$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c452f704-2d97-3f52-abe0-4fe2a9a2ad77.roa File: c452f704-2d97-3f52-abe0-4fe2a9a2ad77.roa (raw, json) Hash identifier: 8iOIdCJxK36F03Y7un81mjqdJ5FvnAlOWf3sXDJfg7k= Subject key identifier: BF:A5:F9:63:58:D0:7D:6C:86:D2:98:84:08:E9:C6:AA:19:59:E7:29 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B6631EA40BFC1F93B96EDB900 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c452f704-2d97-3f52-abe0-4fe2a9a2ad77.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 6167 IP address blocks: 97.216.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:31:ea:40:bf:c1:f9:3b:96:ed:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=81c10c1d-de00-424f-86d7-47ec8d0c74cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f7:99:04:78:5f:66:9a:8a:97:b7:11:f7:05: cb:88:6d:ac:23:b9:5b:30:8c:d4:59:8c:50:b0:84: 25:d1:53:a8:e5:70:2e:06:c0:71:e4:8a:e7:9b:51: 02:dc:4b:a6:7d:44:ce:b8:33:af:bd:51:75:1c:82: e2:67:2b:7c:44:75:dd:de:a6:36:e6:0a:ce:5f:91: 69:c0:27:72:a5:6c:fb:f9:7d:c4:31:31:be:3d:ef: 94:79:ac:23:27:3b:a6:90:e2:46:0e:9c:36:6a:4a: 87:a0:b3:8e:e9:27:85:60:c9:88:5e:d3:f6:10:b4: 54:6b:bb:52:a4:60:8b:e5:0c:9b:dc:d7:ac:64:1f: d6:51:68:c0:66:b3:4d:be:b9:7e:c9:5b:ae:d7:b9: 79:2a:4c:a5:09:85:8a:04:ad:26:86:58:68:8c:9b: fa:29:a3:c5:2c:0a:81:46:da:06:d2:08:89:08:35: 98:75:76:23:dc:06:bd:34:91:2c:03:d2:66:cd:bb: 83:b5:8a:27:0c:bb:de:7c:e7:16:71:28:d4:54:3e: c5:71:18:c5:2d:13:32:2e:9d:37:16:b7:37:51:3a: 89:c1:76:96:5c:f8:09:16:0f:ec:cf:7b:cc:1a:76: 44:51:f9:7f:1c:d8:d4:3e:cb:86:b4:4d:74:7c:58: 8f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A5:F9:63:58:D0:7D:6C:86:D2:98:84:08:E9:C6:AA:19:59:E7:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c452f704-2d97-3f52-abe0-4fe2a9a2ad77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 97.216.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:50:18:13:67:3a:8e:0b:b0:19:90:c3:33:64:9b:1e:be:77: 36:c3:4e:ca:cb:12:bf:c2:42:00:cf:86:78:21:44:65:7f:90: 21:e8:26:22:b2:e2:ad:c2:01:3b:fd:68:ba:7f:1e:fd:1c:04: 49:2e:7c:c8:f1:f0:c7:8a:34:dc:47:53:97:08:90:c5:fd:5e: 4b:7d:f5:77:24:ca:be:8b:12:9c:1d:c8:5f:29:b7:37:36:5e: 1e:cb:f3:91:82:eb:86:9e:2d:e9:2e:31:c2:17:4d:a9:38:fe: 41:cc:19:d0:6e:4d:33:90:72:a1:94:c4:5e:8b:bd:ce:d4:65: f1:26:21:a2:12:21:da:9c:e3:30:76:b6:99:06:4a:93:1e:8b: 9a:7d:d3:bb:ba:39:50:d2:6a:91:81:5c:59:e5:9b:bc:0a:8a: aa:a1:75:6c:ab:bc:2b:74:a8:d5:38:56:c1:23:74:96:63:1a: 9d:17:99:e0:99:16:33:e1:9d:53:3c:a4:5a:cc:82:53:7c:23: 2e:ca:47:07:a5:46:fa:0b:9f:77:0a:da:28:fa:1c:ff:a4:b8: cb:72:74:de:f8:9b:ae:cf:7d:0e:9a:96:55:b1:9c:d2:f5:84: 16:f4:04:74:26:ac:13:e4:b9:fe:e7:2b:e2:1c:9e:cc:51:2e: 9f:cd:b1:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMepAv8H5O5btuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk ODFjMTBjMWQtZGUwMC00MjRmLTg2ZDctNDdlYzhkMGM3NGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfeZBHhfZpqKl7cR9wXLiG2sI7lbMIzUWYxQ sIQl0VOo5XAuBsBx5Irnm1EC3EumfUTOuDOvvVF1HILiZyt8RHXd3qY25grOX5Fp wCdypWz7+X3EMTG+Pe+UeawjJzumkOJGDpw2akqHoLOO6SeFYMmIXtP2ELRUa7tS pGCL5Qyb3NesZB/WUWjAZrNNvrl+yVuu17l5KkylCYWKBK0mhlhojJv6KaPFLAqB RtoG0giJCDWYdXYj3Aa9NJEsA9JmzbuDtYonDLvefOcWcSjUVD7FcRjFLRMyLp03 Frc3UTqJwXaWXPgJFg/sz3vMGnZEUfl/HNjUPsuGtE10fFiP8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+l+WNY0H1shtKYhAjpxqoZWecpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzQ1MmY3MDQtMmQ5Ny0z ZjUyLWFiZTAtNGZlMmE5YTJhZDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYdgwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtQGBNnOo4LsBmQwzNkmx6+dzbDTsrLEr/CQgDPhnghRGV/kCHoJiKy 4q3CATv9aLp/Hv0cBEkufMjx8MeKNNxHU5cIkMX9Xkt99Xckyr6LEpwdyF8ptzc2 Xh7L85GC64aeLekuMcIXTak4/kHMGdBuTTOQcqGUxF6Lvc7UZfEmIaISIdqc4zB2 tpkGSpMei5p907u6OVDSapGBXFnlm7wKiqqhdWyrvCt0qNU4VsEjdJZjGp0XmeCZ FjPhnVM8pFrMglN8Iy7KRwelRvoLn3cK2ij6HP+kuMtydN74m67PfQ6allWxnNL1 hBb0BHQmrBPkuf7nK+IcnsxRLp/NsWQ= -----END CERTIFICATE-----Generated at Wed Nov 5 16:18:59 2025 by rpki-client