$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bdce1d14-a088-393f-b99d-5d7ec72d6ce9.roa File: bdce1d14-a088-393f-b99d-5d7ec72d6ce9.roa (raw, json) Hash identifier: obdKfh9f8jRLQ1nC2njsYcXyhTIiFSAklT8XupQuLI0= Subject key identifier: 60:62:9B:D6:39:28:14:10:97:D3:E5:51:D4:78:70:C8:69:1D:CC:D2 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F80BA87B75BF754405D480 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bdce1d14-a088-393f-b99d-5d7ec72d6ce9.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 108.4.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:0b:a8:7b:75:bf:75:44:05:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=782995c0-20e8-4289-9e12-80eb1a9f0f5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ca:55:45:ac:9e:75:a5:ba:35:a1:42:3d:7b: e6:96:49:cb:bc:db:32:92:73:c6:5b:dc:54:62:13: 42:21:be:6c:f4:70:5c:ba:28:55:40:80:5d:6a:e4: 37:7a:04:d1:01:b9:93:3a:7f:03:9c:68:0d:95:97: b2:cc:14:aa:04:b5:77:16:04:2a:1e:ff:f3:4a:ad: c6:d2:0a:50:11:45:b1:1b:c8:48:56:c3:6b:1e:c1: 91:30:10:dc:32:85:55:28:2e:ad:cf:90:fd:aa:75: 07:22:4c:b9:3f:9c:06:36:53:7f:3b:d1:e4:64:fe: 04:67:83:15:86:be:fd:1c:a6:fc:5e:09:c4:2a:3a: 94:7a:56:6f:f8:05:4a:a9:24:28:9f:40:c1:0b:c4: bf:4f:75:bc:57:ce:5f:34:ba:9b:ac:ed:ee:c4:0f: f0:01:24:3f:80:9c:2a:68:9c:6f:e1:59:c3:73:cd: dd:1c:a2:ce:c7:61:1f:c9:39:5a:35:c9:c9:30:26: 99:34:1c:6d:88:6f:55:71:da:bd:6b:62:6c:1e:c5: ed:54:24:fe:be:3a:c3:d0:a4:f2:37:21:dc:6d:44: 2c:5f:06:51:c0:c9:4e:f2:31:6a:01:74:19:a9:02: 49:e5:f3:e2:0c:2d:bc:a4:51:bb:40:c4:4f:5d:11: 3e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:62:9B:D6:39:28:14:10:97:D3:E5:51:D4:78:70:C8:69:1D:CC:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bdce1d14-a088-393f-b99d-5d7ec72d6ce9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.4.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:5c:70:b0:99:bb:d7:09:4e:f3:d9:5d:2a:69:49:c2:fb:39: bd:06:09:f9:a1:08:1d:57:73:97:5d:48:ba:db:1f:a9:b1:fd: 81:cd:af:5b:a4:51:9d:23:28:12:4d:df:1f:01:59:3d:af:1b: 8b:b8:a7:e0:57:61:9c:51:3b:79:fe:bb:d4:84:f9:45:70:04: 7a:1b:f9:ef:c4:88:93:75:16:9f:dd:99:58:ad:38:ec:c2:10: 6c:19:d8:7e:06:0a:53:01:4d:e2:46:14:04:d2:82:9f:20:5e: 7f:b8:2f:6d:16:4f:90:8c:22:e6:90:32:bd:53:3c:28:a2:36: 87:e9:90:72:e4:ca:c8:5a:85:2d:c3:ca:76:0b:6a:98:16:0b: 9d:9d:65:23:2a:ec:91:1e:d1:8e:54:08:6c:a1:84:72:76:f6: 6d:93:67:16:d6:44:03:e1:36:eb:14:ea:d8:03:c2:ed:78:63: ca:b4:8f:7f:9e:35:7d:72:5e:5c:e4:3b:21:b0:24:03:51:bd: d7:bd:29:f4:c9:90:af:dc:5f:14:9c:19:03:ae:df:8d:3b:1b: ae:0e:eb:13:ed:2b:ce:e9:d6:5d:cc:97:b2:96:b5:b6:eb:ea: 5b:b5:ce:4a:a7:0c:54:ae:c2:fd:4d:e1:d8:92:82:77:ab:c9: be:6f:a9:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy+Auoe3W/dUQF1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NzgyOTk1YzAtMjBlOC00Mjg5LTllMTItODBlYjFhOWYwZjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMpVRayedaW6NaFCPXvmlknLvNsyknPGW9xU YhNCIb5s9HBcuihVQIBdauQ3egTRAbmTOn8DnGgNlZeyzBSqBLV3FgQqHv/zSq3G 0gpQEUWxG8hIVsNrHsGRMBDcMoVVKC6tz5D9qnUHIky5P5wGNlN/O9HkZP4EZ4MV hr79HKb8XgnEKjqUelZv+AVKqSQon0DBC8S/T3W8V85fNLqbrO3uxA/wASQ/gJwq aJxv4VnDc83dHKLOx2EfyTlaNcnJMCaZNBxtiG9Vcdq9a2JsHsXtVCT+vjrD0KTy NyHcbUQsXwZRwMlO8jFqAXQZqQJJ5fPiDC28pFG7QMRPXRE+OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBim9Y5KBQQl9PlUdR4cMhpHczSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmRjZTFkMTQtYTA4OC0z OTNmLWI5OWQtNWQ3ZWM3MmQ2Y2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFbASAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALhccLCZu9cJTvPZXSppScL7Ob0GCfmhCB1Xc5ddSLrbH6mx/YHNr1uk UZ0jKBJN3x8BWT2vG4u4p+BXYZxRO3n+u9SE+UVwBHob+e/EiJN1Fp/dmVitOOzC EGwZ2H4GClMBTeJGFATSgp8gXn+4L20WT5CMIuaQMr1TPCiiNofpkHLkyshahS3D ynYLapgWC52dZSMq7JEe0Y5UCGyhhHJ29m2TZxbWRAPhNusU6tgDwu14Y8q0j3+e NX1yXlzkOyGwJANRvde9KfTJkK/cXxScGQOu3407G64O6xPtK87p1l3Ml7KWtbbr 6lu1zkqnDFSuwv1N4diSgneryb5vqW4= -----END CERTIFICATE-----Generated at Wed Nov 5 02:19:28 2025 by rpki-client