$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dff717d9-5ccb-3a1e-8503-b1330d3ee463.roa File: dff717d9-5ccb-3a1e-8503-b1330d3ee463.roa (raw, json) Hash identifier: 0L9o/wvDxroWP5txnWs4zJcfXw+PPqP3ZuRCuHjYHps= Subject key identifier: 92:98:F2:2D:CC:8D:89:E0:DA:DE:A5:32:1B:79:03:28:0D:F4:DE:31 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F80913172310C76D5D4FD0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dff717d9-5ccb-3a1e-8503-b1330d3ee463.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 71.191.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:09:13:17:23:10:c7:6d:5d:4f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=03263d3c-0949-4608-a2f3-dc9e43f58e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2a:2d:b2:e1:ac:85:0f:bd:c5:26:ce:2d:e3: 1e:e2:90:c4:cf:59:7c:ad:84:58:41:ef:91:d4:62: 5e:c5:48:07:71:94:0e:ad:db:08:6f:8b:7d:f0:cf: 63:e0:f2:93:e4:a9:bc:cb:ce:14:c6:a9:74:19:21: 82:3e:3c:f7:19:1c:50:ad:22:53:01:c1:c9:e6:59: b3:73:5f:a0:5d:b0:12:25:bb:26:82:d8:21:a1:c2: 0e:44:24:63:0e:64:89:47:94:af:b3:fd:0d:ac:76: 38:8e:bb:4c:46:48:a4:8c:8d:47:bd:5d:90:ca:d6: 4f:3c:66:51:bd:73:45:d0:78:46:50:33:64:2c:5a: 77:5b:fc:1e:14:dd:c1:e2:12:ed:1c:7d:47:56:17: c1:b1:c5:e3:a1:1d:37:aa:38:d4:a5:d6:d7:df:08: 02:ec:da:9d:b2:73:c8:82:1d:4a:84:76:cc:4e:7d: ea:cf:ff:93:ed:be:ba:e6:5d:e7:12:41:a1:80:e8: da:64:92:d6:18:5d:fd:40:98:0a:75:b2:b2:8b:d0: 0e:a9:f3:e3:67:3d:42:0b:67:13:32:db:6e:7c:e6: 9b:dc:73:5c:1a:a8:c8:71:57:7c:3b:e4:f8:44:79: 8c:cc:69:a7:89:2c:cc:43:d6:af:2b:7e:64:cc:d9: 7c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:98:F2:2D:CC:8D:89:E0:DA:DE:A5:32:1B:79:03:28:0D:F4:DE:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dff717d9-5ccb-3a1e-8503-b1330d3ee463.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.191.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:5d:f1:88:86:e0:14:ec:40:19:dc:16:3d:2a:4b:6f:49:31: ad:fa:1c:5a:30:88:68:e0:dc:eb:7a:39:cc:0f:76:91:34:4a: 08:c0:1e:b9:dd:2f:bb:8e:d5:db:38:d1:13:e6:2c:0d:fa:bb: 9b:27:e2:21:2c:a1:2c:ff:f6:da:d3:38:f3:e9:63:b4:f3:fd: 67:8a:6b:8b:7b:99:26:98:a0:8e:3e:db:e1:5c:4e:6f:4a:a3: fd:9e:6b:68:22:2b:75:55:e3:51:82:4d:b0:e8:bc:cf:06:90: 5a:69:9b:0c:8b:67:76:81:6a:57:6b:52:60:71:94:8e:b4:1b: 66:eb:0b:80:1b:ce:4c:9a:24:9c:6b:b5:51:f9:b3:be:64:e2: da:9d:fe:87:9d:ea:e2:b5:53:78:c7:1a:37:94:8f:a8:55:9a: 97:3f:33:78:9c:73:88:30:97:7a:8e:10:d4:8c:ca:7e:40:ab: 50:9b:7d:0a:30:c8:de:61:de:46:77:db:13:75:a0:6c:63:ab: 9e:f1:b4:71:d6:e6:c3:da:b1:24:c0:7b:0d:f9:f9:56:d0:6b: 4e:ac:3f:9e:e7:7c:fd:f7:30:1a:9c:a3:e7:a4:3d:7f:bd:de: b1:b7:94:8d:cb:60:29:93:26:97:2c:e6:e7:88:48:99:6d:64: ed:e0:d2:20 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuy+AkTFyMQx21dT9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MDMyNjNkM2MtMDk0OS00NjA4LWEyZjMtZGM5ZTQzZjU4ZTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCotsuGshQ+9xSbOLeMe4pDEz1l8rYRYQe+R 1GJexUgHcZQOrdsIb4t98M9j4PKT5Km8y84Uxql0GSGCPjz3GRxQrSJTAcHJ5lmz c1+gXbASJbsmgtghocIORCRjDmSJR5Svs/0NrHY4jrtMRkikjI1HvV2QytZPPGZR vXNF0HhGUDNkLFp3W/weFN3B4hLtHH1HVhfBscXjoR03qjjUpdbX3wgC7NqdsnPI gh1KhHbMTn3qz/+T7b665l3nEkGhgOjaZJLWGF39QJgKdbKyi9AOqfPjZz1CC2cT MttufOab3HNcGqjIcVd8O+T4RHmMzGmniSzMQ9avK35kzNl8MQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJKY8i3MjYng2t6lMht5AygN9N4xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGZmNzE3ZDktNWNjYi0z YTFlLTg1MDMtYjEzMzBkM2VlNDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAR78wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEABF3xiIbgFOxAGdwWPSpLb0kxrfocWjCIaODc63o5zA92kTRKCMAeud0v u47V2zjRE+YsDfq7myfiISyhLP/22tM48+ljtPP9Z4pri3uZJpigjj7b4VxOb0qj /Z5raCIrdVXjUYJNsOi8zwaQWmmbDItndoFqV2tSYHGUjrQbZusLgBvOTJoknGu1 UfmzvmTi2p3+h53q4rVTeMcaN5SPqFWalz8zeJxziDCXeo4Q1IzKfkCrUJt9CjDI 3mHeRnfbE3WgbGOrnvG0cdbmw9qxJMB7Dfn5VtBrTqw/nud8/fcwGpyj56Q9f73e sbeUjctgKZMmlyzm54hImW1k7eDSIA== -----END CERTIFICATE-----Generated at Wed Nov 5 02:21:10 2025 by rpki-client