$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dfd968cd-f41b-3964-8ce9-0b6a4e17d2d2.roa File: dfd968cd-f41b-3964-8ce9-0b6a4e17d2d2.roa (raw, json) Hash identifier: ix9cmk1x7ag2DEmVEgOZ+lN85kXg1nPHMqetJrTHYNw= Subject key identifier: 45:4A:62:7E:E3:37:3B:FB:34:BF:89:5C:E1:F0:FD:ED:D2:C7:5A:DE Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F7DF6FC7E226302C59B080 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dfd968cd-f41b-3964-8ce9-0b6a4e17d2d2.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 108.44.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:df:6f:c7:e2:26:30:2c:59:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=028f7f3b-c0cf-44f4-a4e9-19629b48cd34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:68:6d:d5:eb:16:0a:fd:98:4e:11:0c:82:74: b0:74:c5:9e:4e:ed:e2:dd:63:e7:ef:66:b7:61:f5: 58:bb:85:14:51:75:0a:d5:4f:ed:4f:68:4b:aa:56: c8:0c:13:d8:73:25:85:7a:b3:d7:88:c0:25:be:e7: 7d:6c:0f:28:6a:fa:7b:1b:57:f7:f6:05:dc:c0:89: 9c:9a:4a:f4:26:94:0e:26:e7:32:9f:bf:60:c4:f9: f3:3f:34:f5:c2:9d:3a:90:19:6c:0d:ed:2e:cb:94: 25:cf:08:d1:28:90:64:52:7c:7c:f4:82:04:16:65: f5:f8:1a:c8:cf:a1:a6:c3:93:7f:29:85:2b:98:55: 34:78:11:e3:fb:53:21:f9:07:61:ef:15:ad:da:01: 01:a3:59:92:c6:ca:18:a1:54:4b:57:75:12:5a:46: 0a:7d:4a:e3:79:18:1a:49:eb:52:0c:a5:68:b6:68: 4b:2b:bc:08:20:12:8b:5f:86:dc:a6:2e:b1:63:66: 87:06:fb:13:88:fe:18:18:91:e1:78:2d:31:fe:05: e7:56:df:16:fe:73:f3:70:f6:c8:03:77:5f:06:97: f1:a3:25:c3:d6:fe:20:5b:da:d3:c0:63:95:f7:5f: 1b:c7:1e:83:83:de:b4:ec:26:d6:ec:55:78:ce:b9: 2b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:4A:62:7E:E3:37:3B:FB:34:BF:89:5C:E1:F0:FD:ED:D2:C7:5A:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dfd968cd-f41b-3964-8ce9-0b6a4e17d2d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.44.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:13:c1:f9:75:33:6b:50:95:21:cf:63:8f:14:d2:cb:d1:90: 4e:2e:6a:9f:3f:7a:89:e3:b3:33:ff:52:fe:57:aa:bf:73:d0: c0:7c:83:d9:ca:26:7a:9f:eb:0d:da:bc:24:cc:ba:75:98:27: a2:85:57:89:5f:7c:ea:ca:94:59:49:06:32:af:1f:2a:7b:53: 59:ac:6f:82:07:f7:e2:5a:9a:3e:82:92:27:36:89:9f:88:09: 09:29:80:69:3f:90:1e:bb:4c:66:bb:02:a0:44:76:a5:e4:f5: 5c:1b:c9:bc:22:7f:5a:af:be:fe:c8:11:74:89:c4:6b:16:c6: a7:95:4b:f0:3a:43:20:85:00:b1:b9:89:2d:72:c9:25:ff:1c: 8f:2f:57:00:9e:57:a4:32:5d:10:dd:85:73:75:f9:98:e1:ce: b7:be:dd:70:3f:49:5c:fa:bf:26:b0:66:0d:5f:3e:4d:b7:73: ee:6e:8d:47:51:59:4b:64:7a:4b:31:19:ea:42:b4:65:e0:d3: f8:d6:00:01:7e:94:6f:08:78:21:9f:38:42:e4:ce:0c:55:95: 43:7b:1a:f9:84:d3:8e:a9:12:7e:05:63:b8:fd:a6:0a:42:d8: 5f:72:28:93:17:ee:88:87:83:f1:2a:4d:d3:ce:40:c2:bb:21: ad:42:27:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy999vx+ImMCxZsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MDI4ZjdmM2ItYzBjZi00NGY0LWE0ZTktMTk2MjliNDhjZDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWht1esWCv2YThEMgnSwdMWeTu3i3WPn72a3 YfVYu4UUUXUK1U/tT2hLqlbIDBPYcyWFerPXiMAlvud9bA8oavp7G1f39gXcwImc mkr0JpQOJucyn79gxPnzPzT1wp06kBlsDe0uy5QlzwjRKJBkUnx89IIEFmX1+BrI z6Gmw5N/KYUrmFU0eBHj+1Mh+Qdh7xWt2gEBo1mSxsoYoVRLV3USWkYKfUrjeRga SetSDKVotmhLK7wIIBKLX4bcpi6xY2aHBvsTiP4YGJHheC0x/gXnVt8W/nPzcPbI A3dfBpfxoyXD1v4gW9rTwGOV918bxx6Dg9607CbW7FV4zrkrsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVKYn7jNzv7NL+JXOHw/e3Sx1reMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGZkOTY4Y2QtZjQxYi0z OTY0LThjZTktMGI2YTRlMTdkMmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGbCwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoTwfl1M2tQlSHPY48U0svRkE4uap8/eonjszP/Uv5Xqr9z0MB8g9nK Jnqf6w3avCTMunWYJ6KFV4lffOrKlFlJBjKvHyp7U1msb4IH9+Jamj6Ckic2iZ+I CQkpgGk/kB67TGa7AqBEdqXk9Vwbybwif1qvvv7IEXSJxGsWxqeVS/A6QyCFALG5 iS1yySX/HI8vVwCeV6QyXRDdhXN1+Zjhzre+3XA/SVz6vyawZg1fPk23c+5ujUdR WUtkeksxGepCtGXg0/jWAAF+lG8IeCGfOELkzgxVlUN7GvmE046pEn4FY7j9pgpC 2F9yKJMX7oiHg/EqTdPOQMK7Ia1CJx8= -----END CERTIFICATE-----Generated at Wed Nov 5 02:20:14 2025 by rpki-client