$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1eb0bc86-2aba-3c9d-8a75-c5b005e634ab.roa File: 1eb0bc86-2aba-3c9d-8a75-c5b005e634ab.roa (raw, json) Hash identifier: 6yvpKZfis60Ji8SSyLZ8GVAeRbW+gz5OC0GszkEuaF8= Subject key identifier: 4C:77:54:CA:94:5E:90:F1:81:87:32:21:02:13:53:AB:4D:A8:2E:75 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B1C36D78532F0DA066D0B9F40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1eb0bc86-2aba-3c9d-8a75-c5b005e634ab.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 0 IP address blocks: 208.217.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:d7:85:32:f0:da:06:6d:0b:9f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=dc78d537-9af6-4fb9-a050-fb44c40090a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:aa:a5:08:90:19:5c:e5:99:66:66:9f:b1:fc: 67:9f:7b:01:40:6d:e4:5e:db:74:10:26:23:4e:14: 4a:02:2e:e3:29:d9:07:14:4a:a8:3e:9e:69:02:93: f4:fa:71:99:14:78:d4:c1:2e:58:4a:f9:fb:30:fa: dc:42:89:e7:e8:32:c3:59:5c:f0:60:27:61:18:63: e1:ee:92:61:ba:09:85:db:55:50:e8:aa:f2:d0:81: fc:85:a6:24:02:82:c4:c6:17:8d:6e:fd:b4:15:06: af:a1:f1:5f:6e:e1:5d:f5:4b:89:aa:3e:8b:63:c8: b7:cf:99:d3:c8:04:ee:e8:85:b6:89:fe:1e:81:31: 11:8f:8d:53:0e:2a:b3:32:4a:a2:39:4e:11:6f:44: 33:22:b2:7a:8a:4a:fa:01:c5:8e:58:ea:d3:38:ab: 57:d1:dc:f9:09:e7:15:26:61:1b:a8:ec:3a:ea:6f: e7:5f:31:9e:58:91:14:a9:21:59:5d:9d:42:9e:90: 66:62:b7:ea:ed:d6:7e:6a:a6:37:67:7e:20:ed:0f: 88:0e:78:58:56:05:e9:49:a7:85:f7:4c:90:d5:e4: fc:5d:db:1a:18:4f:b7:05:74:e7:c3:a8:9a:83:7b: e1:75:48:7a:3c:2e:b1:ed:b4:8b:e7:2d:40:46:2d: 51:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:77:54:CA:94:5E:90:F1:81:87:32:21:02:13:53:AB:4D:A8:2E:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1eb0bc86-2aba-3c9d-8a75-c5b005e634ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.217.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:e1:f7:86:29:85:3f:d5:37:d2:d7:de:10:25:5b:a1:8a:44: df:6b:8f:45:36:27:d8:01:52:24:20:bd:30:5c:17:84:a6:36: e6:4c:d2:b9:1c:c4:96:7a:be:3f:90:6f:f8:d4:4e:eb:d9:86: dd:89:12:37:21:b0:cc:04:db:93:ff:83:b5:53:57:69:25:f0: 32:b9:5e:c4:ce:39:f8:57:c9:aa:02:13:69:bc:23:d5:22:76: 76:7f:84:18:01:21:e2:28:d9:d3:c0:37:e7:41:34:72:4b:0b: d6:22:f6:25:44:5c:40:d7:78:ee:a7:ad:43:b8:aa:db:42:e9: c9:d6:f8:b0:2f:94:0a:f6:81:29:3e:c2:92:50:35:b8:15:e9: 4c:7c:a2:14:da:41:00:f6:8d:89:16:53:05:26:4c:5f:37:7c: 91:af:8b:ed:1e:45:8a:f0:8a:ae:cf:cb:e4:49:b0:bb:92:ff: 36:f7:77:73:9c:ca:13:7e:d6:4f:0e:0e:ff:54:c2:4d:57:6e: 54:95:4d:01:0c:49:2f:32:25:c2:9b:d5:e8:20:1e:98:f7:c9: cb:f1:cb:e2:c1:93:78:d9:e1:67:8b:e9:9b:c7:83:4a:2d:0f: 28:54:37:ec:de:7f:36:fa:a5:74:b2:4a:34:36:45:c8:f9:de: d9:75:4e:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNteFMvDaBm0Ln0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZGM3OGQ1MzctOWFmNi00ZmI5LWEwNTAtZmI0NGM0MDA5MGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqqlCJAZXOWZZmafsfxnn3sBQG3kXtt0ECYj ThRKAi7jKdkHFEqoPp5pApP0+nGZFHjUwS5YSvn7MPrcQonn6DLDWVzwYCdhGGPh 7pJhugmF21VQ6Kry0IH8haYkAoLExheNbv20FQavofFfbuFd9UuJqj6LY8i3z5nT yATu6IW2if4egTERj41TDiqzMkqiOU4Rb0QzIrJ6ikr6AcWOWOrTOKtX0dz5CecV JmEbqOw66m/nXzGeWJEUqSFZXZ1CnpBmYrfq7dZ+aqY3Z34g7Q+IDnhYVgXpSaeF 90yQ1eT8XdsaGE+3BXTnw6iag3vhdUh6PC6x7bSL5y1ARi1RoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEx3VMqUXpDxgYcyIQITU6tNqC51MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWViMGJjODYtMmFiYS0z YzlkLThhNzUtYzViMDA1ZTYzNGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0NkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLh94YphT/VN9LX3hAlW6GKRN9rj0U2J9gBUiQgvTBcF4SmNuZM0rkc xJZ6vj+Qb/jUTuvZht2JEjchsMwE25P/g7VTV2kl8DK5XsTOOfhXyaoCE2m8I9Ui dnZ/hBgBIeIo2dPAN+dBNHJLC9Yi9iVEXEDXeO6nrUO4qttC6cnW+LAvlAr2gSk+ wpJQNbgV6Ux8ohTaQQD2jYkWUwUmTF83fJGvi+0eRYrwiq7Py+RJsLuS/zb3d3Oc yhN+1k8ODv9Uwk1XblSVTQEMSS8yJcKb1eggHpj3ycvxy+LBk3jZ4WeL6ZvHg0ot DyhUN+zefzb6pXSySjQ2Rcj53tl1Tvs= -----END CERTIFICATE-----Generated at Sat Oct 11 00:03:05 2025 by rpki-client