$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e7d4d40a-2f6a-3492-b68a-32c8eb19aba0.roa File: e7d4d40a-2f6a-3492-b68a-32c8eb19aba0.roa (raw, json) Hash identifier: KCvEvjAlqmbLJqL4Nn9rX4jBrdKfMzB5SklFaDB+KL8= Subject key identifier: C3:F4:D6:83:78:EC:E0:14:A2:A0:28:87:C5:54:C7:B0:12:8B:89:66 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F80218DF522DCC398F73E0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e7d4d40a-2f6a-3492-b68a-32c8eb19aba0.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 71.241.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:02:18:df:52:2d:cc:39:8f:73:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=600c1c05-dc2f-4509-8010-69553520ee79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:09:c5:ee:5a:a5:15:34:f2:a4:e5:0b:90:62: 78:57:ee:40:49:77:45:0e:e8:1c:77:a3:44:88:63: 55:a1:0a:31:13:05:de:f7:8e:1a:75:87:56:0d:73: ec:8b:92:34:08:9b:94:f2:d5:8f:15:9e:c6:46:a5: 83:75:30:73:f2:ea:bc:a4:da:98:fd:17:89:85:41: aa:f4:22:2d:8f:bb:73:4a:46:44:f0:6b:75:83:de: 7f:0f:b5:bd:e2:82:9a:6f:0f:d8:ea:0f:95:31:28: 10:a2:cc:4d:8f:64:8a:65:d4:1b:9e:6e:33:74:be: a1:8e:9b:1c:6b:ca:72:45:d3:8a:48:ce:cc:24:62: e3:c9:c1:3b:f7:fa:46:0e:26:13:6c:71:44:43:f8: 54:f5:8a:ca:7c:3a:59:3e:28:5f:d6:9f:3d:07:c0: 58:09:b8:36:09:8c:e5:24:6b:01:7a:61:4c:17:3c: da:82:92:96:43:da:63:3c:28:15:38:e1:bf:67:ec: ea:eb:e8:c7:d8:b8:83:36:32:8b:9f:0c:88:b5:6e: a5:35:9d:5e:d7:aa:b2:9d:59:48:28:a6:de:bd:23: 5f:85:00:ae:1c:bc:bb:1e:eb:19:8a:92:e5:18:83: 9e:c3:d8:b1:24:0f:a0:cd:f5:49:1c:57:a7:73:ef: e4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F4:D6:83:78:EC:E0:14:A2:A0:28:87:C5:54:C7:B0:12:8B:89:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e7d4d40a-2f6a-3492-b68a-32c8eb19aba0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.241.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:93:0c:98:7a:86:e7:78:1c:ff:33:39:ed:ef:16:f6:65:1a: ff:fe:4b:ec:f2:e1:9c:78:60:1b:f4:47:44:9b:cd:23:f9:04: 25:c3:d8:75:07:b8:74:6d:df:fe:6a:5a:48:82:23:c5:f7:64: 98:78:ca:ea:41:90:d7:2b:e3:84:47:92:c3:09:86:19:fa:fb: f2:fe:32:22:5b:27:38:43:e2:ae:e3:93:29:27:f8:61:7c:96: 26:0f:44:07:c4:1c:df:e4:4c:f7:ee:f9:f4:36:6f:2d:22:15: 7b:9f:68:f4:be:07:e7:fe:ff:f6:a3:be:2f:a2:a9:da:73:0c: 2c:49:1a:2c:ca:ca:4f:0d:b4:28:41:c0:57:11:9d:8e:de:44: 76:d0:4c:af:74:ee:50:db:90:71:80:f7:1b:95:79:38:da:00: f7:8f:0d:21:5f:cc:ef:83:45:c6:70:66:fd:87:cb:36:a6:ab: 7c:b1:f2:46:5e:90:47:c1:e9:c3:5b:3f:d2:5e:0c:46:c0:95: d2:0d:06:64:3e:44:0f:db:12:cb:5e:8c:ea:d8:ad:f2:2a:99: 03:13:9b:29:1d:3a:ec:aa:f5:c6:b5:18:5d:08:27:6c:df:9b: 02:33:26:0c:f8:a8:a6:44:fc:23:aa:d0:0a:2a:5f:5e:83:de: 50:51:90:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy+AIY31ItzDmPc+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NjAwYzFjMDUtZGMyZi00NTA5LTgwMTAtNjk1NTM1MjBlZTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwnF7lqlFTTypOULkGJ4V+5ASXdFDugcd6NE iGNVoQoxEwXe944adYdWDXPsi5I0CJuU8tWPFZ7GRqWDdTBz8uq8pNqY/ReJhUGq 9CItj7tzSkZE8Gt1g95/D7W94oKabw/Y6g+VMSgQosxNj2SKZdQbnm4zdL6hjpsc a8pyRdOKSM7MJGLjycE79/pGDiYTbHFEQ/hU9YrKfDpZPihf1p89B8BYCbg2CYzl JGsBemFMFzzagpKWQ9pjPCgVOOG/Z+zq6+jH2LiDNjKLnwyItW6lNZ1e16qynVlI KKbevSNfhQCuHLy7HusZipLlGIOew9ixJA+gzfVJHFenc+/k4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMP01oN47OAUoqAoh8VUx7ASi4lmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTdkNGQ0MGEtMmY2YS0z NDkyLWI2OGEtMzJjOGViMTlhYmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER/GQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqTDJh6hud4HP8zOe3vFvZlGv/+S+zy4Zx4YBv0R0SbzSP5BCXD2HUH uHRt3/5qWkiCI8X3ZJh4yupBkNcr44RHksMJhhn6+/L+MiJbJzhD4q7jkykn+GF8 liYPRAfEHN/kTPfu+fQ2by0iFXufaPS+B+f+//ajvi+iqdpzDCxJGizKyk8NtChB wFcRnY7eRHbQTK907lDbkHGA9xuVeTjaAPePDSFfzO+DRcZwZv2Hyzamq3yx8kZe kEfB6cNbP9JeDEbAldINBmQ+RA/bEstejOrYrfIqmQMTmykdOuyq9ca1GF0IJ2zf mwIzJgz4qKZE/COq0AoqX16D3lBRkOg= -----END CERTIFICATE-----Generated at Wed Nov 5 02:20:30 2025 by rpki-client