$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d854fad1-e8e6-3360-a316-6eaaf181dae3.roa File: d854fad1-e8e6-3360-a316-6eaaf181dae3.roa (raw, json) Hash identifier: u1kHCfnbhoz3J5tunkHz8ER93G/K0jsjeiE3Am3+ihI= Subject key identifier: C5:D7:7D:33:53:A3:CA:E2:1F:52:73:E3:39:85:75:E3:FB:B0:24:2C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B8917809F040F9A54BE257680 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d854fad1-e8e6-3360-a316-6eaaf181dae3.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 0 IP address blocks: 63.122.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:80:9f:04:0f:9a:54:be:25:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=7d7aeeff-db0f-4c8b-a2cf-2c96c78727e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:99:7a:b3:09:a4:37:bf:37:f2:71:0d:ae:e2: 9d:f6:c7:35:e9:1b:65:0e:14:44:08:8d:76:f6:1a: d2:9e:ef:e7:e3:77:52:9a:bf:8d:19:ee:1e:b1:c8: a0:f0:6c:b4:2f:37:6c:44:73:e3:0e:9d:bf:fc:3b: 1a:a5:c6:42:6d:25:c9:61:48:fa:51:6d:46:dd:cb: 54:b4:a3:6b:94:51:e8:91:b9:e5:b8:c6:94:bf:84: 49:dd:d0:38:3b:7c:76:6e:07:d6:2a:2d:e0:06:33: 91:6f:0e:e9:d3:79:79:6d:91:f1:90:3c:45:0c:1b: d2:9d:44:d7:59:87:56:78:41:05:f3:dd:b8:d6:70: c9:93:d0:b7:df:74:30:da:31:57:73:59:98:8a:e8: 93:3e:85:61:0a:db:f1:f4:e6:ca:61:41:fc:79:7c: c3:86:c0:19:99:10:84:c9:ab:f8:cc:ab:3b:55:28: 71:da:7d:24:05:7b:77:f1:03:84:b5:9e:8f:c9:bb: 69:b8:f9:b1:6c:2f:82:09:95:3d:ea:79:88:6d:98: ae:18:b6:4d:2c:d4:a9:bd:c6:c0:17:32:56:cc:e9: 27:09:fc:93:f8:cc:17:e9:20:c8:9c:ed:2e:f5:a3: 89:76:f6:94:2f:29:1f:b5:0e:90:df:bc:e6:99:c7: 41:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D7:7D:33:53:A3:CA:E2:1F:52:73:E3:39:85:75:E3:FB:B0:24:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d854fad1-e8e6-3360-a316-6eaaf181dae3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 63.122.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:de:f7:bf:f9:9c:ab:37:52:a4:43:9a:b4:95:c4:7f:21:35: 3a:84:be:99:7b:55:51:b8:a7:9c:6f:8a:85:10:f6:b3:e4:81: bd:cd:c0:c0:c3:de:f2:25:c7:d6:2f:68:b0:46:5b:66:47:40: b8:9e:78:4e:93:c7:63:b9:b6:89:8c:02:aa:de:47:63:c9:f5: 16:89:a1:43:65:d5:05:f8:79:a7:41:86:a0:bc:f9:2c:7d:96: 1a:3f:64:48:cc:91:ad:02:0d:31:0f:90:08:e1:cd:52:ec:32: 40:0c:84:7a:33:92:90:ab:20:cd:99:77:72:21:5c:74:df:ef: 6d:31:ba:c4:6d:04:af:21:cf:0c:97:99:88:89:70:cd:db:3a: cb:e3:a6:fc:39:48:1a:e7:bd:33:e4:72:83:ee:64:c5:28:0c: a7:26:4f:90:4a:92:ee:12:ea:65:d7:93:5f:b0:6a:d2:d2:78: 1b:3e:15:2e:86:f5:76:6b:8e:0b:e2:2c:01:5b:22:3f:c8:12: de:2d:0a:00:01:78:1b:29:d5:21:1d:ca:40:58:b9:ed:ef:12: 97:c5:4c:a7:5a:db:e8:9b:05:ac:23:f5:6b:ac:fb:16:48:82: f3:b3:6e:45:47:72:6e:83:b2:68:5c:8a:20:c0:17:79:b2:fe: 37:cf:46:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF4CfBA+aVL4ldoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk N2Q3YWVlZmYtZGIwZi00YzhiLWEyY2YtMmM5NmM3ODcyN2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpl6swmkN7838nENruKd9sc16RtlDhRECI12 9hrSnu/n43dSmr+NGe4escig8Gy0LzdsRHPjDp2//DsapcZCbSXJYUj6UW1G3ctU tKNrlFHokbnluMaUv4RJ3dA4O3x2bgfWKi3gBjORbw7p03l5bZHxkDxFDBvSnUTX WYdWeEEF89241nDJk9C333Qw2jFXc1mYiuiTPoVhCtvx9ObKYUH8eXzDhsAZmRCE yav4zKs7VShx2n0kBXt38QOEtZ6PybtpuPmxbC+CCZU96nmIbZiuGLZNLNSpvcbA FzJWzOknCfyT+MwX6SDInO0u9aOJdvaULykftQ6Q37zmmcdBMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXXfTNTo8riH1Jz4zmFdeP7sCQsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDg1NGZhZDEtZThlNi0z MzYwLWEzMTYtNmVhYWYxODFkYWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCP3qMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADve97/5nKs3UqRDmrSVxH8hNTqEvpl7VVG4p5xvioUQ9rPkgb3NwMDD 3vIlx9YvaLBGW2ZHQLieeE6Tx2O5tomMAqreR2PJ9RaJoUNl1QX4eadBhqC8+Sx9 lho/ZEjMka0CDTEPkAjhzVLsMkAMhHozkpCrIM2Zd3IhXHTf720xusRtBK8hzwyX mYiJcM3bOsvjpvw5SBrnvTPkcoPuZMUoDKcmT5BKku4S6mXXk1+watLSeBs+FS6G 9XZrjgviLAFbIj/IEt4tCgABeBsp1SEdykBYue3vEpfFTKda2+ibBawj9Wus+xZI gvOzbkVHcm6DsmhciiDAF3my/jfPRqc= -----END CERTIFICATE-----Generated at Wed Nov 5 00:07:01 2025 by rpki-client