$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e57b15dc-7a6f-3cf2-9056-f45813b67ae8.roa File: e57b15dc-7a6f-3cf2-9056-f45813b67ae8.roa (raw, json) Hash identifier: 70NCnNf13XWi/85NsUL9HnPJzKq7hpt5bqHKMboSeFY= Subject key identifier: 68:52:6A:FD:69:F3:B9:B2:18:F8:FC:00:0E:02:B1:26:40:BA:CC:DE Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F8010C8BDF1DBD32596E80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e57b15dc-7a6f-3cf2-9056-f45813b67ae8.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 71.251.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:01:0c:8b:df:1d:bd:32:59:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=0b8771fa-c6ea-4057-83ca-0dead8861ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8d:85:85:3c:50:68:ef:96:fa:1d:7a:90:7b: b4:8e:f2:21:1f:1a:39:96:b0:b6:39:ad:7e:3e:fe: 4c:95:8e:29:d2:78:85:48:d9:78:50:45:8b:e2:2f: 63:c6:df:4d:dd:a4:eb:9d:01:55:14:67:b5:40:ff: 50:6f:58:57:c7:65:24:02:5e:e3:f8:c6:08:9a:63: 15:e6:ab:25:b1:21:c0:00:99:6b:d0:1b:26:14:1f: e2:c5:ac:cf:84:57:95:eb:19:03:ef:ce:0e:39:71: c5:2e:31:76:56:95:72:f4:ce:85:8a:19:f6:e7:81: 57:3f:35:eb:d8:b3:02:0a:6e:1b:c5:43:1c:f3:6f: 6b:4b:23:b7:7c:55:d3:a9:80:5b:1d:1c:62:a0:b4: 1c:8b:e8:5e:6b:c2:2f:e6:29:90:01:8c:d0:d3:29: d2:cd:5c:ab:cc:63:37:14:1c:1a:65:1a:f0:71:1b: ca:63:a7:d0:72:71:cd:eb:fc:78:6a:55:45:47:b7: 43:34:d7:6a:8f:1a:a2:e6:d4:0b:1f:7e:7b:36:16: d7:6e:59:a6:cd:6c:54:cc:0c:0a:42:1c:4b:78:e3: 58:46:90:91:13:2a:61:f1:bf:86:44:19:ad:9e:2e: 61:45:ad:ea:b9:86:57:89:ce:00:9c:a8:43:50:6b: 21:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:52:6A:FD:69:F3:B9:B2:18:F8:FC:00:0E:02:B1:26:40:BA:CC:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e57b15dc-7a6f-3cf2-9056-f45813b67ae8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.251.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:82:5b:9a:80:77:2f:a2:a7:90:1c:69:b7:66:34:e6:0d:1e: 79:1f:ae:63:b0:d1:89:43:ab:7b:07:39:50:09:a9:19:d8:99: cf:e0:90:fd:b1:d4:72:10:99:1c:54:f1:9b:d3:6a:86:65:1b: f9:70:8f:7c:6b:9a:d3:cb:e0:99:98:ff:a1:22:96:0c:bb:22: 4f:1d:6c:19:d9:d6:f4:9e:bb:91:bd:23:1b:60:9f:bb:80:c6: de:44:be:51:21:b9:f1:7d:8f:9d:7b:6d:a2:65:18:58:ac:43: 64:29:93:3d:fb:1c:d9:2c:b6:f3:9d:dd:64:cf:4d:25:4d:e3: cd:3f:5c:b6:32:2a:c6:f2:ff:19:07:0f:b1:98:55:5c:c1:b8: ed:09:99:35:35:37:e8:3f:76:44:64:51:9e:1a:65:9b:a2:f8: 5d:46:b8:60:8c:46:51:68:07:83:14:b3:e5:1e:1a:55:bc:87: 34:7b:4c:05:37:24:65:d7:03:11:e7:04:e7:aa:17:08:d4:af: 98:e4:98:d1:c3:58:61:4c:cd:a1:5d:99:02:32:76:58:e0:85: 2a:ba:d2:7a:dc:89:a0:de:70:cb:cb:fc:73:d2:68:19:10:52: 70:25:b3:fc:0b:27:59:56:4c:84:1b:d5:f9:e7:92:61:26:fc: 47:1c:0a:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy+AEMi98dvTJZboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MGI4NzcxZmEtYzZlYS00MDU3LTgzY2EtMGRlYWQ4ODYxYWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn42FhTxQaO+W+h16kHu0jvIhHxo5lrC2Oa1+ Pv5MlY4p0niFSNl4UEWL4i9jxt9N3aTrnQFVFGe1QP9Qb1hXx2UkAl7j+MYImmMV 5qslsSHAAJlr0BsmFB/ixazPhFeV6xkD784OOXHFLjF2VpVy9M6Fihn254FXPzXr 2LMCCm4bxUMc829rSyO3fFXTqYBbHRxioLQci+hea8Iv5imQAYzQ0ynSzVyrzGM3 FBwaZRrwcRvKY6fQcnHN6/x4alVFR7dDNNdqjxqi5tQLH357NhbXblmmzWxUzAwK QhxLeONYRpCREyph8b+GRBmtni5hRa3quYZXic4AnKhDUGshLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhSav1p87myGPj8AA4CsSZAuszeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTU3YjE1ZGMtN2E2Zi0z Y2YyLTkwNTYtZjQ1ODEzYjY3YWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER/sgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeCW5qAdy+ip5AcabdmNOYNHnkfrmOw0YlDq3sHOVAJqRnYmc/gkP2x 1HIQmRxU8ZvTaoZlG/lwj3xrmtPL4JmY/6Eilgy7Ik8dbBnZ1vSeu5G9Ixtgn7uA xt5EvlEhufF9j517baJlGFisQ2Qpkz37HNkstvOd3WTPTSVN480/XLYyKsby/xkH D7GYVVzBuO0JmTU1N+g/dkRkUZ4aZZui+F1GuGCMRlFoB4MUs+UeGlW8hzR7TAU3 JGXXAxHnBOeqFwjUr5jkmNHDWGFMzaFdmQIydljghSq60nrciaDecMvL/HPSaBkQ UnAls/wLJ1lWTIQb1fnnkmEm/EccCiM= -----END CERTIFICATE-----Generated at Wed Nov 5 04:07:57 2025 by rpki-client