$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c530ef60-be22-3ea8-b8db-de91430c5b3a.roa File: c530ef60-be22-3ea8-b8db-de91430c5b3a.roa (raw, json) Hash identifier: dGgRAZxF12uXdGlaWNWKQqKUf7EMZrXxrWAnAqFVQ+4= Subject key identifier: 72:95:2B:8F:42:57:5C:B1:B3:50:89:D8:3F:63:D5:CA:80:E6:97:39 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B1C36DD717A4D3FA6B8450100 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c530ef60-be22-3ea8-b8db-de91430c5b3a.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 701 IP address blocks: 141.158.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:dd:71:7a:4d:3f:a6:b8:45:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=fa3bbe19-3934-4e2d-88cb-409b8d2ca0d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:29:ee:35:ad:91:a7:43:03:e1:0f:a6:75:0a: 1a:4b:95:ee:e1:da:71:10:62:19:45:d8:e1:04:4a: 36:57:9e:b4:d6:1e:7a:1e:f9:2f:9f:94:d6:09:7d: c4:53:ea:1c:72:81:43:85:a5:7e:05:46:c2:2a:9d: a3:c2:a8:8f:ca:e4:71:4b:bc:a5:0d:23:4f:da:52: e4:82:9c:8a:79:8e:81:30:0a:7c:7a:12:70:bf:17: 52:81:c0:77:a7:bb:5e:01:a5:e8:f5:5e:0f:e3:d2: 4b:62:f7:9b:73:05:e5:b3:e0:cb:6f:23:a1:c7:c9: 78:21:45:2f:5a:9a:f5:0e:88:6f:13:b0:24:c7:cd: f5:09:75:50:3d:00:11:bf:f7:dd:1a:0d:eb:29:d2: 41:a2:45:ee:5e:4d:dc:0e:87:8f:c3:29:05:e7:cb: 93:6c:ce:20:ac:b4:ab:18:eb:17:ce:c7:d8:3f:25: bb:b7:38:6e:11:ea:86:0e:00:99:ff:09:79:33:7e: 70:4c:bd:77:93:d4:be:8f:f4:ab:51:0d:c8:10:f3: e2:95:c2:34:bb:5e:48:75:ad:28:d8:48:fd:ad:48: e3:a5:88:b3:3f:b4:7b:36:55:80:be:ab:06:fe:9f: fe:a7:70:c3:1c:5f:95:ab:7c:53:61:f0:55:21:81: 0e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:95:2B:8F:42:57:5C:B1:B3:50:89:D8:3F:63:D5:CA:80:E6:97:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c530ef60-be22-3ea8-b8db-de91430c5b3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 141.158.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:5a:b9:6d:02:a4:96:4d:c2:c0:cc:a5:97:96:d8:fb:e4:da: 97:cd:8d:90:97:bb:29:c7:65:63:22:82:4c:9a:e4:19:8d:40: cf:8a:2f:ff:3c:f2:9b:93:9c:38:d8:f5:77:8a:97:25:e2:34: f1:15:f4:09:b1:ec:b3:10:f2:9b:d6:6d:ac:34:f9:f5:b0:88: 17:bd:8e:fa:9e:13:dd:4e:e4:6b:c0:6c:53:d8:ed:94:cc:d5: 0b:b5:b8:ba:12:ee:29:87:bc:8a:f6:15:74:b5:29:f6:f9:da: 6b:cf:1e:89:31:7e:f8:ca:cb:7f:50:21:3d:ca:c7:d0:7f:ca: e5:06:bd:72:83:8e:a4:da:90:6b:cf:86:83:6d:7d:15:bf:6f: b7:ad:74:03:cb:4a:68:74:7e:8f:32:6f:7a:c9:ee:98:29:95: f0:da:a3:ec:8e:7a:49:c9:44:e8:b3:c7:a8:c0:66:dc:16:39: e7:69:41:d5:cc:93:a6:5b:6d:d7:fd:af:c9:2d:c3:67:44:56: d2:f8:59:0e:95:8f:e4:bc:64:56:f9:94:b1:be:85:c9:51:29: 94:c3:b6:f8:20:07:8d:46:8c:b4:3f:5d:8d:60:9a:08:40:b9: 74:eb:a5:e2:24:11:8e:7d:ee:07:05:09:db:ba:44:52:b5:66: b4:ac:cf:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNt1xek0/prhFAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZmEzYmJlMTktMzkzNC00ZTJkLTg4Y2ItNDA5YjhkMmNhMGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CnuNa2Rp0MD4Q+mdQoaS5Xu4dpxEGIZRdjh BEo2V5601h56Hvkvn5TWCX3EU+occoFDhaV+BUbCKp2jwqiPyuRxS7ylDSNP2lLk gpyKeY6BMAp8ehJwvxdSgcB3p7teAaXo9V4P49JLYvebcwXls+DLbyOhx8l4IUUv Wpr1DohvE7Akx831CXVQPQARv/fdGg3rKdJBokXuXk3cDoePwykF58uTbM4grLSr GOsXzsfYPyW7tzhuEeqGDgCZ/wl5M35wTL13k9S+j/SrUQ3IEPPilcI0u15Ida0o 2Ej9rUjjpYizP7R7NlWAvqsG/p/+p3DDHF+Vq3xTYfBVIYEOQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKVK49CV1yxs1CJ2D9j1cqA5pc5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzUzMGVmNjAtYmUyMi0z ZWE4LWI4ZGItZGU5MTQzMGM1YjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFjZ6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJauW0CpJZNwsDMpZeW2Pvk2pfNjZCXuynHZWMigkya5BmNQM+KL/88 8puTnDjY9XeKlyXiNPEV9Amx7LMQ8pvWbaw0+fWwiBe9jvqeE91O5GvAbFPY7ZTM 1Qu1uLoS7imHvIr2FXS1Kfb52mvPHokxfvjKy39QIT3Kx9B/yuUGvXKDjqTakGvP hoNtfRW/b7etdAPLSmh0fo8yb3rJ7pgplfDao+yOeknJROizx6jAZtwWOedpQdXM k6Zbbdf9r8ktw2dEVtL4WQ6Vj+S8ZFb5lLG+hclRKZTDtvggB41GjLQ/XY1gmghA uXTrpeIkEY597gcFCdu6RFK1ZrSszwo= -----END CERTIFICATE-----Generated at Fri Oct 10 22:17:11 2025 by rpki-client