$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/9f73b1b0-941e-3f42-871e-535df2f1c194.roa File: 9f73b1b0-941e-3f42-871e-535df2f1c194.roa (raw, json) Hash identifier: 6oxZ5rjrUMZmQnXA4HIQJgh05gWPvRHXHMOWyaLE4Fg= Subject key identifier: 87:DF:37:A5:40:DD:13:F4:7C:33:DD:0B:AF:35:80:B9:0B:0F:CF:80 Certificate issuer: /CN=60200506-e0ba-4a7d-b096-a86957fd76ee Certificate serial: 010D0C9F4328584B110C0F29560883F255871BA4 Authority key identifier: CE:43:ED:FD:A2:97:AD:00:6A:E5:9C:26:E1:DF:AC:97:8C:DF:A5:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/9f73b1b0-941e-3f42-871e-535df2f1c194.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 32157 IP address blocks: 199.212.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/60200506-e0ba-4a7d-b096-a86957fd76ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/60200506-e0ba-4a7d-b096-a86957fd76ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:0f:29:56:08:83:f2:55:87:1b:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60200506-e0ba-4a7d-b096-a86957fd76ee Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=ad944c15-bed0-4651-ac21-a31464fc42b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6b:dc:72:82:dd:4a:14:33:46:c6:cc:ef:4d: 6c:1e:f4:9e:d8:e9:74:9c:2f:aa:1c:13:a2:e5:ed: a4:5a:e3:e8:63:c4:6d:49:ec:18:ab:5b:d6:02:92: 51:b4:ac:07:7b:8e:93:e0:16:2f:ac:9b:ca:fe:cd: 9e:eb:aa:a5:3f:4a:3a:2a:b3:71:53:cb:c1:25:9a: b2:b3:74:1e:e6:71:27:01:08:d0:87:a4:a4:bc:6e: 96:da:2a:20:fb:a4:51:0f:cc:a2:7b:20:b9:12:76: a4:9c:2e:1b:a5:64:e8:c0:e7:9b:aa:cd:8f:14:e6: e9:95:e0:16:88:04:2c:68:66:ef:a2:0b:a1:32:c0: dc:85:b4:aa:af:14:e7:00:e0:48:8b:ca:79:4d:8f: 3d:1d:2d:f6:ff:1a:79:a9:5a:5a:f5:c8:5b:ae:57: b0:2f:bc:0e:08:49:32:6f:a4:da:9b:2f:1e:31:87: 31:4e:ab:24:44:ed:bb:4a:2e:bc:05:91:b3:63:a9: de:8e:b6:f5:f3:ba:f9:17:05:b8:9e:dd:3f:bb:57: 6b:e8:2c:c9:97:45:cf:23:ba:3e:4c:66:d8:1d:fc: 70:30:67:fc:aa:23:2f:99:c4:fc:0b:1e:55:ef:f7: 4a:87:8a:a7:84:52:c2:a3:71:ed:7c:b3:77:88:eb: fb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:DF:37:A5:40:DD:13:F4:7C:33:DD:0B:AF:35:80:B9:0B:0F:CF:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/9f73b1b0-941e-3f42-871e-535df2f1c194.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee/60200506-e0ba-4a7d-b096-a86957fd76ee.crl X509v3 Authority Key Identifier: keyid:CE:43:ED:FD:A2:97:AD:00:6A:E5:9C:26:E1:DF:AC:97:8C:DF:A5:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60200506-e0ba-4a7d-b096-a86957fd76ee.cer sbgp-ipAddrBlock: critical IPv4: 199.212.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:e6:f0:37:b3:f6:9e:89:40:a5:2b:4f:b9:69:4c:79:ce:2f: ee:37:90:9f:8b:4f:5a:77:66:06:80:70:d8:9a:23:50:6c:b9: 86:62:37:a5:e0:5e:e2:af:19:8e:6a:35:0e:60:8e:61:d9:a8: 28:b6:53:cb:7c:d2:83:2b:39:c3:bc:45:ab:2a:a5:56:ff:63: af:8e:41:88:3e:eb:81:cf:6d:8c:f1:6b:31:80:bc:10:12:a2: e3:87:db:63:15:ff:d6:c6:8f:b0:db:02:49:ca:0e:c1:6f:19: 08:1a:26:05:22:b8:56:09:5b:ed:ee:c8:e0:e1:42:b3:4b:b8: 8e:a5:92:c8:63:f2:ae:c9:86:5a:ed:a1:01:07:70:c3:87:e2: 63:ef:43:83:24:dd:e6:ad:62:f2:3e:4c:61:65:55:60:34:42: 07:ba:1c:d3:41:21:c8:e4:01:66:2f:e4:98:09:d9:5d:9e:09: 65:58:b7:fa:82:da:ab:bb:95:80:ed:0a:a3:c8:12:98:79:f5: 89:92:67:0c:6c:63:c1:f7:4b:e2:de:6b:ca:51:35:4a:c2:ac: d9:94:a4:40:44:34:71:7c:b5:85:22:70:e1:9d:3f:f9:0c:67: f9:19:4c:6b:a7:27:d6:8f:a4:fb:5c:9a:c0:6b:23:31:bf:65: a8:3f:33:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRDA8pVgiD8lWHG6QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAyMDA1MDYtZTBiYS00YTdkLWIwOTYtYTg2OTU3ZmQ3 NmVlMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk YWQ5NDRjMTUtYmVkMC00NjUxLWFjMjEtYTMxNDY0ZmM0MmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomvccoLdShQzRsbM701sHvSe2Ol0nC+qHBOi 5e2kWuPoY8RtSewYq1vWApJRtKwHe46T4BYvrJvK/s2e66qlP0o6KrNxU8vBJZqy s3Qe5nEnAQjQh6SkvG6W2iog+6RRD8yieyC5EnaknC4bpWTowOebqs2PFObpleAW iAQsaGbvoguhMsDchbSqrxTnAOBIi8p5TY89HS32/xp5qVpa9chbrlewL7wOCEky b6Tamy8eMYcxTqskRO27Si68BZGzY6nejrb187r5FwW4nt0/u1dr6CzJl0XPI7o+ TGbYHfxwMGf8qiMvmcT8Cx5V7/dKh4qnhFLCo3HtfLN3iOv75wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIffN6VA3RP0fDPdC681gLkLD8+AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82MDIw MDUwNi1lMGJhLTRhN2QtYjA5Ni1hODY5NTdmZDc2ZWUvOWY3M2IxYjAtOTQxZS0z ZjQyLTg3MWUtNTM1ZGYyZjFjMTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjAyMDA1MDYtZTBiYS00YTdkLWIw OTYtYTg2OTU3ZmQ3NmVlLzYwMjAwNTA2LWUwYmEtNGE3ZC1iMDk2LWE4Njk1N2Zk NzZlZS5jcmwwHwYDVR0jBBgwFoAUzkPt/aKXrQBq5Zwm4d+sl4zfpTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82MDIwMDUwNi1lMGJhLTRhN2QtYjA5Ni1hODY5 NTdmZDc2ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx9QIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInm8Dez9p6JQKUrT7lpTHnOL+43kJ+LT1p3ZgaAcNiaI1BsuYZiN6Xg XuKvGY5qNQ5gjmHZqCi2U8t80oMrOcO8RasqpVb/Y6+OQYg+64HPbYzxazGAvBAS ouOH22MV/9bGj7DbAknKDsFvGQgaJgUiuFYJW+3uyODhQrNLuI6lkshj8q7Jhlrt oQEHcMOH4mPvQ4Mk3eatYvI+TGFlVWA0Qge6HNNBIcjkAWYv5JgJ2V2eCWVYt/qC 2qu7lYDtCqPIEph59YmSZwxsY8H3S+Lea8pRNUrCrNmUpEBENHF8tYUicOGdP/kM Z/kZTGunJ9aPpPtcmsBrIzG/Zag/M0g= -----END CERTIFICATE-----Generated at Wed Oct 8 23:13:27 2025 by rpki-client