$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8cdf77b-a94f-3c91-88a8-bdbaf06bec03.roa File: b8cdf77b-a94f-3c91-88a8-bdbaf06bec03.roa (raw, json) Hash identifier: gIvObH4LXfa9E7RXH5bzKf4z+G5oX9GT/iBjFavEipA= Subject key identifier: 35:6F:6D:4A:F8:92:54:CD:7D:B3:9F:A6:B4:F5:1D:09:7E:E1:8E:09 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F801A224F2256D72297BE0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8cdf77b-a94f-3c91-88a8-bdbaf06bec03.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 71.255.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:01:a2:24:f2:25:6d:72:29:7b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=68221c0a-0f09-42c0-b3bc-81e68e366b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:3d:88:cb:6d:03:85:8a:aa:24:76:c6:f7:0f: c3:cb:c5:a6:db:3e:ae:86:ee:da:90:ad:bf:6f:75: 40:a0:a1:95:aa:d3:dd:34:50:7b:2a:67:16:29:b4: 54:fa:f6:fa:49:0e:51:b3:46:0e:61:65:41:89:71: e3:37:02:92:37:97:d3:38:73:0c:84:e1:41:23:e0: 35:0d:13:f3:e3:6f:42:9c:24:f3:d2:a0:66:b4:3b: 36:01:51:6f:28:fa:c7:07:55:6c:a3:80:6c:0d:1f: c7:5b:2b:47:2c:66:48:5d:98:ae:0b:84:4c:84:25: 46:a7:fb:44:91:e3:68:db:4a:e5:e3:48:0f:e6:24: 8c:4f:bc:f0:95:63:b3:2e:11:5d:cd:4b:05:e5:08: ee:1e:3a:73:1d:46:2f:0b:99:02:44:27:09:64:a8: dc:29:0c:02:9c:17:8e:95:e4:49:09:1b:81:9f:c9: 2c:9f:b4:13:28:9e:b4:97:46:8d:6b:2d:81:4b:36: e8:1d:ed:c4:d4:ba:1b:19:e2:9e:29:da:1a:28:95: c6:fb:07:66:f1:13:13:b7:eb:fd:b2:e3:ab:34:d2: ec:e9:af:f3:fd:0c:e1:ef:01:a0:8c:ae:42:5c:db: df:a6:b4:ec:7d:cc:1c:f8:7d:ab:b3:9e:a5:64:06: ed:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6F:6D:4A:F8:92:54:CD:7D:B3:9F:A6:B4:F5:1D:09:7E:E1:8E:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8cdf77b-a94f-3c91-88a8-bdbaf06bec03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.255.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:37:da:0a:5a:09:c9:11:1f:3c:bb:7d:a6:83:ff:56:5c:e2: 3e:94:5c:75:14:61:db:4e:e4:93:f1:c7:ac:77:6e:ec:af:2d: 15:ff:4b:b7:a4:94:9b:df:e7:d5:d4:a4:56:6f:b7:c4:24:ad: 68:5a:ab:b4:66:79:aa:b0:5b:9f:65:92:a1:3c:d4:08:be:b9: 4f:96:18:a5:ca:ed:de:91:e9:da:d5:e9:40:a3:04:60:55:3d: 3a:e8:c9:69:64:61:97:48:c0:9e:63:10:cf:39:33:26:83:d0: 7b:66:e1:40:26:2a:ff:5a:b8:a8:f3:24:27:82:a8:64:b2:63: aa:d1:ca:7c:ce:4a:2b:9b:af:b7:ad:91:d2:96:92:7a:94:c5: 38:20:23:b7:b3:4b:4c:cb:fe:39:51:1a:e5:c3:26:be:c1:6c: 8f:2e:66:2d:d6:4a:b7:fe:ae:c4:7c:50:5d:93:ec:3e:e0:ce: 3f:c3:e7:c7:fc:29:6e:a3:1a:e7:e0:4c:cc:9d:15:11:59:bf: d3:87:76:23:4e:6f:57:a2:98:35:b1:af:59:40:8c:e7:61:3b: a1:b2:3f:ee:58:e5:c0:bb:73:d3:d3:56:c2:e2:b8:e1:35:a2: 49:28:ed:0e:a5:e5:70:f2:89:28:60:63:08:3a:ce:87:e4:07: fc:24:b8:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy+AGiJPIlbXIpe+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NjgyMjFjMGEtMGYwOS00MmMwLWIzYmMtODFlNjhlMzY2YjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgT2Iy20DhYqqJHbG9w/Dy8Wm2z6uhu7akK2/ b3VAoKGVqtPdNFB7KmcWKbRU+vb6SQ5Rs0YOYWVBiXHjNwKSN5fTOHMMhOFBI+A1 DRPz429CnCTz0qBmtDs2AVFvKPrHB1Vso4BsDR/HWytHLGZIXZiuC4RMhCVGp/tE keNo20rl40gP5iSMT7zwlWOzLhFdzUsF5QjuHjpzHUYvC5kCRCcJZKjcKQwCnBeO leRJCRuBn8ksn7QTKJ60l0aNay2BSzboHe3E1LobGeKeKdoaKJXG+wdm8RMTt+v9 suOrNNLs6a/z/Qzh7wGgjK5CXNvfprTsfcwc+H2rs56lZAbtCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVvbUr4klTNfbOfprT1HQl+4Y4JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjhjZGY3N2ItYTk0Zi0z YzkxLTg4YTgtYmRiYWYwNmJlYzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER/9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD832gpaCckRHzy7faaD/1Zc4j6UXHUUYdtO5JPxx6x3buyvLRX/S7ek lJvf59XUpFZvt8QkrWhaq7RmeaqwW59lkqE81Ai+uU+WGKXK7d6R6drV6UCjBGBV PTroyWlkYZdIwJ5jEM85MyaD0Htm4UAmKv9auKjzJCeCqGSyY6rRynzOSiubr7et kdKWknqUxTggI7ezS0zL/jlRGuXDJr7BbI8uZi3WSrf+rsR8UF2T7D7gzj/D58f8 KW6jGufgTMydFRFZv9OHdiNOb1eimDWxr1lAjOdhO6GyP+5Y5cC7c9PTVsLiuOE1 okko7Q6l5XDyiShgYwg6zofkB/wkuAI= -----END CERTIFICATE-----Generated at Wed Nov 5 02:20:15 2025 by rpki-client