$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cb1e09ed-4226-3086-aef2-cb7bedb74767.roa File: cb1e09ed-4226-3086-aef2-cb7bedb74767.roa (raw, json) Hash identifier: DqdClk04rw08XtMwd99IWfoMoUJqyeeXOJNM9z6e38c= Subject key identifier: F2:0E:3D:13:D7:70:4F:C7:E1:E7:B7:38:7E:2A:3E:76:2A:26:D2:32 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F80B64B6C0A354F9A8EF80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cb1e09ed-4226-3086-aef2-cb7bedb74767.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 173.59.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:0b:64:b6:c0:a3:54:f9:a8:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=89b88c5b-11d2-441a-bcc4-981cfbc4ff5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:11:a4:b5:ed:3f:a6:c7:0c:5c:0a:6c:f6:68: 5d:61:04:88:3f:07:dd:1c:39:e5:60:b9:25:b3:8f: bf:4e:76:b0:18:47:36:c9:90:65:c6:95:d0:c4:f3: 61:dd:63:34:88:13:26:ef:8f:53:d2:82:86:9a:01: d7:ca:4c:99:1d:83:f6:f4:4f:2e:9c:53:fb:28:60: 2a:c9:42:87:5d:ea:f8:96:2f:3f:13:1a:b4:92:67: 9f:5c:87:f0:b4:6f:03:75:58:68:db:9f:64:b7:be: 4f:b4:52:a6:ce:73:ca:9d:35:d6:ae:5f:f3:92:c5: 5c:03:a2:fe:b7:6d:a2:41:01:d0:7e:38:4a:46:7e: 3d:7e:d9:7d:eb:7f:5c:d1:e2:4a:76:78:11:5a:37: 27:be:6c:4c:a5:67:f3:ce:61:a2:a5:bc:e3:12:2b: e6:7d:27:19:44:6e:84:a9:aa:e5:5a:67:3a:42:38: a0:ef:eb:89:f2:9e:46:fd:49:8c:d6:2d:40:a8:67: 64:7a:13:a0:98:f8:3d:80:e6:4e:13:2f:7c:96:7b: df:69:36:39:f9:e2:d8:37:9a:ae:05:5b:27:7a:2f: e8:bc:3c:24:01:a7:4e:89:ff:4c:b3:5f:69:84:29: 10:b1:e3:92:b3:21:f2:88:0d:af:1a:d3:43:8e:36: d0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:0E:3D:13:D7:70:4F:C7:E1:E7:B7:38:7E:2A:3E:76:2A:26:D2:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cb1e09ed-4226-3086-aef2-cb7bedb74767.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 173.59.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:e2:40:ad:c0:85:ed:8a:58:d4:2d:03:39:41:de:59:a5:83: 97:3f:ee:92:a0:e4:36:ec:62:dc:e8:56:22:1d:26:b7:0d:8a: 6d:0a:fb:6e:b2:f6:e8:96:5e:55:ad:49:3e:6b:7a:d5:59:b6: d9:a1:18:74:ae:04:49:b4:e9:14:26:63:e3:00:3d:01:dd:1f: 6a:6a:21:40:5c:f9:c8:c2:27:93:71:24:0a:70:7d:de:db:bf: a7:8e:f6:e3:de:66:56:03:1d:62:4d:dd:f3:84:d6:ac:9d:0b: 53:79:37:5d:c0:6f:e1:fd:3a:66:3d:1c:a1:50:43:3b:88:5a: 11:eb:11:ad:6c:1e:5d:96:af:fc:06:45:0e:89:03:07:95:1f: 2b:44:29:76:c1:2a:fb:76:b3:df:5f:f5:dc:a8:0e:00:bb:38: 4a:b9:c7:a1:2a:cf:d9:ef:34:6b:c8:b2:92:d9:6d:5c:9d:8b: 18:1a:db:35:75:ba:e6:83:bc:c9:ef:f9:20:ae:3e:73:74:26: f4:da:de:64:a6:b6:b0:67:33:e0:ef:0b:15:b4:5c:60:47:e3: 26:fa:43:3f:1a:0d:45:04:14:72:f7:71:9a:12:bc:a7:87:11: c3:b3:45:b7:e2:e3:99:53:98:f6:53:4a:ea:bf:75:03:55:e6: 80:b0:7c:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy+AtktsCjVPmo74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ODliODhjNWItMTFkMi00NDFhLWJjYzQtOTgxY2ZiYzRmZjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhGkte0/pscMXAps9mhdYQSIPwfdHDnlYLkl s4+/TnawGEc2yZBlxpXQxPNh3WM0iBMm749T0oKGmgHXykyZHYP29E8unFP7KGAq yUKHXer4li8/Exq0kmefXIfwtG8DdVho259kt75PtFKmznPKnTXWrl/zksVcA6L+ t22iQQHQfjhKRn49ftl9639c0eJKdngRWjcnvmxMpWfzzmGipbzjEivmfScZRG6E qarlWmc6Qjig7+uJ8p5G/UmM1i1AqGdkehOgmPg9gOZOEy98lnvfaTY5+eLYN5qu BVsnei/ovDwkAadOif9Ms19phCkQseOSsyHyiA2vGtNDjjbQXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIOPRPXcE/H4ee3OH4qPnYqJtIyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2IxZTA5ZWQtNDIyNi0z MDg2LWFlZjItY2I3YmVkYjc0NzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErTvQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJziQK3Ahe2KWNQtAzlB3lmlg5c/7pKg5DbsYtzoViIdJrcNim0K+26y 9uiWXlWtST5retVZttmhGHSuBEm06RQmY+MAPQHdH2pqIUBc+cjCJ5NxJApwfd7b v6eO9uPeZlYDHWJN3fOE1qydC1N5N13Ab+H9OmY9HKFQQzuIWhHrEa1sHl2Wr/wG RQ6JAweVHytEKXbBKvt2s99f9dyoDgC7OEq5x6Eqz9nvNGvIspLZbVydixga2zV1 uuaDvMnv+SCuPnN0JvTa3mSmtrBnM+DvCxW0XGBH4yb6Qz8aDUUEFHL3cZoSvKeH EcOzRbfi45lTmPZTSuq/dQNV5oCwfPU= -----END CERTIFICATE-----Generated at Wed Nov 5 04:08:15 2025 by rpki-client