$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c0c89c9f-bd3f-3145-818a-c7366acbfc23.roa File: c0c89c9f-bd3f-3145-818a-c7366acbfc23.roa (raw, json) Hash identifier: c4MSwb3bj/UFFwOEz+83ya3kcoAWZDpfpOA1tw4u02U= Subject key identifier: 62:D2:98:CA:39:DA:6C:2E:B6:FB:D7:DE:F6:9D:9E:AF:2E:E8:08:5B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F7E2D2113BC391DE22EA80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c0c89c9f-bd3f-3145-818a-c7366acbfc23.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 108.41.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:e2:d2:11:3b:c3:91:de:22:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=49003fba-875b-42af-8740-e502a7a8bdf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:20:ff:e6:3f:d5:91:51:80:f3:19:68:c6:ce: a4:b2:b2:fe:c5:b3:2a:fd:57:1f:6f:c4:ef:c6:f3: 9e:86:17:18:4c:e3:19:8f:12:a8:54:1a:b5:9b:fa: f6:55:72:e7:6f:08:bf:f2:58:7e:0b:0d:cc:dc:fd: 8e:13:f0:eb:39:a1:71:31:13:fe:d1:22:b0:64:39: 7d:f7:6a:f9:a4:5e:fe:76:97:17:7c:08:b9:a3:20: 02:61:f1:cf:28:76:96:71:bf:f0:df:f6:de:1f:a4: 30:d1:cf:e3:57:61:f8:9f:ec:a7:98:50:07:24:1e: fd:3a:29:d0:aa:19:24:ec:41:f8:37:1b:18:3f:9b: 23:33:16:f4:df:56:55:49:b5:89:51:e2:d3:f0:6b: c1:7c:fb:f9:cc:f4:26:4a:b3:aa:7f:05:2b:36:a5: 4a:c7:1f:81:6d:aa:6b:cc:44:4c:db:78:f2:a6:e3: f5:9e:ce:86:09:b6:bc:c4:4b:62:c9:84:01:2a:67: fc:99:d3:cf:0b:71:b2:a6:5c:87:ee:df:e2:e9:b4: c1:7a:c3:ee:6d:9d:4d:4a:8d:d6:18:4d:ae:5c:f8: ae:05:d8:8e:f6:ca:b6:cb:17:7a:a0:c7:aa:ae:43: 75:f7:fb:88:6f:b1:44:64:6a:b9:79:96:2c:78:77: 7d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D2:98:CA:39:DA:6C:2E:B6:FB:D7:DE:F6:9D:9E:AF:2E:E8:08:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c0c89c9f-bd3f-3145-818a-c7366acbfc23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.41.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:6e:55:16:c0:b0:e5:a4:69:91:83:74:b5:b5:a4:37:a4:c2: e8:01:10:c6:5f:16:a4:1f:72:68:50:6c:0d:e5:4e:ba:45:9d: fc:92:48:8d:c9:64:af:e7:1b:ec:eb:9d:df:36:d8:7b:7e:db: 85:5e:5d:00:c0:ed:50:f4:c3:1d:b8:ea:b6:10:8e:b0:fb:0e: 4d:5f:ef:b2:a1:48:81:b6:6b:ca:8a:8f:f4:93:dc:27:6f:26: 93:06:91:d9:50:3e:5e:f2:c5:9d:41:9f:05:11:5a:e6:26:a6: 8f:ef:63:ac:d2:a6:b9:8f:83:d6:39:fd:a6:0f:98:9d:3f:89: 54:22:fb:fa:b7:09:9a:35:1b:1b:d1:8c:de:58:10:f4:f9:d9: 6e:cc:e1:13:81:b6:53:2e:0c:9a:d5:8b:ad:53:0c:d7:d2:fa: 93:b1:d8:68:0c:64:b2:16:0f:f8:4d:76:a5:ce:8f:7a:88:43: 43:31:ec:c3:94:7a:0d:47:3d:80:e2:f6:8a:ea:0f:70:c1:5e: 4e:3e:ce:54:31:8d:37:17:c2:c6:ad:52:03:04:f7:b0:de:77: 4a:ef:9b:7b:00:cc:8f:f8:f7:b2:9a:96:a0:16:bd:0e:48:15: df:99:65:7d:df:31:da:e7:10:a8:42:45:4b:9e:84:39:04:b9: 4c:24:60:a4 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuy9+LSETvDkd4i6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NDkwMDNmYmEtODc1Yi00MmFmLTg3NDAtZTUwMmE3YThiZGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyD/5j/VkVGA8xloxs6ksrL+xbMq/Vcfb8Tv xvOehhcYTOMZjxKoVBq1m/r2VXLnbwi/8lh+Cw3M3P2OE/DrOaFxMRP+0SKwZDl9 92r5pF7+dpcXfAi5oyACYfHPKHaWcb/w3/beH6Qw0c/jV2H4n+ynmFAHJB79OinQ qhkk7EH4NxsYP5sjMxb031ZVSbWJUeLT8GvBfPv5zPQmSrOqfwUrNqVKxx+Bbapr zERM23jypuP1ns6GCba8xEtiyYQBKmf8mdPPC3GyplyH7t/i6bTBesPubZ1NSo3W GE2uXPiuBdiO9sq2yxd6oMeqrkN19/uIb7FEZGq5eZYseHd98wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGLSmMo52mwutvvX3vadnq8u6AhbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzBjODljOWYtYmQzZi0z MTQ1LTgxOGEtYzczNjZhY2JmYzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAbCkwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAWG5VFsCw5aRpkYN0tbWkN6TC6AEQxl8WpB9yaFBsDeVOukWd/JJIjclk r+cb7Oud3zbYe37bhV5dAMDtUPTDHbjqthCOsPsOTV/vsqFIgbZryoqP9JPcJ28m kwaR2VA+XvLFnUGfBRFa5iamj+9jrNKmuY+D1jn9pg+YnT+JVCL7+rcJmjUbG9GM 3lgQ9PnZbszhE4G2Uy4MmtWLrVMM19L6k7HYaAxkshYP+E12pc6PeohDQzHsw5R6 DUc9gOL2iuoPcMFeTj7OVDGNNxfCxq1SAwT3sN53Su+bewDMj/j3spqWoBa9DkgV 35llfd8x2ucQqEJFS56EOQS5TCRgpA== -----END CERTIFICATE-----Generated at Wed Nov 5 02:20:56 2025 by rpki-client