$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4331ce79-c65e-3c2c-b7bf-82996f3dd211.roa File: 4331ce79-c65e-3c2c-b7bf-82996f3dd211.roa (raw, json) Hash identifier: EDQsRGLR7hsVNhjPgXl1Q/9t0Mo6IE5nxk2wyINSqho= Subject key identifier: EE:CA:D5:25:8F:5E:F9:FB:9B:A1:37:FB:F6:D4:45:8C:B4:BA:28:E8 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B4A47112DD1FABAEFE0CAA700 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4331ce79-c65e-3c2c-b7bf-82996f3dd211.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 0 IP address blocks: 208.220.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:11:2d:d1:fa:ba:ef:e0:ca:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=ffd0695b-90ce-4680-822b-fa8abc0b7ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:58:37:e9:2f:2c:e3:c8:2f:9e:ee:87:41:e9: b3:15:56:bc:96:0e:26:cd:05:73:69:cb:38:70:94: 2f:64:9c:a0:82:2f:dd:1f:b7:a3:1f:56:04:a0:e1: 57:7c:18:91:89:11:8f:82:da:b2:13:93:dc:0f:d5: b8:db:84:8b:68:a6:91:c6:c3:53:07:58:96:85:b4: 13:61:dd:a3:79:a8:d8:d4:51:c7:1b:9c:0c:c9:c7: e7:11:2e:bf:c9:fa:76:49:0e:19:a4:e8:8e:9f:67: 8d:be:65:8b:d4:09:0d:87:d3:f8:4d:16:ed:a8:84: c2:b2:48:27:34:34:ab:96:20:01:0a:5c:18:69:0b: e7:9b:8f:8f:94:51:11:9b:c2:bc:8c:5e:7f:54:28: 85:5b:a6:f5:02:94:94:15:19:b8:17:fb:c6:e3:52: 21:85:54:46:3a:79:e2:7a:90:81:d7:83:04:ee:18: 4d:29:a9:c2:76:1a:aa:b7:57:65:e1:61:c0:54:a8: 1d:70:a2:72:4f:e2:97:3b:91:c8:15:de:54:15:4d: 2f:9f:15:a0:40:ee:f2:d3:03:76:6a:69:48:51:89: ae:39:1c:54:83:40:5c:00:54:6f:3b:13:c6:1c:8b: f8:bf:d0:49:7d:2c:0d:ec:d4:f3:60:20:23:4e:78: 33:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:CA:D5:25:8F:5E:F9:FB:9B:A1:37:FB:F6:D4:45:8C:B4:BA:28:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4331ce79-c65e-3c2c-b7bf-82996f3dd211.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.220.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:45:48:bf:30:55:b9:01:2d:09:12:8e:75:ee:44:b6:c4:88: 3a:ab:50:42:48:4f:b9:2e:fd:8a:82:4c:b6:c4:3a:08:15:e7: 11:75:cd:61:ca:48:33:b1:bd:69:7e:13:75:c9:27:f3:e5:bf: 20:28:0f:5a:18:74:93:f3:fc:dd:78:99:14:57:85:98:54:97: 0e:fb:0c:30:e3:0b:19:59:6c:fb:38:25:55:4c:0d:69:f2:c2: a4:29:98:dd:88:53:f8:47:cf:ae:65:2d:77:3d:5b:c6:97:73: c2:ff:23:f2:89:c0:02:06:5b:64:c5:0e:ab:8c:18:0c:7d:aa: 8f:53:ae:6e:09:86:33:2d:fd:dc:c2:b0:e6:37:a3:11:82:4f: 4f:1e:59:b0:5d:eb:57:1f:87:21:54:08:67:9c:67:9a:73:94: 0f:fa:e3:5c:f0:84:d6:dd:ec:47:c6:17:90:ba:64:69:51:49: 52:ae:1d:36:e2:73:a8:06:3a:3b:b2:35:45:73:bb:dc:0b:ed: 3a:ef:e1:2c:fc:fc:15:9f:da:5e:59:52:67:14:9b:9f:48:72: 80:cb:45:94:b1:97:2d:15:63:a6:11:35:1f:86:ba:08:2b:32: 7d:23:5b:9c:14:80:3b:b8:32:16:b2:6e:57:cb:5c:0e:2a:b2: 33:af:6b:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRxEt0fq67+DKpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk ZmZkMDY5NWItOTBjZS00NjgwLTgyMmItZmE4YWJjMGI3YWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlg36S8s48gvnu6HQemzFVa8lg4mzQVzacs4 cJQvZJyggi/dH7ejH1YEoOFXfBiRiRGPgtqyE5PcD9W424SLaKaRxsNTB1iWhbQT Yd2jeajY1FHHG5wMycfnES6/yfp2SQ4ZpOiOn2eNvmWL1AkNh9P4TRbtqITCskgn NDSrliABClwYaQvnm4+PlFERm8K8jF5/VCiFW6b1ApSUFRm4F/vG41IhhVRGOnni epCB14ME7hhNKanCdhqqt1dl4WHAVKgdcKJyT+KXO5HIFd5UFU0vnxWgQO7y0wN2 amlIUYmuORxUg0BcAFRvOxPGHIv4v9BJfSwN7NTzYCAjTngzfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7K1SWPXvn7m6E3+/bURYy0uijoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDMzMWNlNzktYzY1ZS0z YzJjLWI3YmYtODI5OTZmM2RkMjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0NyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVFSL8wVbkBLQkSjnXuRLbEiDqrUEJIT7ku/YqCTLbEOggV5xF1zWHK SDOxvWl+E3XJJ/PlvyAoD1oYdJPz/N14mRRXhZhUlw77DDDjCxlZbPs4JVVMDWny wqQpmN2IU/hHz65lLXc9W8aXc8L/I/KJwAIGW2TFDquMGAx9qo9Trm4JhjMt/dzC sOY3oxGCT08eWbBd61cfhyFUCGecZ5pzlA/641zwhNbd7EfGF5C6ZGlRSVKuHTbi c6gGOjuyNUVzu9wL7Trv4Sz8/BWf2l5ZUmcUm59IcoDLRZSxly0VY6YRNR+Guggr Mn0jW5wUgDu4MhayblfLXA4qsjOva+s= -----END CERTIFICATE-----Generated at Sat Oct 11 00:12:30 2025 by rpki-client