$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/d651495b-6e08-3d81-a928-b517cd0cd4f0.roa File: d651495b-6e08-3d81-a928-b517cd0cd4f0.roa (raw, json) Hash identifier: V0uzpTKGsjI7rDYeYixLYcwoOf0h5hWzbjok5aDMrek= Subject key identifier: 6F:D6:E8:0A:EB:FD:C9:C5:29:E2:0B:64:49:B4:5A:EC:85:29:EC:DF Certificate issuer: /CN=29c10060-705c-45ae-937b-544864b670d7 Certificate serial: 010D0C9F4328584B84E76F2727FEA6D9C77E1F80 Authority key identifier: 7A:BB:A3:47:4B:89:BD:BD:31:F7:17:B2:DC:02:B2:94:A1:2E:0B:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/d651495b-6e08-3d81-a928-b517cd0cd4f0.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 27229 IP address blocks: 64.71.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:6f:27:27:fe:a6:d9:c7:7e:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29c10060-705c-45ae-937b-544864b670d7 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=5801e048-76de-4a0b-aff7-01ec63de30fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:54:94:d3:38:bf:23:15:f5:08:fc:67:6b:30: 63:fb:7a:8f:eb:c1:25:8f:2e:8e:1b:69:92:1b:72: de:6e:9e:0f:99:cf:8c:7e:e3:a2:79:14:fa:36:cf: 60:bc:f7:71:97:b4:1c:da:5e:6b:de:a1:86:a9:5e: 60:c4:bc:23:e0:2c:b3:a4:8f:e3:33:01:62:c9:95: 29:03:3d:79:38:c8:fc:3d:27:3a:6a:23:be:84:2b: 91:bf:c4:6e:62:7c:6f:32:ba:a2:0f:b3:ce:c0:5c: 50:e6:f6:ac:9c:98:17:b0:ba:a2:8f:f3:4a:38:18: 00:bd:45:e9:4f:a6:cc:27:7b:41:1e:e1:91:35:6c: 10:b4:d8:62:cc:8f:ca:f1:0e:a6:2a:5d:31:1e:cd: c4:eb:53:6d:3a:de:43:84:a8:c2:7e:23:fc:04:52: 25:03:e7:76:1b:76:5f:18:8f:7b:14:a2:6b:fb:ea: 08:c8:30:7c:db:47:73:89:1a:38:b0:5a:ed:54:18: 97:e5:ef:78:a9:41:f6:4e:26:d4:cf:24:f2:4e:2e: b9:15:f9:1b:cb:00:99:ae:54:e7:ce:7d:fe:e2:0b: e0:86:32:e0:1f:a1:d2:38:8b:58:c9:46:1d:91:71: cb:77:df:a3:4e:ab:44:bb:d4:b6:d9:97:77:29:d4: bc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D6:E8:0A:EB:FD:C9:C5:29:E2:0B:64:49:B4:5A:EC:85:29:EC:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/d651495b-6e08-3d81-a928-b517cd0cd4f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7/29c10060-705c-45ae-937b-544864b670d7.crl X509v3 Authority Key Identifier: keyid:7A:BB:A3:47:4B:89:BD:BD:31:F7:17:B2:DC:02:B2:94:A1:2E:0B:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29c10060-705c-45ae-937b-544864b670d7.cer sbgp-ipAddrBlock: critical IPv4: 64.71.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:18:46:84:a0:0e:3e:86:25:92:b4:2e:47:df:0e:fe:66:20: 43:e0:8c:eb:e6:62:b2:a2:28:26:bb:1f:af:f4:2c:5a:2e:97: 3c:e2:56:c1:35:07:0b:d3:00:9e:7b:1d:0f:1e:57:76:d3:6f: 20:b6:73:ed:12:05:2a:f9:ff:a3:97:57:96:15:07:75:fb:c1: df:72:aa:eb:34:15:12:b0:e9:db:76:12:a1:13:f6:66:d6:92: a2:17:82:10:d8:f0:c4:eb:e6:56:01:40:89:b7:53:26:dc:bd: ad:9c:b0:26:bb:60:33:54:ff:db:87:99:7b:ae:b9:35:9a:b2: ce:73:64:94:1b:e3:7d:3b:3a:12:32:78:0b:b0:80:24:a2:9d: 48:bd:cb:ba:0f:c3:54:d9:60:5b:59:c2:d2:7a:91:23:32:cb: be:a6:6b:12:12:32:79:d4:55:d4:82:18:a1:14:aa:45:45:aa: ae:06:d9:30:99:c5:bb:75:21:84:77:c6:43:01:3a:de:43:69: a5:f1:f9:ff:e5:bc:e2:8b:1a:2c:91:11:b1:3c:c7:36:9f:f9: 9b:e8:9f:24:ea:0f:b4:da:fa:c5:ca:2b:35:4d:f5:ad:fe:7c: 9a:ca:19:82:b7:ed:50:2d:59:1b:0b:28:2c:5a:03:dc:71:0c: 85:93:82:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE528nJ/6m2cd+H4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjljMTAwNjAtNzA1Yy00NWFlLTkzN2ItNTQ0ODY0YjY3 MGQ3MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NTgwMWUwNDgtNzZkZS00YTBiLWFmZjctMDFlYzYzZGUzMGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlSU0zi/IxX1CPxnazBj+3qP68Eljy6OG2mS G3Lebp4Pmc+MfuOieRT6Ns9gvPdxl7Qc2l5r3qGGqV5gxLwj4CyzpI/jMwFiyZUp Az15OMj8PSc6aiO+hCuRv8RuYnxvMrqiD7POwFxQ5vasnJgXsLqij/NKOBgAvUXp T6bMJ3tBHuGRNWwQtNhizI/K8Q6mKl0xHs3E61NtOt5DhKjCfiP8BFIlA+d2G3Zf GI97FKJr++oIyDB820dziRo4sFrtVBiX5e94qUH2TibUzyTyTi65FfkbywCZrlTn zn3+4gvghjLgH6HSOItYyUYdkXHLd9+jTqtEu9S22Zd3KdS8dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/W6Arr/cnFKeILZEm0WuyFKezfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWMx MDA2MC03MDVjLTQ1YWUtOTM3Yi01NDQ4NjRiNjcwZDcvZDY1MTQ5NWItNmUwOC0z ZDgxLWE5MjgtYjUxN2NkMGNkNGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjljMTAwNjAtNzA1Yy00NWFlLTkz N2ItNTQ0ODY0YjY3MGQ3LzI5YzEwMDYwLTcwNWMtNDVhZS05MzdiLTU0NDg2NGI2 NzBkNy5jcmwwHwYDVR0jBBgwFoAUerujR0uJvb0x9xey3AKylKEuC8MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWMxMDA2MC03MDVjLTQ1YWUtOTM3Yi01NDQ4 NjRiNjcwZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEfuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKwYRoSgDj6GJZK0LkffDv5mIEPgjOvmYrKiKCa7H6/0LFoulzziVsE1 BwvTAJ57HQ8eV3bTbyC2c+0SBSr5/6OXV5YVB3X7wd9yqus0FRKw6dt2EqET9mbW kqIXghDY8MTr5lYBQIm3Uybcva2csCa7YDNU/9uHmXuuuTWass5zZJQb4307OhIy eAuwgCSinUi9y7oPw1TZYFtZwtJ6kSMyy76maxISMnnUVdSCGKEUqkVFqq4G2TCZ xbt1IYR3xkMBOt5DaaXx+f/lvOKLGiyREbE8xzaf+ZvonyTqD7Ta+sXKKzVN9a3+ fJrKGYK37VAtWRsLKCxaA9xxDIWTguM= -----END CERTIFICATE-----Generated at Mon Oct 20 18:19:23 2025 by rpki-client