$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b694c80-6d3f-3d00-be84-82497d04a39a.roa File: 3b694c80-6d3f-3d00-be84-82497d04a39a.roa (raw, json) Hash identifier: RBoBAo2TRhSnYg3QFvgnCDSwSe76QWdYtCxiP3GQNZk= Subject key identifier: A2:69:8A:90:0B:BC:45:38:6F:65:FC:8F:64:42:FE:D4:27:7F:65:83 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B4A47372A8A0B92C636F2AE20 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b694c80-6d3f-3d00-be84-82497d04a39a.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 17119 IP address blocks: 208.218.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:37:2a:8a:0b:92:c6:36:f2:ae:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=74890b14-608c-4a16-a1f4-7043e8d710c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:83:68:1c:a7:0d:5c:ce:0a:b2:37:88:be:f8: 09:6e:93:5a:07:1a:15:97:bb:53:55:d5:88:c5:c2: 57:da:df:72:ca:f9:4c:62:bd:51:d9:6e:2e:53:38: c0:cc:f9:a2:64:c0:3b:80:3c:c1:47:7f:e6:c8:ae: 92:82:19:b3:45:c9:34:f5:8d:0e:6b:05:dd:d7:00: e9:ea:7f:6a:c9:66:28:47:d0:bd:32:6b:eb:68:aa: a1:47:3c:de:46:44:cf:c4:83:12:60:b1:08:62:be: ba:99:a6:0c:48:35:06:d6:48:8e:45:47:68:3a:59: dd:b4:a4:9b:27:25:d6:c1:97:47:4f:90:69:c0:c3: 13:9a:c3:4d:17:57:1b:56:8c:d3:82:78:a0:1a:22: 31:aa:9e:9b:9c:15:c0:ff:ae:50:1a:f7:49:94:c0: 32:93:69:8b:a2:ae:30:47:48:83:63:9c:4d:50:c8: 0e:57:63:dc:d1:7e:6f:97:71:c9:3c:64:4b:96:9d: f8:73:65:25:50:68:1b:61:ea:33:14:4e:c6:c2:bd: 35:b5:6c:c2:55:cc:b1:5b:e9:7e:98:5e:59:a9:23: ec:21:7f:51:ac:25:2e:ef:ae:27:81:b5:4c:4e:c8: 97:46:30:ac:12:0c:bf:7d:05:ed:f9:92:cc:91:14: ec:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:69:8A:90:0B:BC:45:38:6F:65:FC:8F:64:42:FE:D4:27:7F:65:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b694c80-6d3f-3d00-be84-82497d04a39a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.218.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:c0:fd:3a:db:55:9e:6a:82:61:73:d8:8f:dc:ec:e8:e9:df: e9:a4:6a:c8:8a:f9:16:7e:cd:22:e4:cb:4a:fe:e4:81:6c:df: 1d:bb:b9:00:18:bb:79:11:9c:eb:3b:68:e6:3b:36:75:d7:7a: e7:fb:75:bc:d9:ae:c2:91:19:d8:36:f2:e2:84:50:95:55:c2: 04:01:ec:3e:8a:ab:1b:00:32:1e:0f:e6:e3:18:aa:6a:35:af: 76:50:26:2d:5b:4d:e0:3a:1f:fd:3f:e4:56:b1:04:df:c5:e8: e3:1b:48:70:07:22:ea:dc:91:1b:e0:04:4f:61:0c:55:46:84: 90:5f:0f:e0:e2:2b:e6:0d:c9:14:d7:7a:65:03:ae:e7:70:ff: 8c:c3:7d:8a:64:9b:71:cc:cd:33:62:05:c5:fe:77:cb:b1:2b: 06:68:85:f9:8f:38:f8:86:b6:73:d4:b4:bc:d0:88:9f:cb:de: 8f:00:a9:e8:dc:2b:fb:c6:aa:be:dc:f8:f9:cf:1e:1f:1b:4c: 90:ed:10:4d:1f:54:26:be:cc:d9:81:80:13:50:02:d8:17:5b: dd:ec:70:62:65:f2:d5:d9:ef:5e:1c:06:36:8d:96:c9:64:b7: d9:90:cc:ca:48:cf:16:b0:6f:25:56:4b:3a:47:f8:cb:c5:50: ad:e9:28:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRzcqiguSxjbyriAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk NzQ4OTBiMTQtNjA4Yy00YTE2LWExZjQtNzA0M2U4ZDcxMGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8INoHKcNXM4KsjeIvvgJbpNaBxoVl7tTVdWI xcJX2t9yyvlMYr1R2W4uUzjAzPmiZMA7gDzBR3/myK6SghmzRck09Y0OawXd1wDp 6n9qyWYoR9C9MmvraKqhRzzeRkTPxIMSYLEIYr66maYMSDUG1kiORUdoOlndtKSb JyXWwZdHT5BpwMMTmsNNF1cbVozTgnigGiIxqp6bnBXA/65QGvdJlMAyk2mLoq4w R0iDY5xNUMgOV2Pc0X5vl3HJPGRLlp34c2UlUGgbYeozFE7Gwr01tWzCVcyxW+l+ mF5ZqSPsIX9RrCUu764ngbVMTsiXRjCsEgy/fQXt+ZLMkRTswwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJpipALvEU4b2X8j2RC/tQnf2WDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2I2OTRjODAtNmQzZi0z ZDAwLWJlODQtODI0OTdkMDRhMzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0NrRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbA/TrbVZ5qgmFz2I/c7Ojp3+mkasiK+RZ+zSLky0r+5IFs3x27uQAY u3kRnOs7aOY7NnXXeuf7dbzZrsKRGdg28uKEUJVVwgQB7D6KqxsAMh4P5uMYqmo1 r3ZQJi1bTeA6H/0/5FaxBN/F6OMbSHAHIurckRvgBE9hDFVGhJBfD+DiK+YNyRTX emUDrudw/4zDfYpkm3HMzTNiBcX+d8uxKwZohfmPOPiGtnPUtLzQiJ/L3o8Aqejc K/vGqr7c+PnPHh8bTJDtEE0fVCa+zNmBgBNQAtgXW93scGJl8tXZ714cBjaNlslk t9mQzMpIzxawbyVWSzpH+MvFUK3pKEQ= -----END CERTIFICATE-----Generated at Fri Oct 10 22:13:58 2025 by rpki-client