$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eff5f3cc-d054-3ac1-a62e-481bf8f9d7b3.roa File: eff5f3cc-d054-3ac1-a62e-481bf8f9d7b3.roa (raw, json) Hash identifier: IW0L5Z6oPm0AP/aGbWt24eTnOxHcHJGVReN8ssqYTRg= Subject key identifier: DE:CE:32:21:6B:03:A9:A0:9A:C8:20:8A:02:70:38:BE:08:B7:4F:FE Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB2F807C4A61FC58CDF947480 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eff5f3cc-d054-3ac1-a62e-481bf8f9d7b3.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 701 IP address blocks: 70.21.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:07:c4:a6:1f:c5:8c:df:94:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=ef1241e2-c6b6-450d-845d-c0a2eb86a908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b3:d9:e7:e9:44:6a:5d:6e:4b:c5:04:ba:1f: 4f:c3:d4:37:96:0e:8a:e3:c4:f6:91:3f:c1:f7:ab: f2:fa:e1:40:bc:c6:6b:7b:1c:68:99:28:c0:31:64: fe:ba:02:70:72:fe:40:dc:e8:84:56:b5:72:22:57: 10:f3:ea:22:99:24:ba:21:7d:18:be:12:68:8a:3b: b7:99:32:2e:7c:21:7a:7e:4d:64:6f:ba:a5:64:e3: 5e:8e:90:9e:c6:8d:a9:1f:8d:e0:7b:bd:68:aa:87: 6f:8a:a5:98:76:d2:6e:b8:cc:9f:57:b1:bf:b4:c1: 50:55:ad:1a:fb:12:84:3a:33:69:03:48:59:41:70: b1:41:39:92:ca:fa:0a:38:b6:35:6e:4b:d8:86:4f: 36:98:5c:eb:48:58:b7:e8:29:6f:da:07:22:09:67: ce:b0:c7:f5:6e:d6:ea:60:98:5c:aa:d9:0b:0b:3f: 6f:df:55:b6:16:2b:11:4a:7e:54:21:cd:b7:35:86: 57:54:82:c7:77:b6:5c:43:be:87:00:5c:2d:28:37: 28:93:79:a4:0c:58:4b:1a:33:1e:0d:6c:99:de:02: a2:b7:c8:a0:6a:ee:fe:dc:89:34:d4:98:0b:43:d3: 82:6e:d0:3c:52:1e:e4:05:a2:80:58:ec:8e:c3:2c: f5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CE:32:21:6B:03:A9:A0:9A:C8:20:8A:02:70:38:BE:08:B7:4F:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eff5f3cc-d054-3ac1-a62e-481bf8f9d7b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 70.21.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:f9:49:a7:90:a2:bf:fb:e6:fb:40:fa:86:96:53:f8:ce:d9: bf:76:a3:9e:34:c1:47:a1:2f:b4:b3:4e:c4:83:e1:80:a3:c3: 26:f6:55:9b:b3:0e:f2:97:63:8e:cf:73:51:02:f6:72:96:8e: 41:20:63:e5:26:b2:e7:0d:d1:ba:63:44:59:c2:c4:2c:4d:16: cd:95:d2:10:d6:f8:29:3e:b7:5b:98:64:08:12:e3:8d:9b:80: a2:bb:23:19:be:97:a4:be:29:0d:f5:fc:ff:c3:39:c7:ed:48: cd:e0:ff:b0:1a:0e:52:a1:c0:c3:b5:fe:64:9b:5c:36:85:db: b2:8c:cb:bc:90:45:e0:83:1c:3b:f7:be:a7:48:d0:ca:f9:6b: ae:1e:6d:08:00:f0:64:3a:e6:2a:1a:83:02:34:77:76:10:e6: 46:98:eb:2b:42:9e:12:21:f8:4e:a7:b1:47:3e:65:e4:1c:ca: da:31:88:34:7f:8e:63:55:07:9e:27:13:ae:c9:d0:d8:3c:18: 7e:f5:dd:4d:05:79:af:36:6f:c5:1c:da:fd:90:b7:d2:60:a2: 8a:46:a3:b1:de:e8:d3:59:e2:54:74:10:4d:5f:75:ef:7b:b3: 70:a9:29:1f:fd:ae:6f:66:75:f5:61:ee:41:f7:a7:12:66:a2: f3:8d:1c:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy+AfEph/FjN+UdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ZWYxMjQxZTItYzZiNi00NTBkLTg0NWQtYzBhMmViODZhOTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbPZ5+lEal1uS8UEuh9Pw9Q3lg6K48T2kT/B 96vy+uFAvMZrexxomSjAMWT+ugJwcv5A3OiEVrVyIlcQ8+oimSS6IX0YvhJoiju3 mTIufCF6fk1kb7qlZONejpCexo2pH43ge71oqodviqWYdtJuuMyfV7G/tMFQVa0a +xKEOjNpA0hZQXCxQTmSyvoKOLY1bkvYhk82mFzrSFi36Clv2gciCWfOsMf1btbq YJhcqtkLCz9v31W2FisRSn5UIc23NYZXVILHd7ZcQ76HAFwtKDcok3mkDFhLGjMe DWyZ3gKit8igau7+3Ik01JgLQ9OCbtA8Uh7kBaKAWOyOwyz1jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7OMiFrA6mgmsggigJwOL4It0/+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZWZmNWYzY2MtZDA1NC0z YWMxLWE2MmUtNDgxYmY4ZjlkN2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRhWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAL5SaeQor/75vtA+oaWU/jO2b92o540wUehL7SzTsSD4YCjwyb2VZuz DvKXY47Pc1EC9nKWjkEgY+UmsucN0bpjRFnCxCxNFs2V0hDW+Ck+t1uYZAgS442b gKK7Ixm+l6S+KQ31/P/DOcftSM3g/7AaDlKhwMO1/mSbXDaF27KMy7yQReCDHDv3 vqdI0Mr5a64ebQgA8GQ65ioagwI0d3YQ5kaY6ytCnhIh+E6nsUc+ZeQcytoxiDR/ jmNVB54nE67J0Ng8GH713U0Fea82b8Uc2v2Qt9JgoopGo7He6NNZ4lR0EE1fde97 s3CpKR/9rm9mdfVh7kH3pxJmovONHAQ= -----END CERTIFICATE-----Generated at Wed Nov 5 02:20:53 2025 by rpki-client