$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c9898adf-ef83-32ef-a5bf-ba88baa29afa.roa File: c9898adf-ef83-32ef-a5bf-ba88baa29afa.roa (raw, json) Hash identifier: 9k50oqJoeG6Ur2hxzmJYFY9GFjgMJCalGeM4p4DpNZA= Subject key identifier: B9:CD:CB:AD:9B:00:4E:5F:6F:66:00:A2:9D:50:5B:A3:27:38:D0:A7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F7BB7690F0F2FFE14E1380 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c9898adf-ef83-32ef-a5bf-ba88baa29afa.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 108.24.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:bb:76:90:f0:f2:ff:e1:4e:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=55cdeea5-d9d2-4131-ab02-4a4567d96a31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:22:a8:e4:64:a3:ad:0d:65:a7:12:96:0a:f2: cb:63:e5:75:d5:b6:fb:c2:97:d0:0c:0a:97:a1:36: 20:53:12:35:bd:c0:01:0c:0e:9a:67:d1:8b:ba:b8: ac:5f:d8:4f:53:72:fa:fa:3b:1f:a6:e6:db:40:50: f3:ef:cb:85:28:ba:29:9e:d7:86:b1:67:d6:a7:55: 5f:cb:03:1a:e3:fe:c8:dd:68:3c:45:85:05:a9:0d: a1:58:df:b4:2d:8e:b4:9e:cd:cf:86:7e:ea:ee:e8: 77:52:b7:7a:4d:70:17:c5:19:9d:e9:6e:32:b3:50: 95:89:6a:0b:1b:0e:03:aa:ad:c7:9a:15:85:7b:83: 38:07:f7:96:34:58:56:a1:84:88:49:2d:c2:4b:fc: b4:bd:8e:95:7e:16:cf:62:97:88:0c:f2:a9:0c:52: 82:af:42:f2:f1:53:8d:17:66:1e:a2:3e:03:42:c2: 5e:65:09:ff:b1:e1:49:1f:f2:a5:7b:92:00:7e:a0: 29:ca:93:83:74:9d:0f:67:07:aa:aa:e1:1a:78:43: fa:08:0b:96:7a:2e:46:13:26:d6:07:c0:69:c3:0d: 2d:37:71:4b:49:e7:25:48:9a:45:88:ec:b1:69:e0: ae:e4:dc:3a:00:15:66:ed:5a:ae:8f:c0:56:74:73: 86:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:CD:CB:AD:9B:00:4E:5F:6F:66:00:A2:9D:50:5B:A3:27:38:D0:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c9898adf-ef83-32ef-a5bf-ba88baa29afa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.24.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:c1:8a:16:b9:96:5e:a6:f7:0e:1a:dd:cb:ae:e4:19:88:c8: d5:c9:20:a2:01:90:9d:5d:44:2f:0a:d6:74:9c:db:9f:f8:dc: c3:48:b3:da:01:6c:23:3b:08:77:b5:9a:12:7b:d8:4a:a2:62: 5d:66:15:e2:ad:99:3a:65:fe:ea:cc:44:2a:5b:18:1b:f8:05: e6:83:11:a1:f4:64:9e:cc:32:79:19:46:e2:76:6a:20:23:43: 71:ca:05:bf:a1:59:e1:6f:1f:01:c6:f3:a2:83:f6:56:0a:b3: bc:65:56:c3:6e:ed:4a:3b:ee:40:c3:90:2b:ab:20:9d:a3:db: f8:27:b2:a4:62:dc:f8:e8:91:dd:40:b8:d3:66:6d:5d:43:52: 7d:46:14:42:30:49:34:46:3f:68:4f:e3:d9:c7:77:1c:82:cf: 50:5d:c8:1e:66:18:51:80:6d:d4:f9:bd:00:3a:e9:0c:f9:08: eb:92:b5:39:e8:f5:37:9a:9f:e3:25:8b:6f:49:64:1b:4e:8d: 31:ac:37:24:12:16:f9:46:98:b9:3d:b8:dc:8c:ec:c9:7f:5b: be:1a:37:cc:53:82:fa:05:5c:25:1f:ed:27:cd:b9:c3:cf:04: c0:81:72:ea:11:d2:f6:3e:15:23:d9:8a:e9:cf:dc:73:8f:c0: e3:90:8a:c1 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuy97t2kPDy/+FOE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NTVjZGVlYTUtZDlkMi00MTMxLWFiMDItNGE0NTY3ZDk2YTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiKo5GSjrQ1lpxKWCvLLY+V11bb7wpfQDAqX oTYgUxI1vcABDA6aZ9GLurisX9hPU3L6+jsfpubbQFDz78uFKLopnteGsWfWp1Vf ywMa4/7I3Wg8RYUFqQ2hWN+0LY60ns3Phn7q7uh3Urd6TXAXxRmd6W4ys1CViWoL Gw4Dqq3HmhWFe4M4B/eWNFhWoYSISS3CS/y0vY6VfhbPYpeIDPKpDFKCr0Ly8VON F2Yeoj4DQsJeZQn/seFJH/Kle5IAfqApypODdJ0PZweqquEaeEP6CAuWei5GEybW B8Bpww0tN3FLSeclSJpFiOyxaeCu5Nw6ABVm7Vquj8BWdHOGkwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLnNy62bAE5fb2YAop1QW6MnONCnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzk4OThhZGYtZWY4My0z MmVmLWE1YmYtYmE4OGJhYTI5YWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAbBgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAPMGKFrmWXqb3Dhrdy67kGYjI1ckgogGQnV1ELwrWdJzbn/jcw0iz2gFs IzsId7WaEnvYSqJiXWYV4q2ZOmX+6sxEKlsYG/gF5oMRofRknswyeRlG4nZqICND ccoFv6FZ4W8fAcbzooP2VgqzvGVWw27tSjvuQMOQK6sgnaPb+CeypGLc+OiR3UC4 02ZtXUNSfUYUQjBJNEY/aE/j2cd3HILPUF3IHmYYUYBt1Pm9ADrpDPkI65K1Oej1 N5qf4yWLb0lkG06NMaw3JBIW+UaYuT243IzsyX9bvho3zFOC+gVcJR/tJ825w88E wIFy6hHS9j4VI9mK6c/cc4/A45CKwQ== -----END CERTIFICATE-----Generated at Wed Nov 5 20:55:43 2025 by rpki-client