$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d63a9b60-7ef2-3367-b6ff-3814b86b1ba5.roa File: d63a9b60-7ef2-3367-b6ff-3814b86b1ba5.roa (raw, json) Hash identifier: y1KqMybTtk/3kCJ1rbGzP4xCM1FyNcFIWB+jK8FfxNY= Subject key identifier: 0A:66:8F:75:4F:A1:E3:CD:0F:E7:54:49:47:05:11:46:ED:BE:42:C8 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F7DA88440E04569CABB080 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d63a9b60-7ef2-3367-b6ff-3814b86b1ba5.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 71.164.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:da:88:44:0e:04:56:9c:ab:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=5a4936b9-d8d3-4f79-af1b-ffe2c529c5cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:66:c2:28:a3:c1:87:ae:95:8a:ac:a3:5a:0f: 99:c1:11:b8:38:2f:8e:0a:1d:37:15:8c:32:86:7c: b1:a2:45:03:01:17:6d:c6:0c:5a:7e:4a:c6:c7:3a: f2:b2:d1:be:d1:98:d6:ec:f7:3b:14:e4:a3:67:ec: 1a:c5:70:c5:aa:3f:a8:0e:3f:36:c4:46:f5:59:9c: 42:b6:33:a6:ab:6b:fd:c6:7c:57:f7:80:ef:7a:96: 9e:df:80:cf:db:b7:c9:e7:e0:c7:4d:0e:3d:3b:5e: b6:11:36:3d:8c:89:2e:e4:f8:e9:36:cd:c3:24:99: 11:84:61:b3:36:d2:32:e0:7f:14:0f:6d:73:fe:b0: 0c:80:72:53:ab:6f:26:21:13:ef:0c:65:9d:72:29: 16:53:9d:0a:c7:ae:05:a7:eb:9f:92:cf:c8:5b:3a: 84:44:5a:11:8e:92:db:8d:bb:d6:17:71:00:21:15: 92:eb:dc:ea:50:d8:25:79:9c:33:e4:e6:1e:78:f5: d5:61:fc:c0:e6:0b:5f:f0:49:51:f1:29:33:45:a6: ad:da:56:8b:b6:43:24:44:7b:0b:d0:c4:4b:0b:12: 5f:b5:dd:f1:0a:26:a0:36:2c:fa:df:fc:8a:b0:d2: a8:09:f5:62:18:f0:96:73:ad:44:53:fb:72:9a:05: 7a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:66:8F:75:4F:A1:E3:CD:0F:E7:54:49:47:05:11:46:ED:BE:42:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d63a9b60-7ef2-3367-b6ff-3814b86b1ba5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.164.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:c7:34:a3:c1:e3:08:df:ab:41:6d:ec:da:29:37:67:d5:0f: 3c:ad:b1:8f:1d:8b:8e:76:a6:8d:ab:b1:8e:09:78:ad:d4:e9: 1d:77:cc:e3:e2:fb:c0:92:c9:3f:4b:40:62:9b:9a:98:55:ab: fc:f7:59:fe:df:c2:7a:65:74:44:15:92:b7:fb:29:cf:05:e1: 29:7a:54:fe:4a:ec:d4:53:7a:9f:5e:ef:bf:1d:a6:36:9c:64: f1:a1:4a:d5:e4:2b:f0:8e:bb:a5:db:b2:a3:25:ab:f1:c3:d6: 0c:3d:17:bc:c5:07:d7:c5:7f:1e:37:9b:61:a7:80:ec:10:35: 17:a1:07:ec:37:73:8f:38:cd:6e:17:0f:e9:10:24:ab:d6:12: 95:c2:dd:00:3f:ec:65:7f:20:3a:4b:a3:2b:97:28:11:73:38: b3:c3:37:17:7b:b6:bb:de:a8:ef:a1:f2:c5:bf:2b:e2:f8:82: 36:b4:22:fc:5e:a6:31:37:e3:de:ac:7e:4d:99:d4:9a:3e:bf: cc:6f:45:db:fe:ab:34:bd:d9:9e:e3:e1:a8:d9:7f:03:47:4e: 18:5b:92:4f:1c:06:e8:4f:90:f3:cd:d9:f1:0f:ef:08:34:77: 7e:6d:2f:22:23:6e:a4:2f:39:99:b1:6a:b1:3e:9f:34:e4:cd: 69:39:8f:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy99qIRA4EVpyrsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NWE0OTM2YjktZDhkMy00Zjc5LWFmMWItZmZlMmM1MjljNWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGbCKKPBh66ViqyjWg+ZwRG4OC+OCh03FYwy hnyxokUDARdtxgxafkrGxzrystG+0ZjW7Pc7FOSjZ+waxXDFqj+oDj82xEb1WZxC tjOmq2v9xnxX94Dvepae34DP27fJ5+DHTQ49O162ETY9jIku5PjpNs3DJJkRhGGz NtIy4H8UD21z/rAMgHJTq28mIRPvDGWdcikWU50Kx64Fp+ufks/IWzqERFoRjpLb jbvWF3EAIRWS69zqUNgleZwz5OYeePXVYfzA5gtf8ElR8SkzRaat2laLtkMkRHsL 0MRLCxJftd3xCiagNiz63/yKsNKoCfViGPCWc61EU/tymgV6XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApmj3VPoePND+dUSUcFEUbtvkLIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDYzYTliNjAtN2VmMi0z MzY3LWI2ZmYtMzgxNGI4NmIxYmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGR6RAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3HNKPB4wjfq0Ft7NopN2fVDzytsY8di452po2rsY4JeK3U6R13zOPi +8CSyT9LQGKbmphVq/z3Wf7fwnpldEQVkrf7Kc8F4Sl6VP5K7NRTep9e778dpjac ZPGhStXkK/COu6XbsqMlq/HD1gw9F7zFB9fFfx43m2GngOwQNRehB+w3c484zW4X D+kQJKvWEpXC3QA/7GV/IDpLoyuXKBFzOLPDNxd7trveqO+h8sW/K+L4gja0Ivxe pjE3496sfk2Z1Jo+v8xvRdv+qzS92Z7j4ajZfwNHThhbkk8cBuhPkPPN2fEP7wg0 d35tLyIjbqQvOZmxarE+nzTkzWk5j3U= -----END CERTIFICATE-----Generated at Wed Nov 5 11:15:33 2025 by rpki-client