$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2a46eab-4ce2-35a1-add7-4fa43d10fde0.roa File: d2a46eab-4ce2-35a1-add7-4fa43d10fde0.roa (raw, json) Hash identifier: iH8U767OrDzumBZZuzfaXu96KWgSjRshXSz6xWl8P0I= Subject key identifier: E9:06:03:4B:04:70:60:F5:AB:F5:D5:FF:7A:F1:F9:02:65:FA:28:AD Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BA39D311D0403847B740F2A00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2a46eab-4ce2-35a1-add7-4fa43d10fde0.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 701 IP address blocks: 64.0.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:31:1d:04:03:84:7b:74:0f:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=2a5272e2-9072-4b77-ada6-02a991b03586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:43:f9:09:8a:73:d1:31:4c:6d:b6:32:37:1b: 88:a2:71:ce:77:9b:6e:15:b0:65:e6:0f:25:a0:5d: f1:74:79:8e:71:9d:8a:8e:e2:7c:86:45:77:b2:b0: 4c:39:37:25:3a:1e:9e:e0:15:3e:59:d3:88:72:da: 49:78:c2:35:4c:42:55:c1:ca:6b:f1:b6:fc:0d:e2: 24:ec:a0:df:23:6c:28:ee:57:f1:f0:68:2e:41:3d: f1:5a:4e:b0:1a:0b:b5:4f:ec:e2:fc:98:57:69:d0: ee:7c:5a:c6:f1:fe:02:9e:04:01:dc:08:7c:9c:57: 45:d5:2f:7a:bc:7f:22:a6:4c:46:94:d5:fe:b0:ee: 2d:67:2c:58:8b:fa:be:f3:40:2c:2d:a2:97:30:a3: a7:9d:a0:0f:fd:b7:21:52:12:d8:ff:04:36:53:b4: ee:e5:b2:c1:e5:d8:1c:c0:df:0d:22:65:0e:27:3e: 7f:1c:10:4c:c5:d3:68:9b:81:88:06:81:c7:72:7f: de:7a:a4:25:88:46:8a:c7:11:d4:b5:a8:92:a7:7e: f5:c7:c1:43:d6:20:1c:98:18:f0:60:67:78:2a:59: 4a:48:4d:b7:a7:f5:75:9f:94:0e:f7:da:b6:b1:cb: d6:dd:be:37:e6:00:f2:11:01:a5:fa:bb:26:80:25: ec:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:06:03:4B:04:70:60:F5:AB:F5:D5:FF:7A:F1:F9:02:65:FA:28:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2a46eab-4ce2-35a1-add7-4fa43d10fde0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 64.0.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:b1:04:de:79:bb:ca:9d:91:73:80:d5:c0:8f:71:f6:b6:1d: 45:ef:ad:18:6a:86:e6:9c:db:37:f9:0e:f0:84:ae:91:c5:c2: 80:fe:ca:e0:4f:df:31:c1:eb:58:95:80:8f:6d:83:8d:96:e3: 63:47:f3:b4:a1:e3:0d:f7:36:51:80:20:8e:82:dd:d6:76:31: d7:b0:64:7b:e2:3b:75:a2:55:bb:3d:3c:11:6a:b8:1d:c9:dd: 91:69:5c:0a:0a:d5:af:44:55:5f:44:e4:02:c8:14:06:af:e5: 32:b8:30:84:85:cb:80:d8:93:3c:8e:92:5b:b8:cd:d3:c9:12: b1:8d:21:ec:35:a6:0c:24:cf:2e:87:e9:c0:2f:d2:ff:33:9e: 8d:60:91:ab:16:83:e7:8d:86:ed:f6:ac:84:8e:04:da:54:d9: c3:d1:56:2b:77:ab:ee:25:ba:71:db:80:33:bb:9e:8f:c9:6e: 39:b8:d2:40:86:74:ad:bd:94:54:d3:db:26:ef:9c:ef:f6:e1: 4a:a9:d6:a0:78:5d:54:e4:af:dd:63:e9:52:ab:d5:f2:f7:8f: df:13:cc:21:4e:77:59:5a:6b:e9:76:cb:08:f0:ba:86:4c:a1: 38:3a:0d:9b:db:94:7a:8c:4f:59:d2:83:ff:0c:3c:c0:10:80: cd:68:d0:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTEdBAOEe3QPKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MmE1MjcyZTItOTA3Mi00Yjc3LWFkYTYtMDJhOTkxYjAzNTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0P5CYpz0TFMbbYyNxuIonHOd5tuFbBl5g8l oF3xdHmOcZ2KjuJ8hkV3srBMOTclOh6e4BU+WdOIctpJeMI1TEJVwcpr8bb8DeIk 7KDfI2wo7lfx8GguQT3xWk6wGgu1T+zi/JhXadDufFrG8f4CngQB3Ah8nFdF1S96 vH8ipkxGlNX+sO4tZyxYi/q+80AsLaKXMKOnnaAP/bchUhLY/wQ2U7Tu5bLB5dgc wN8NImUOJz5/HBBMxdNom4GIBoHHcn/eeqQliEaKxxHUtaiSp371x8FD1iAcmBjw YGd4KllKSE23p/V1n5QO99q2scvW3b435gDyEQGl+rsmgCXsMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkGA0sEcGD1q/XV/3rx+QJl+iitMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDJhNDZlYWItNGNlMi0z NWExLWFkZDctNGZhNDNkMTBmZGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQADMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmxBN55u8qdkXOA1cCPcfa2HUXvrRhqhuac2zf5DvCErpHFwoD+yuBP 3zHB61iVgI9tg42W42NH87Sh4w33NlGAII6C3dZ2MdewZHviO3WiVbs9PBFquB3J 3ZFpXAoK1a9EVV9E5ALIFAav5TK4MISFy4DYkzyOklu4zdPJErGNIew1pgwkzy6H 6cAv0v8zno1gkasWg+eNhu32rISOBNpU2cPRVit3q+4lunHbgDO7no/Jbjm40kCG dK29lFTT2ybvnO/24Uqp1qB4XVTkr91j6VKr1fL3j98TzCFOd1laa+l2ywjwuoZM oTg6DZvblHqMT1nSg/8MPMAQgM1o0OE= -----END CERTIFICATE-----Generated at Wed Nov 5 06:24:10 2025 by rpki-client