$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d881d009-cbf8-3a7d-aacb-3abbc815e32e.roa File: d881d009-cbf8-3a7d-aacb-3abbc815e32e.roa (raw, json) Hash identifier: TzSoZ1PfhCW/Vq/e34B1PtltL2UN/uYJvjOJEGlCnMI= Subject key identifier: 75:24:C6:ED:00:B6:52:64:BE:EE:C8:B7:9F:9C:1C:2B:1B:1A:D5:81 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BABFD24D57C1F727D731B7B80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d881d009-cbf8-3a7d-aacb-3abbc815e32e.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 701 IP address blocks: 71.255.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:24:d5:7c:1f:72:7d:73:1b:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=f2b7e586-7a64-49e6-b4c7-98123256210e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4d:ef:1d:ae:0f:1e:92:42:6c:1b:a1:59:63: b8:a7:ac:ac:cb:3a:d2:ad:dd:e5:92:c4:f8:e2:d0: 28:0d:b2:97:f7:16:f8:4e:04:8a:d4:64:a2:e3:b0: 6d:b0:f1:76:7c:b5:cd:20:2b:86:92:b4:b6:ef:cc: e6:b2:58:c1:ea:e8:05:4a:c2:83:cf:23:62:d6:fb: 92:14:76:e4:64:3f:c7:e3:67:ae:a0:7b:b4:9b:ba: 7e:72:09:eb:88:61:bc:b3:1a:27:a7:13:45:bb:42: b6:8f:eb:33:4b:44:07:4f:d8:c1:54:b4:77:d6:3a: 87:77:d8:77:e1:e8:9b:91:0d:84:3d:59:ff:50:7d: e6:08:0e:fb:47:dc:e3:52:4c:42:28:6c:94:c2:85: 18:33:bd:44:25:9b:20:6f:a2:1b:49:c8:f0:d4:31: cb:5c:15:51:ff:ec:5c:fe:aa:76:2b:3b:6c:f3:ab: 6b:31:6d:d6:fe:fe:ad:1a:e1:17:1f:a9:c8:e2:93: ff:6f:ff:2d:d9:2a:51:08:e4:aa:f8:cb:a9:7f:15: 74:db:5c:55:3d:7c:7c:6e:a8:a9:11:24:49:6b:f4: 45:a8:07:e8:c3:9b:b0:67:61:bf:78:2b:51:4c:8f: 69:9b:5b:13:b0:50:4b:ce:ca:5c:55:b8:f4:df:eb: ec:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:24:C6:ED:00:B6:52:64:BE:EE:C8:B7:9F:9C:1C:2B:1B:1A:D5:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d881d009-cbf8-3a7d-aacb-3abbc815e32e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.255.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:dd:84:b8:21:e4:0f:4e:3a:cf:70:78:fe:9f:a9:d7:73:f5: b3:6e:0d:07:d8:e3:8b:72:78:2c:78:3e:6b:d7:a5:96:4e:d5: ad:2c:01:5b:d3:c6:d8:f8:a1:1b:9e:d2:c5:30:7f:2d:23:c0: ec:08:bc:5b:76:16:be:54:8e:32:4a:ab:85:88:b4:72:a6:86: 20:dd:d0:2e:31:ba:7a:11:47:f3:7d:ac:5b:57:92:d5:c1:39: 31:8b:5d:e4:bd:c9:98:8f:7c:f6:4e:26:43:fd:25:77:38:7c: 34:20:c9:28:3a:68:27:32:1e:47:1a:e9:bf:84:aa:b9:c2:d4: 2e:e7:bd:aa:f9:4f:c9:61:4c:69:4a:ad:89:8c:96:40:9e:5e: 8b:e0:77:22:c9:29:f5:5f:32:5e:1c:50:c9:35:a6:b5:0a:43: 6f:9e:c4:1d:2c:f0:f7:b7:15:4e:3c:1d:b8:d6:ce:a6:65:cb: db:d4:b1:32:dd:6f:4e:82:76:c7:1b:01:cc:d2:9d:48:e1:d9: b0:49:9c:c1:e7:61:da:1c:7d:e3:10:12:89:ca:2e:ae:50:5e: 26:71:14:67:2c:2c:39:1e:44:e5:05:59:b0:c6:18:ca:40:d3: eb:7a:3d:be:31:4f:f6:40:72:ae:99:ba:a4:7f:e1:bb:c8:17: bb:4e:1f:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/STVfB9yfXMbe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk ZjJiN2U1ODYtN2E2NC00OWU2LWI0YzctOTgxMjMyNTYyMTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU3vHa4PHpJCbBuhWWO4p6ysyzrSrd3lksT4 4tAoDbKX9xb4TgSK1GSi47BtsPF2fLXNICuGkrS278zmsljB6ugFSsKDzyNi1vuS FHbkZD/H42euoHu0m7p+cgnriGG8sxonpxNFu0K2j+szS0QHT9jBVLR31jqHd9h3 4eibkQ2EPVn/UH3mCA77R9zjUkxCKGyUwoUYM71EJZsgb6IbScjw1DHLXBVR/+xc /qp2Kzts86trMW3W/v6tGuEXH6nI4pP/b/8t2SpRCOSq+MupfxV021xVPXx8bqip ESRJa/RFqAfow5uwZ2G/eCtRTI9pm1sTsFBLzspcVbj03+vs2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUkxu0AtlJkvu7It5+cHCsbGtWBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDg4MWQwMDktY2JmOC0z YTdkLWFhY2ItM2FiYmM4MTVlMzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER/8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTdhLgh5A9OOs9weP6fqddz9bNuDQfY44tyeCx4PmvXpZZO1a0sAVvT xtj4oRue0sUwfy0jwOwIvFt2Fr5UjjJKq4WItHKmhiDd0C4xunoRR/N9rFtXktXB OTGLXeS9yZiPfPZOJkP9JXc4fDQgySg6aCcyHkca6b+EqrnC1C7nvar5T8lhTGlK rYmMlkCeXovgdyLJKfVfMl4cUMk1prUKQ2+exB0s8Pe3FU48HbjWzqZly9vUsTLd b06CdscbAczSnUjh2bBJnMHnYdocfeMQEonKLq5QXiZxFGcsLDkeROUFWbDGGMpA 0+t6Pb4xT/ZAcq6ZuqR/4bvIF7tOH5g= -----END CERTIFICATE-----Generated at Wed Nov 5 02:20:41 2025 by rpki-client