$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35133f23-2db2-3119-a6e0-f214c49d82ca.roa File: 35133f23-2db2-3119-a6e0-f214c49d82ca.roa (raw, json) Hash identifier: QS+vdyfcRVssyqB7iSNUz5bKC6GMzUc4lZAnESYKcFs= Subject key identifier: 06:22:6D:9A:9F:3F:B0:4D:3D:EA:24:D1:E7:BC:51:9F:32:01:B6:08 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B1C370DA9A09810DEA6A42D90 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35133f23-2db2-3119-a6e0-f214c49d82ca.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 701 IP address blocks: 65.205.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:0d:a9:a0:98:10:de:a6:a4:2d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=88c6597a-2b68-4143-b099-1dd51c1545dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:da:28:a1:8a:05:a9:1c:35:22:63:10:57:50: 75:0d:db:2c:11:08:85:64:d3:b7:54:73:27:46:cf: b5:6c:c1:e3:77:9c:b3:e2:8b:6c:c6:fd:5f:34:1f: f8:7d:4b:26:6e:66:16:b9:cf:61:c4:eb:00:95:cf: 29:ed:58:72:2e:19:c3:db:4a:c3:2e:93:91:2e:66: b3:3d:7d:dd:04:ce:32:3d:4a:31:99:63:de:1f:93: 4c:a3:80:64:95:3f:64:62:2c:3f:e5:7f:6c:5b:85: 30:ff:a0:08:9a:f3:a0:a4:43:1b:96:7b:d7:0b:30: 64:bb:53:f4:08:b8:b3:76:48:35:b1:88:b0:17:3e: e8:0c:ca:73:8d:80:a2:4e:48:42:5d:3e:56:4c:31: 21:ab:8c:f4:70:1f:75:7b:28:3a:3e:00:3c:a3:97: 4f:84:29:4f:42:ae:5b:53:ac:fc:97:ce:1f:c4:3b: 96:b1:16:7c:b5:b0:11:10:34:ae:a5:e2:d7:bd:0d: 01:05:0e:6d:8c:0c:18:d7:d0:4a:ca:00:33:76:7c: 64:c0:f5:e2:db:ec:2d:6c:7b:41:92:70:05:e6:37: b0:11:9c:a9:f5:04:57:78:47:76:d3:60:3d:1f:6c: 4c:e7:de:df:05:18:43:3c:47:6b:1d:91:c7:9d:d0: 8b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:22:6D:9A:9F:3F:B0:4D:3D:EA:24:D1:E7:BC:51:9F:32:01:B6:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35133f23-2db2-3119-a6e0-f214c49d82ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 65.205.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:8f:93:da:68:a3:53:29:e2:7f:11:bf:38:b7:1f:68:62:d8: 06:ae:fd:ba:59:84:45:37:28:45:84:fe:8a:72:cc:1a:c8:20: 4e:95:5a:a2:0f:ef:3a:93:61:2b:c2:93:83:0d:fb:b6:ee:98: 72:39:d6:82:fd:5b:5a:7d:10:b1:b5:65:07:2a:48:74:45:c4: 85:40:28:b0:21:70:e5:f7:c3:e3:b6:2f:b1:f4:dc:e2:19:5b: 99:3e:b6:94:2f:07:6a:a7:9b:76:97:04:d3:80:55:89:08:74: bd:67:c7:1e:36:4d:ce:53:ad:27:2e:6f:3b:83:37:31:89:2f: 78:15:0d:6a:3b:9b:e1:f1:19:00:b0:4f:95:02:84:73:46:93: b4:84:1d:7c:a5:c7:ac:d2:ba:98:ad:53:b9:fb:58:51:a3:94: 6a:8b:64:fb:b3:2f:03:7c:75:1b:63:d6:30:c4:28:d1:b2:8b: e5:2a:c0:6a:c1:b9:ad:21:b1:09:fa:ab:f4:f3:0c:db:06:68: 00:1d:63:63:2e:71:f3:95:59:dd:d2:ab:70:e0:50:59:08:89: 09:7c:fe:01:e5:89:08:d5:e5:12:cd:ae:72:75:49:95:20:89: c8:a0:99:89:9b:73:65:6f:bb:98:31:65:68:b9:57:b3:db:43: 9e:b0:4c:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNw2poJgQ3qakLZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ODhjNjU5N2EtMmI2OC00MTQzLWIwOTktMWRkNTFjMTU0NWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNoooYoFqRw1ImMQV1B1DdssEQiFZNO3VHMn Rs+1bMHjd5yz4otsxv1fNB/4fUsmbmYWuc9hxOsAlc8p7VhyLhnD20rDLpORLmaz PX3dBM4yPUoxmWPeH5NMo4BklT9kYiw/5X9sW4Uw/6AImvOgpEMblnvXCzBku1P0 CLizdkg1sYiwFz7oDMpzjYCiTkhCXT5WTDEhq4z0cB91eyg6PgA8o5dPhClPQq5b U6z8l84fxDuWsRZ8tbAREDSupeLXvQ0BBQ5tjAwY19BKygAzdnxkwPXi2+wtbHtB knAF5jewEZyp9QRXeEd202A9H2xM597fBRhDPEdrHZHHndCLWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYibZqfP7BNPeok0ee8UZ8yAbYIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzUxMzNmMjMtMmRiMi0z MTE5LWE2ZTAtZjIxNGM0OWQ4MmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQc1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOPk9poo1Mp4n8Rvzi3H2hi2Aau/bpZhEU3KEWE/opyzBrIIE6VWqIP 7zqTYSvCk4MN+7bumHI51oL9W1p9ELG1ZQcqSHRFxIVAKLAhcOX3w+O2L7H03OIZ W5k+tpQvB2qnm3aXBNOAVYkIdL1nxx42Tc5TrScubzuDNzGJL3gVDWo7m+HxGQCw T5UChHNGk7SEHXylx6zSupitU7n7WFGjlGqLZPuzLwN8dRtj1jDEKNGyi+UqwGrB ua0hsQn6q/TzDNsGaAAdY2MucfOVWd3Sq3DgUFkIiQl8/gHliQjV5RLNrnJ1SZUg icigmYmbc2Vvu5gxZWi5V7PbQ56wTDs= -----END CERTIFICATE-----Generated at Fri Oct 10 17:50:47 2025 by rpki-client