$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1c3adb2-519c-3bee-967d-701809825e21.roa File: a1c3adb2-519c-3bee-967d-701809825e21.roa (raw, json) Hash identifier: 8zzvmQUNv6deyf8LTAKyyRKJj+XsG0wIu3uXthhv3a8= Subject key identifier: D1:B8:77:BD:32:2C:AA:72:1B:DE:13:DC:97:65:87:40:D1:A3:4D:DF Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B79BCB282BB1D6F668A9837C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1c3adb2-519c-3bee-967d-701809825e21.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 3855 IP address blocks: 199.172.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b2:82:bb:1d:6f:66:8a:98:37:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=5ff478ce-074c-49ef-82f2-94ac4c007ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:31:77:67:36:48:6d:76:f0:c1:45:67:42:68: 3d:32:97:48:aa:81:c9:52:c8:6d:03:cb:98:00:e6: d6:30:9a:6d:9a:23:46:ef:05:a6:8d:8d:c4:af:42: 4c:00:33:ba:ee:bb:e3:92:f7:a6:c1:c3:c2:82:79: f7:0f:60:87:1a:1a:94:c1:8f:d0:ac:bf:5e:a6:6d: c1:df:18:5f:24:39:50:43:62:37:9d:7c:ef:f0:29: 3a:92:a2:7a:ed:d9:ee:a0:5f:29:bb:13:4f:9e:9f: 07:56:86:f9:2c:10:9b:60:9f:86:93:0f:16:82:e1: f9:69:84:25:eb:88:48:20:30:78:13:60:12:e6:41: 0c:30:d5:a2:57:a8:cc:5b:53:6c:fd:4a:2c:f2:89: cc:40:68:18:47:86:bf:1f:82:f5:46:3c:54:bf:b6: 04:b5:3b:da:bd:2a:d9:c8:8c:c7:13:03:53:c0:83: 47:8a:cc:d6:89:52:66:03:62:e8:7d:f1:ef:66:a7: b7:aa:75:03:37:ff:9a:68:d9:e4:cc:8b:42:bf:4b: aa:18:37:60:8c:ce:97:d9:17:75:5a:aa:f1:63:67: 8d:e8:7e:97:9e:fd:a0:b0:db:a8:09:70:2f:f4:2a: 67:05:af:f5:a0:84:bd:90:27:75:4b:4e:26:ef:13: d7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B8:77:BD:32:2C:AA:72:1B:DE:13:DC:97:65:87:40:D1:A3:4D:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1c3adb2-519c-3bee-967d-701809825e21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:8a:8a:0b:ca:d1:a7:33:8a:aa:b1:e8:72:a7:f3:66:e1:6f: d5:8b:2e:1c:5c:55:e2:6f:93:46:af:ff:1d:d0:99:60:af:d3: 1a:4e:ca:d7:17:10:33:96:b4:0a:ca:a5:2a:bc:ee:72:74:fb: e3:db:a0:fc:c4:f0:62:a4:0e:cc:37:6e:4d:b3:d0:d6:14:c9: b5:ea:97:fe:3f:78:3c:52:e4:9f:73:86:5b:2f:f1:7c:1d:7d: fb:18:fc:5e:29:74:60:d6:75:03:64:b2:ec:1e:55:67:23:a6: 9b:48:25:c9:e0:ab:83:e8:1c:24:93:fa:ce:15:51:f6:f6:d3: b1:78:63:03:ba:37:74:10:07:db:d4:9e:0f:a2:70:05:6c:9b: 81:49:9c:ea:89:5f:be:08:9e:7d:6b:63:e8:7d:5c:98:91:73: 40:14:7c:dd:7e:69:3f:dd:13:f1:ec:c4:8d:b3:1d:1e:24:0b: c0:99:12:92:92:a7:b4:7b:84:41:c5:c8:9d:85:99:02:5b:31: 07:17:bf:8f:9e:88:d3:11:56:2d:f4:03:65:40:e7:b1:86:14: 7b:c1:2f:37:17:85:78:8a:3a:ad:79:30:fd:e3:df:c2:23:9e: 5d:43:6e:8e:1d:2a:3a:d4:0b:7e:ff:ea:a3:28:c6:31:a7:b0: 32:dc:7b:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLKCux1vZoqYN8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk NWZmNDc4Y2UtMDc0Yy00OWVmLTgyZjItOTRhYzRjMDA3ZWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzF3ZzZIbXbwwUVnQmg9MpdIqoHJUshtA8uY AObWMJptmiNG7wWmjY3Er0JMADO67rvjkvemwcPCgnn3D2CHGhqUwY/QrL9epm3B 3xhfJDlQQ2I3nXzv8Ck6kqJ67dnuoF8puxNPnp8HVob5LBCbYJ+Gkw8WguH5aYQl 64hIIDB4E2AS5kEMMNWiV6jMW1Ns/Uos8onMQGgYR4a/H4L1RjxUv7YEtTvavSrZ yIzHEwNTwINHiszWiVJmA2LoffHvZqe3qnUDN/+aaNnkzItCv0uqGDdgjM6X2Rd1 WqrxY2eN6H6Xnv2gsNuoCXAv9CpnBa/1oIS9kCd1S04m7xPXRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNG4d70yLKpyG94T3Jdlh0DRo03fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTFjM2FkYjItNTE5Yy0z YmVlLTk2N2QtNzAxODA5ODI1ZTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeKigvK0acziqqx6HKn82bhb9WLLhxcVeJvk0av/x3QmWCv0xpOytcX EDOWtArKpSq87nJ0++PboPzE8GKkDsw3bk2z0NYUybXql/4/eDxS5J9zhlsv8Xwd ffsY/F4pdGDWdQNksuweVWcjpptIJcngq4PoHCST+s4VUfb207F4YwO6N3QQB9vU ng+icAVsm4FJnOqJX74Inn1rY+h9XJiRc0AUfN1+aT/dE/HsxI2zHR4kC8CZEpKS p7R7hEHFyJ2FmQJbMQcXv4+eiNMRVi30A2VA57GGFHvBLzcXhXiKOq15MP3j38Ij nl1Dbo4dKjrUC37/6qMoxjGnsDLce98= -----END CERTIFICATE-----Generated at Sat Oct 11 00:03:04 2025 by rpki-client