$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8929f8ed-5b3c-38f9-825d-46f8a493d291.roa File: 8929f8ed-5b3c-38f9-825d-46f8a493d291.roa (raw, json) Hash identifier: 8XKZu8eB24srWLZk+Imk0SWr6GkB7bSDu0IrgI7wMZ4= Subject key identifier: 69:7E:64:05:39:18:90:5F:BC:E5:B7:82:F1:AD:89:A9:A2:15:52:28 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B4A4716DB2A1A4E168A6F0500 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8929f8ed-5b3c-38f9-825d-46f8a493d291.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 0 IP address blocks: 208.218.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:16:db:2a:1a:4e:16:8a:6f:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=931e3d34-3676-4135-8635-d39c0f09cf27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:42:4c:61:b7:95:8a:26:88:17:5f:de:fa:0c: 70:62:48:25:cb:ce:3f:1d:07:97:89:f4:48:ac:13: 08:a8:ff:e0:3a:57:e2:13:b5:48:44:85:9f:80:a3: 76:97:5d:af:34:80:b0:41:44:4c:e7:78:63:c3:f4: 7e:9e:93:9e:9f:b9:66:9d:cf:0e:28:e7:7b:42:1f: d7:4b:d8:ba:e2:9f:72:51:a5:7b:02:4d:49:90:8a: 00:1e:fd:71:54:f3:a9:4a:3e:6f:e3:72:ef:c3:b9: d9:27:e4:2c:64:b4:ef:53:54:70:72:04:6d:27:b9: c7:40:05:a4:ed:01:f8:e4:2a:47:86:a9:0c:5c:57: f6:41:09:1f:65:5d:cc:f2:ec:f0:b8:6b:a9:71:d9: a2:e9:fd:9b:6f:3c:bd:41:cf:e8:0d:58:8a:3b:c8: e5:67:71:53:78:0c:ef:73:aa:70:ca:4e:47:c3:6b: 97:d6:f3:6e:40:d3:5d:5b:03:96:38:8a:73:81:c0: b4:9d:bd:6a:c9:ff:34:d3:83:f0:dc:ff:2d:6d:ec: b5:83:21:a8:9e:51:ad:6d:f2:ec:3d:8e:95:53:95: 8d:c9:24:f1:1e:2d:87:07:92:7f:cc:1b:a7:23:b5: 40:b2:77:bd:63:ec:ae:19:e5:6d:9b:52:5a:87:5e: 8e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:7E:64:05:39:18:90:5F:BC:E5:B7:82:F1:AD:89:A9:A2:15:52:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8929f8ed-5b3c-38f9-825d-46f8a493d291.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.218.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:2c:5f:2d:02:8c:72:f3:04:9f:38:58:23:f7:81:e5:70:f3: 5b:43:26:e6:f9:49:84:66:27:23:ce:b5:b2:69:7d:3c:90:5d: f6:32:0d:b8:02:4b:9d:0f:16:d4:af:e8:e9:f4:b6:45:ef:00: 82:5f:4a:aa:43:ac:2e:ac:ff:cc:06:4b:11:e9:59:54:05:67: a8:c0:e2:a7:a2:4f:aa:6d:c4:1e:26:b2:a5:f5:06:35:24:e4: f4:8e:d7:68:36:5d:24:15:29:b1:63:0b:12:2a:e5:24:0e:27: 68:1a:4b:5f:d1:2d:8f:8e:46:c8:de:09:3b:a3:9a:2e:11:ef: cf:c0:7e:e8:9e:66:f7:17:cf:1f:1c:69:32:e2:4b:05:2f:04: 1e:48:ba:a0:0e:a8:a6:4d:a9:92:5d:51:55:6e:98:35:be:77: aa:f6:08:a4:a9:02:9b:1c:02:b1:89:5b:e3:41:68:65:f6:21: 1b:0c:8c:82:8b:e8:2e:63:c9:2b:d6:bc:a4:09:ec:54:4c:67: 25:63:9d:a0:9e:fd:17:02:9c:c7:5f:f8:85:fc:91:a3:4e:c8: e4:ea:60:f7:ed:f3:3c:8c:ec:88:c5:3d:a8:2b:6c:e8:94:64: 9d:08:5b:52:1c:72:b1:a1:fe:92:ff:92:56:2f:68:9a:21:c4: 44:da:20:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRxbbKhpOFopvBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk OTMxZTNkMzQtMzY3Ni00MTM1LTg2MzUtZDM5YzBmMDljZjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUJMYbeViiaIF1/e+gxwYkgly84/HQeXifRI rBMIqP/gOlfiE7VIRIWfgKN2l12vNICwQURM53hjw/R+npOen7lmnc8OKOd7Qh/X S9i64p9yUaV7Ak1JkIoAHv1xVPOpSj5v43Lvw7nZJ+QsZLTvU1RwcgRtJ7nHQAWk 7QH45CpHhqkMXFf2QQkfZV3M8uzwuGupcdmi6f2bbzy9Qc/oDViKO8jlZ3FTeAzv c6pwyk5Hw2uX1vNuQNNdWwOWOIpzgcC0nb1qyf8004Pw3P8tbey1gyGonlGtbfLs PY6VU5WNySTxHi2HB5J/zBunI7VAsne9Y+yuGeVtm1Jah16OFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGl+ZAU5GJBfvOW3gvGtiamiFVIoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODkyOWY4ZWQtNWIzYy0z OGY5LTgyNWQtNDZmOGE0OTNkMjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0NpYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKYsXy0CjHLzBJ84WCP3geVw81tDJub5SYRmJyPOtbJpfTyQXfYyDbgC S50PFtSv6On0tkXvAIJfSqpDrC6s/8wGSxHpWVQFZ6jA4qeiT6ptxB4msqX1BjUk 5PSO12g2XSQVKbFjCxIq5SQOJ2gaS1/RLY+ORsjeCTujmi4R78/AfuieZvcXzx8c aTLiSwUvBB5IuqAOqKZNqZJdUVVumDW+d6r2CKSpApscArGJW+NBaGX2IRsMjIKL 6C5jySvWvKQJ7FRMZyVjnaCe/RcCnMdf+IX8kaNOyOTqYPft8zyM7IjFPagrbOiU ZJ0IW1IccrGh/pL/klYvaJohxETaII8= -----END CERTIFICATE-----Generated at Fri Oct 10 17:54:33 2025 by rpki-client