$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/22ffa8f4-e794-3a66-89df-98333aa3af9f.roa File: 22ffa8f4-e794-3a66-89df-98333aa3af9f.roa (raw, json) Hash identifier: ZRjEXusn9/ZAwZssYbSBc2FIOqAHFRnQWetVrvdmyvw= Subject key identifier: 62:2D:14:A3:C3:DF:34:6E:62:85:AB:FF:FC:6A:80:F4:29:6D:50:6B Certificate issuer: /CN=29c10060-705c-45ae-937b-544864b670d7 Certificate serial: 010D0C9F4328584B84E76EF178FEFD963C3B2880 Authority key identifier: 7A:BB:A3:47:4B:89:BD:BD:31:F7:17:B2:DC:02:B2:94:A1:2E:0B:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/22ffa8f4-e794-3a66-89df-98333aa3af9f.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 14618 IP address blocks: 64.71.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:6e:f1:78:fe:fd:96:3c:3b:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29c10060-705c-45ae-937b-544864b670d7 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=7c437c66-0f3b-4aa1-9a58-9693e3a01e11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:94:bc:15:70:99:17:eb:76:cb:ee:29:1a:9a: 11:25:39:37:a7:bf:48:66:b6:a1:95:62:4d:a9:6c: d4:95:b1:47:29:dd:ae:eb:3a:5c:85:d0:94:63:23: b9:35:e1:83:07:f3:f1:ad:bf:06:67:40:32:ee:48: 77:ac:3c:5e:f8:53:d2:50:4d:ec:97:7f:9b:8a:56: 4a:47:6b:3b:47:8b:66:c3:1d:0d:b3:71:a0:d8:a2: a0:52:ee:1d:c9:29:6c:6a:be:66:5b:df:81:c3:48: 13:3f:67:fe:47:a3:1d:1e:77:3a:ec:c1:5c:3d:a8: 39:8a:d0:c2:2b:da:f0:e7:50:f7:a2:f5:e4:2d:d9: 19:9c:ee:ba:ed:e4:97:83:1e:53:62:fe:8d:94:fe: 2f:bc:20:62:d6:e6:d5:c5:72:87:2b:84:b4:90:19: 20:f2:64:ce:d8:cf:15:47:ab:0f:68:a4:e3:69:d8: 15:76:2c:bc:35:c5:af:df:2b:5b:10:4c:c7:b9:e3: bd:e2:01:f8:8e:bf:01:38:bc:69:3f:c6:c5:08:ae: d2:aa:72:37:1a:2e:c5:64:5c:65:ca:65:1e:b1:f8: c1:7a:73:d7:31:c8:cc:8c:2e:71:cd:f7:e6:3b:57: e7:69:dc:11:de:96:52:0b:ce:00:f6:43:e8:8c:6a: 50:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:2D:14:A3:C3:DF:34:6E:62:85:AB:FF:FC:6A:80:F4:29:6D:50:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/22ffa8f4-e794-3a66-89df-98333aa3af9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.crl X509v3 Authority Key Identifier: keyid:7A:BB:A3:47:4B:89:BD:BD:31:F7:17:B2:DC:02:B2:94:A1:2E:0B:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer sbgp-ipAddrBlock: critical IPv4: 64.71.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:06:d8:09:c4:b0:cc:c2:83:53:f8:a5:41:c0:3d:f4:c8:9f: fa:d1:b8:1b:26:bb:d7:bf:e5:ac:47:a7:e4:15:dd:92:c0:87: b9:78:d7:e9:95:96:24:d3:f3:6c:30:c2:0d:5f:95:8d:40:f2: b3:e2:08:36:84:96:99:ae:c5:d8:e0:da:17:b9:62:89:20:dc: bd:a8:ae:65:f7:95:8b:da:20:ce:89:31:3f:ee:06:b8:95:10: 9e:bd:ec:ce:7a:15:43:e4:81:06:bc:95:7a:9c:58:69:a9:1b: f0:e6:9b:23:47:aa:c2:a2:72:fb:5c:3d:24:bd:b5:6a:f5:bd: 04:93:d6:31:0a:e4:49:68:54:c6:af:f2:62:fe:24:3b:db:02: df:fb:ef:81:36:d1:41:ec:a5:56:2d:c0:84:2c:69:54:84:8d: e4:79:fc:93:58:a8:b9:61:31:5f:c2:a9:bb:7b:91:28:82:09: f4:af:14:62:ec:ef:88:23:0f:cd:22:4e:7f:b6:af:8a:04:94: a8:2d:5a:4a:33:df:f2:75:4e:15:41:43:dd:1d:af:da:14:d0: cc:ba:31:82:e3:fa:f9:8b:dd:a8:e2:27:dd:cf:98:d6:11:aa: 79:68:23:f8:cb:54:5f:5c:39:6b:b3:24:1c:89:a8:a9:b2:38: 05:d5:4c:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE527xeP79ljw7KIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjljMTAwNjAtNzA1Yy00NWFlLTkzN2ItNTQ0ODY0YjY3 MGQ3MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk N2M0MzdjNjYtMGYzYi00YWExLTlhNTgtOTY5M2UzYTAxZTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJS8FXCZF+t2y+4pGpoRJTk3p79IZrahlWJN qWzUlbFHKd2u6zpchdCUYyO5NeGDB/Pxrb8GZ0Ay7kh3rDxe+FPSUE3sl3+bilZK R2s7R4tmwx0Ns3Gg2KKgUu4dySlsar5mW9+Bw0gTP2f+R6MdHnc67MFcPag5itDC K9rw51D3ovXkLdkZnO667eSXgx5TYv6NlP4vvCBi1ubVxXKHK4S0kBkg8mTO2M8V R6sPaKTjadgVdiy8NcWv3ytbEEzHueO94gH4jr8BOLxpP8bFCK7SqnI3Gi7FZFxl ymUesfjBenPXMcjMjC5xzffmO1fnadwR3pZSC84A9kPojGpQAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGItFKPD3zRuYoWr//xqgPQpbVBrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWMx MDA2MC03MDVjLTQ1YWUtOTM3Yi01NDQ4NjRiNjcwZDcvMjJmZmE4ZjQtZTc5NC0z YTY2LTg5ZGYtOTgzMzNhYTNhZjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjljMTAwNjAtNzA1Yy00NWFlLTkz N2ItNTQ0ODY0YjY3MGQ3LzI5YzEwMDYwLTcwNWMtNDVhZS05MzdiLTU0NDg2NGI2 NzBkNy5jcmwwHwYDVR0jBBgwFoAUerujR0uJvb0x9xey3AKylKEuC8MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWMxMDA2MC03MDVjLTQ1YWUtOTM3Yi01NDQ4 NjRiNjcwZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEfuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAG2AnEsMzCg1P4pUHAPfTIn/rRuBsmu9e/5axHp+QV3ZLAh7l41+mV liTT82wwwg1flY1A8rPiCDaElpmuxdjg2he5Yokg3L2ormX3lYvaIM6JMT/uBriV EJ697M56FUPkgQa8lXqcWGmpG/DmmyNHqsKicvtcPSS9tWr1vQST1jEK5EloVMav 8mL+JDvbAt/774E20UHspVYtwIQsaVSEjeR5/JNYqLlhMV/Cqbt7kSiCCfSvFGLs 74gjD80iTn+2r4oElKgtWkoz3/J1ThVBQ90dr9oU0My6MYLj+vmL3ajiJ93PmNYR qnloI/jLVF9cOWuzJByJqKmyOAXVTLc= -----END CERTIFICATE-----Generated at Mon Oct 20 04:07:53 2025 by rpki-client