$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2aacea34-269b-3e95-a3b1-ce065f46f42d.roa File: 2aacea34-269b-3e95-a3b1-ce065f46f42d.roa (raw, json) Hash identifier: /VReMiLipPdHTkJDRwBMu3cQFWQxWAsC+X7xgsT0ja0= Subject key identifier: A5:D1:0B:64:A5:B8:FC:88:66:D5:52:18:DB:3E:AF:3F:7A:58:98:17 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B1C36DEBEDF60BE001092A400 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2aacea34-269b-3e95-a3b1-ce065f46f42d.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 701 IP address blocks: 199.202.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:de:be:df:60:be:00:10:92:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=cf54ba3f-e3b8-4702-a261-cf66b8a2c22a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:dc:f8:31:5b:88:54:f5:37:c3:b3:41:78:ff: f5:61:30:cc:2d:61:e7:e8:9e:3c:b3:29:52:74:a3: da:25:09:97:2d:87:c3:d8:7f:ad:c4:3b:aa:28:91: be:71:4b:44:94:2e:fa:b8:0b:0e:ab:9b:bb:83:5a: c7:8b:1d:01:b2:2b:16:82:ff:66:3a:69:8a:bf:7c: 7f:52:61:fc:29:38:f8:d1:c2:60:43:2c:11:ca:bf: 03:d2:e4:25:42:6b:63:e5:54:ae:11:40:ff:54:52: 8b:c2:d5:bb:9d:2c:e3:ff:8a:74:55:78:67:d8:bd: 95:1d:06:ac:87:ef:9f:08:12:83:d7:a8:4f:c9:e2: c3:58:84:88:57:05:90:af:9e:f1:a2:0c:59:66:48: 84:e8:d5:2d:5e:c1:ef:3c:59:9b:0a:84:c4:49:e5: 45:5b:57:f6:2c:1d:11:91:af:ac:44:5c:61:4b:9a: 88:82:ee:3d:a7:ad:d7:e9:84:23:7a:ce:06:03:e9: 0b:66:6a:cc:63:61:60:b5:d4:5c:f5:09:8b:85:15: 46:bf:3c:6d:fd:3d:b5:6c:e1:7d:72:f8:97:67:46: ee:c1:36:53:16:54:a2:14:b0:bf:65:42:07:35:47: aa:e7:e0:07:18:86:fa:39:84:f5:a4:f3:e5:fc:b9: 43:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D1:0B:64:A5:B8:FC:88:66:D5:52:18:DB:3E:AF:3F:7A:58:98:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2aacea34-269b-3e95-a3b1-ce065f46f42d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.202.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:24:33:5a:4f:c6:5d:51:75:eb:6f:49:60:9b:64:1b:6e:a2: 30:64:ee:51:e4:9b:2b:6e:13:05:e5:04:15:29:be:6d:d0:a7: 0e:d0:17:31:cb:77:10:98:c6:47:32:1b:c1:70:90:50:0f:3b: 5a:e4:13:60:76:2d:90:96:10:89:ab:46:36:a7:84:5a:18:fa: 4d:ea:40:a8:90:08:00:41:b5:a9:b0:9f:fd:37:e7:59:45:94: 99:3a:0a:e4:2b:7a:90:48:92:d3:1c:f4:58:46:70:c5:6b:d7: 0b:24:1e:c0:66:8f:e8:ba:1d:78:3f:16:85:81:30:46:2e:c7: e9:da:6f:a1:5c:85:7f:31:92:8e:31:6b:12:b2:ee:b8:07:3e: b1:d2:3a:09:92:40:05:7b:58:18:e0:f8:ec:73:69:fa:08:de: 8c:b0:16:b8:43:70:02:4a:19:37:0a:d9:5f:0d:a2:43:fd:2c: 0c:d4:76:dc:13:29:4a:73:68:3b:e7:b5:19:bc:6b:db:ce:55: 3d:88:fa:0c:2a:13:66:f0:b2:20:28:d9:cd:73:70:f1:82:3a: d1:0a:00:e6:8c:31:05:cb:f8:bc:fe:9c:40:2c:a0:c4:11:43: 36:a7:a1:ca:6a:f1:e9:a3:cd:ce:50:f5:65:49:82:4e:99:c1: 63:25:8c:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNt6+32C+ABCSpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk Y2Y1NGJhM2YtZTNiOC00NzAyLWEyNjEtY2Y2NmI4YTJjMjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntz4MVuIVPU3w7NBeP/1YTDMLWHn6J48sylS dKPaJQmXLYfD2H+txDuqKJG+cUtElC76uAsOq5u7g1rHix0BsisWgv9mOmmKv3x/ UmH8KTj40cJgQywRyr8D0uQlQmtj5VSuEUD/VFKLwtW7nSzj/4p0VXhn2L2VHQas h++fCBKD16hPyeLDWISIVwWQr57xogxZZkiE6NUtXsHvPFmbCoTESeVFW1f2LB0R ka+sRFxhS5qIgu49p63X6YQjes4GA+kLZmrMY2FgtdRc9QmLhRVGvzxt/T21bOF9 cviXZ0buwTZTFlSiFLC/ZUIHNUeq5+AHGIb6OYT1pPPl/LlDrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXRC2SluPyIZtVSGNs+rz96WJgXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmFhY2VhMzQtMjY5Yi0z ZTk1LWEzYjEtY2UwNjVmNDZmNDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8p0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQkM1pPxl1RdetvSWCbZBtuojBk7lHkmytuEwXlBBUpvm3Qpw7QFzHL dxCYxkcyG8FwkFAPO1rkE2B2LZCWEImrRjanhFoY+k3qQKiQCABBtamwn/0351lF lJk6CuQrepBIktMc9FhGcMVr1wskHsBmj+i6HXg/FoWBMEYux+nab6FchX8xko4x axKy7rgHPrHSOgmSQAV7WBjg+OxzafoI3oywFrhDcAJKGTcK2V8NokP9LAzUdtwT KUpzaDvntRm8a9vOVT2I+gwqE2bwsiAo2c1zcPGCOtEKAOaMMQXL+Lz+nEAsoMQR Qzanocpq8emjzc5Q9WVJgk6ZwWMljIw= -----END CERTIFICATE-----Generated at Fri Oct 10 22:13:52 2025 by rpki-client