f9:f8:b7:f3:ad:67: 96:15:d5:79:7f:f7:24:97:cb:49:ef:a0:42:6e:1c: b6:e3:f8:4c:41:d8:44:07:62:22:66:a9:34:e1:a0: 76:75:a3:08:71:99:7d:23:de:fb:fe:eb:7e:9f:f3: 96:90:3d:ab:25:b0:bf:ec:91:66:4b:51:b8:a2:33: 24:7b:b4:de:85:a0:8d:6e:cc:1d:5f:9d:31:1f:5e: 1c:31:bb:b4:0e:bc:a9:d4:a0:76:90:d8:ac:12:3a: 70:5d:ee:cc:79:2a:53:9f:4b:98:75:6b:56:21:f0: ab:c3:69:4f:f3:bf:f6:34:8f:0c:55:2b:e3:a8:e4: 85:31:64:0b:7c:5d:dd:0d:f8:d1:dd:ff:fe:d9:41: 9f:21:f7:42:af:d6:35:e8:64:a1:99:df:d1:9a:91: 40:74:5d:ef:75:c3:52:68:cb:b2:63:e1:17:c6:44: d0:02:82:9b:67:00:3f:fb:aa:2c:a2:a0:1e:34:d6: 58:4b:4f:c9:1a:f6:d6:47:84:3a:57:47:c9:76:6a: 62:d5:85:d4:96:c4:c4:d2:4e:d6:6b:3f:bc:f0:ba: 07:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:95:A4:67:70:3B:C7:75:9B:A5:DD:D7:F1:E6:51:F4:27:4F:63:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b2f387c2-d258-3adb-92f3-0f2fd1a29b2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 216.0.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:96:de:91:81:c9:78:d5:15:32:e3:ca:2f:c9:74:78:3b:56: ec:d6:48:d3:de:a0:f3:48:89:e0:b8:d1:a6:43:0e:a5:af:1e: 02:d9:84:b9:d0:3e:44:8a:07:c5:cd:76:23:c1:53:13:59:01: e4:19:55:2f:c2:b4:5f:b4:e7:8f:b0:7d:4e:e6:ec:ce:9b:45: 88:07:03:51:45:c6:09:32:f5:e1:36:5f:cd:90:67:c4:34:60: 74:b2:e0:06:ab:6c:8c:ab:2c:b9:97:7f:99:f9:13:2e:bc:84: 16:17:ca:70:12:e0:11:92:7c:b0:92:d3:c5:1f:d2:48:2d:59: 28:0c:dd:40:6f:eb:c4:d8:ab:2b:86:b6:ae:cf:5f:92:e7:50: 01:81:61:1a:95:03:2b:cb:88:8b:52:a1:75:13:4e:d6:79:ac: 83:0d:94:e9:a7:95:7b:a0:93:de:8e:10:45:71:61:a0:3f:c5: 0e:df:4e:5a:03:a2:42:8b:64:49:86:ee:8e:e5:15:cf:0b:09: bd:1d:cd:39:1d:3b:57:10:c1:4e:fe:96:e2:7d:87:29:a7:58: 2e:29:61:f0:8e:32:ef:b0:9f:f8:7e:f9:b2:fa:dc:01:ba:07: ee:16:fc:d5:06:b0:47:fa:52:b3:ca:a8:e8:91:ae:7b:08:65: 9c:0a:28:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTIMEUEGf3R0M4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YmIxMjkyYTYtOWJhYy00ZTkwLWEzODYtZDBkMjQyMWNlZDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8PPB8Z1glVFtNn7+ihJVKnc0AK86dUnlst06 N26jiJ3SPcmKcrb5+LfzrWeWFdV5f/ckl8tJ76BCbhy24/hMQdhEB2IiZqk04aB2 daMIcZl9I977/ut+n/OWkD2rJbC/7JFmS1G4ojMke7TehaCNbswdX50xH14cMbu0 Dryp1KB2kNisEjpwXe7MeSpTn0uYdWtWIfCrw2lP87/2NI8MVSvjqOSFMWQLfF3d DfjR3f/+2UGfIfdCr9Y16GShmd/RmpFAdF3vdcNSaMuyY+EXxkTQAoKbZwA/+6os oqAeNNZYS0/JGvbWR4Q6V0fJdmpi1YXUlsTE0k7Waz+88LoHoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEaVpGdwO8d1m6Xd1/HmUfQnT2NSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjJmMzg3YzItZDI1OC0z YWRiLTkyZjMtMGYyZmQxYTI5YjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ABqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJiW3pGByXjVFTLjyi/JdHg7VuzWSNPeoPNIieC40aZDDqWvHgLZhLnQ PkSKB8XNdiPBUxNZAeQZVS/CtF+054+wfU7m7M6bRYgHA1FFxgky9eE2X82QZ8Q0 YHSy4AarbIyrLLmXf5n5Ey68hBYXynAS4BGSfLCS08Uf0kgtWSgM3UBv68TYqyuG tq7PX5LnUAGBYRqVAyvLiItSoXUTTtZ5rIMNlOmnlXugk96OEEVxYaA/xQ7fTloD okKLZEmG7o7lFc8LCb0dzTkdO1cQwU7+luJ9hymnWC4pYfCOMu+wn/h++bL63AG6 B+4W/NUGsEf6UrPKqOiRrnsIZZwKKAc= -----END CERTIFICATE-----Generated at Wed Nov 5 02:21:03 2025 by rpki-client