$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/889e1dc3-7376-38e7-8389-5e83a3a0926e.roa File: 889e1dc3-7376-38e7-8389-5e83a3a0926e.roa (raw, json) Hash identifier: QSR+JFeH2dk7uRV1Mr/fMRSgYXnsKwylCrTNqUy/FQs= Subject key identifier: AF:97:B2:A4:EB:5F:F9:8E:A6:05:12:CA:D4:71:FE:6B:0F:BE:C8:F7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B4A473572E7246ED724A6B580 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/889e1dc3-7376-38e7-8389-5e83a3a0926e.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 0 IP address blocks: 208.198.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:35:72:e7:24:6e:d7:24:a6:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=a2f7e344-a461-4ac3-aed0-674ddf152af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:54:c1:18:f3:cb:b1:31:09:ea:a5:09:f0:f0: ea:37:c5:8a:83:54:a6:5d:ae:1a:72:f9:fd:27:88: 37:75:ad:6c:ad:fe:ec:94:16:8d:7c:de:3e:90:c5: d2:35:98:4d:fb:27:1f:f8:82:24:fa:36:70:f7:16: 42:3e:ec:38:d5:d0:08:b8:87:9a:1b:d7:65:f9:62: 87:93:e3:6a:93:ce:73:6d:d9:c4:f2:8b:0c:f0:60: 2a:1a:f3:98:cd:4c:0c:65:fd:be:d4:02:7c:e9:a3: 7e:e4:c9:0a:a3:8e:ca:aa:86:9d:fa:05:86:d1:61: ff:97:a2:a1:53:bd:6f:93:55:74:2a:dd:d9:d4:85: 55:dc:a9:2c:60:a6:e0:9b:af:50:14:e7:bc:bb:b9: 91:6c:2c:c1:76:21:5f:9a:43:ac:4c:a2:0a:33:46: 34:e7:51:15:05:ac:a6:c0:7b:65:6a:03:85:2d:17: e7:a8:ec:81:75:09:51:41:0d:68:04:a7:c2:ae:28: 62:73:30:47:f1:2b:d7:83:a2:1d:16:df:b7:1a:6d: b9:6e:6e:1c:3e:4e:c6:1d:7d:c3:05:9b:1a:ab:a6: 36:b7:bd:37:94:12:28:39:ae:ca:70:26:fd:32:5e: 3b:9a:bb:62:92:15:ee:66:e2:7a:78:ba:bb:ba:0d: ab:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:97:B2:A4:EB:5F:F9:8E:A6:05:12:CA:D4:71:FE:6B:0F:BE:C8:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/889e1dc3-7376-38e7-8389-5e83a3a0926e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.198.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:58:e7:ec:0a:d5:54:bb:87:6d:3c:89:f7:2f:ca:10:1b:81: 07:99:52:1f:f2:2f:87:bd:02:c6:bc:f1:59:91:90:38:40:57: 17:81:fc:28:b4:4f:e7:b7:32:38:e7:d4:18:38:54:3a:08:e1: 27:b1:e9:b4:ab:6b:a7:a9:5a:71:21:82:d1:a4:9b:f8:d7:04: 07:a9:f6:cb:61:c5:1d:3e:07:84:00:d7:8a:03:d5:d9:da:58: ea:94:6e:8a:02:f7:7f:68:81:45:cd:34:8c:7f:85:01:dc:15: 00:76:81:6d:1f:15:69:42:9a:15:74:0e:f6:bb:3a:8e:86:81: 7e:94:4c:89:60:29:9b:d5:53:42:c4:8d:52:67:26:38:90:36: 23:2a:a3:12:e1:b7:2d:75:91:37:51:ac:4a:c9:ba:d9:b9:dd: f7:22:79:96:39:72:6b:a4:b5:a8:21:d0:cd:ee:59:da:41:79: 9d:32:fc:85:1f:0b:a3:16:de:2b:1c:02:b6:7d:90:65:2e:b6: 7b:1d:91:49:fe:30:fb:ce:3d:50:8a:fc:9d:3d:43:47:37:00: f2:c3:12:f9:50:b4:af:1e:47:a0:a5:fc:b3:8d:7b:37:54:73: 5f:1d:ed:5e:9f:66:50:a0:f5:e5:e3:b2:98:54:10:e0:a1:b0: be:17:2f:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRzVy5yRu1ySmtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk YTJmN2UzNDQtYTQ2MS00YWMzLWFlZDAtNjc0ZGRmMTUyYWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllTBGPPLsTEJ6qUJ8PDqN8WKg1SmXa4acvn9 J4g3da1srf7slBaNfN4+kMXSNZhN+ycf+IIk+jZw9xZCPuw41dAIuIeaG9dl+WKH k+Nqk85zbdnE8osM8GAqGvOYzUwMZf2+1AJ86aN+5MkKo47Kqoad+gWG0WH/l6Kh U71vk1V0Kt3Z1IVV3KksYKbgm69QFOe8u7mRbCzBdiFfmkOsTKIKM0Y051EVBaym wHtlagOFLRfnqOyBdQlRQQ1oBKfCrihiczBH8SvXg6IdFt+3Gm25bm4cPk7GHX3D BZsaq6Y2t703lBIoOa7KcCb9Ml47mrtikhXuZuJ6eLq7ug2rGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+XsqTrX/mOpgUSytRx/msPvsj3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODg5ZTFkYzMtNzM3Ni0z OGU3LTgzODktNWU4M2EzYTA5MjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0MaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJY5+wK1VS7h208ifcvyhAbgQeZUh/yL4e9Asa88VmRkDhAVxeB/Ci0 T+e3Mjjn1Bg4VDoI4Sex6bSra6epWnEhgtGkm/jXBAep9sthxR0+B4QA14oD1dna WOqUbooC939ogUXNNIx/hQHcFQB2gW0fFWlCmhV0Dva7Oo6GgX6UTIlgKZvVU0LE jVJnJjiQNiMqoxLhty11kTdRrErJutm53fcieZY5cmuktagh0M3uWdpBeZ0y/IUf C6MW3iscArZ9kGUutnsdkUn+MPvOPVCK/J09Q0c3APLDEvlQtK8eR6Cl/LONezdU c18d7V6fZlCg9eXjsphUEOChsL4XL0A= -----END CERTIFICATE-----Generated at Fri Oct 10 22:13:31 2025 by rpki-client