$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2c13cb96-ba3a-3ca5-bb27-2f23040fa77d.roa File: 2c13cb96-ba3a-3ca5-bb27-2f23040fa77d.roa (raw, json) Hash identifier: t8LCWtLDXykAai3ew90pBtcLGsoZIPD8JLnhvXwfi6g= Subject key identifier: 59:59:C7:35:FF:8B:26:F2:A7:F1:10:3F:81:3E:06:C9:F6:85:A3:CF Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B4A4715897A0BA7E228502A00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2c13cb96-ba3a-3ca5-bb27-2f23040fa77d.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 0 IP address blocks: 208.221.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:15:89:7a:0b:a7:e2:28:50:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=449a2587-f251-4459-8123-517f9e26c8bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3f:29:3b:4f:ea:ce:57:85:ba:ba:6c:56:fe: f4:d4:a5:f2:23:11:e3:3c:8a:4f:2d:b2:d8:3b:a8: 38:23:8a:12:24:95:bf:12:3e:0c:c0:b4:61:c5:f7: f4:05:d6:8d:2e:46:03:8a:69:4e:9f:34:59:85:0c: e4:6a:38:2d:78:29:43:97:a4:44:5e:87:a7:a6:7b: c0:87:67:26:e5:0d:94:16:3e:ba:4c:76:e0:08:92: 44:ad:bc:81:28:23:bd:96:4c:0d:f2:44:43:48:a8: 30:15:5e:ab:d4:38:50:cd:98:a8:9e:b2:1d:a4:d5: b8:88:61:38:0e:d2:14:d3:8a:66:04:74:c0:a8:8f: 27:cb:4d:ea:b6:45:1e:79:93:a5:c5:bb:72:f3:c7: 72:a2:36:3c:6b:79:ea:26:21:16:06:57:27:44:29: f3:70:3d:08:21:5e:ec:1c:bc:00:f4:b7:7d:e6:77: 27:b7:b7:d5:47:3a:90:f9:10:93:44:45:ff:c0:3d: ef:6e:03:de:4a:38:d0:86:4e:1b:e2:45:ea:30:5e: 15:80:f0:dc:b0:d0:62:a4:ab:b2:a9:92:f4:02:85: 0b:25:c4:15:d0:dd:1b:fc:30:ab:bb:ea:16:f4:f1: c5:1e:b0:06:c9:a7:e8:46:66:1a:2c:b1:51:b8:0a: 9e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:59:C7:35:FF:8B:26:F2:A7:F1:10:3F:81:3E:06:C9:F6:85:A3:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2c13cb96-ba3a-3ca5-bb27-2f23040fa77d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.221.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:d8:f2:91:95:13:07:63:09:f6:dc:b8:a5:79:d9:a5:eb:d7: 5c:e1:e3:88:4c:a2:fa:72:53:38:eb:51:f4:d8:d3:e9:6a:6c: c3:ce:06:d5:51:18:0e:4a:dd:e5:48:e6:22:ab:9b:d2:2b:97: cc:88:48:fc:84:df:30:56:55:d2:be:86:02:20:f9:d8:c3:d5: 00:61:31:f4:bd:37:c3:89:92:57:6f:79:fc:c9:62:d9:86:2d: a2:5c:30:77:a6:eb:35:bf:54:a7:ca:2b:7a:5d:54:75:47:6f: 4d:ac:cf:a8:23:d0:5b:ec:f5:a7:4d:82:fa:d9:4d:fb:98:95: 37:66:0c:26:90:26:c0:9b:b7:1c:a3:cf:af:ed:35:35:e6:6c: 34:b0:b1:59:3a:66:6e:97:8b:e7:67:b2:66:7c:90:3d:64:70: f6:c0:94:42:27:98:20:09:c9:3e:5c:9c:e7:14:cf:b8:f9:2e: 0e:70:71:c3:aa:94:cd:b5:78:a5:7d:45:e4:b5:1b:be:65:25: 52:5d:46:4f:50:f9:de:75:9c:00:dd:6c:dc:46:fe:3d:87:02: 85:b4:93:78:7a:62:75:ca:01:e2:e5:c2:9c:3c:6b:83:39:88: 9b:fe:3d:fd:c5:04:58:b7:54:88:70:c0:91:b1:50:3a:30:78: 3d:ed:87:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRxWJegun4ihQKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk NDQ5YTI1ODctZjI1MS00NDU5LTgxMjMtNTE3ZjllMjZjOGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz8pO0/qzleFurpsVv701KXyIxHjPIpPLbLY O6g4I4oSJJW/Ej4MwLRhxff0BdaNLkYDimlOnzRZhQzkajgteClDl6REXoenpnvA h2cm5Q2UFj66THbgCJJErbyBKCO9lkwN8kRDSKgwFV6r1DhQzZionrIdpNW4iGE4 DtIU04pmBHTAqI8ny03qtkUeeZOlxbty88dyojY8a3nqJiEWBlcnRCnzcD0IIV7s HLwA9Ld95ncnt7fVRzqQ+RCTREX/wD3vbgPeSjjQhk4b4kXqMF4VgPDcsNBipKuy qZL0AoULJcQV0N0b/DCru+oW9PHFHrAGyafoRmYaLLFRuAqe2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlZxzX/iybyp/EQP4E+Bsn2haPPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmMxM2NiOTYtYmEzYS0z Y2E1LWJiMjctMmYyMzA0MGZhNzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0N0wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKrY8pGVEwdjCfbcuKV52aXr11zh44hMovpyUzjrUfTY0+lqbMPOBtVR GA5K3eVI5iKrm9Irl8yISPyE3zBWVdK+hgIg+djD1QBhMfS9N8OJkldvefzJYtmG LaJcMHem6zW/VKfKK3pdVHVHb02sz6gj0Fvs9adNgvrZTfuYlTdmDCaQJsCbtxyj z6/tNTXmbDSwsVk6Zm6Xi+dnsmZ8kD1kcPbAlEInmCAJyT5cnOcUz7j5Lg5wccOq lM21eKV9ReS1G75lJVJdRk9Q+d51nADdbNxG/j2HAoW0k3h6YnXKAeLlwpw8a4M5 iJv+Pf3FBFi3VIhwwJGxUDoweD3thxU= -----END CERTIFICATE-----Generated at Fri Oct 10 20:00:28 2025 by rpki-client