$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e94b2e2d-f1bc-3e70-8063-56d4d9b7946a.roa File: e94b2e2d-f1bc-3e70-8063-56d4d9b7946a.roa (raw, json) Hash identifier: tOzlHfQrknd3Zp8MFxkUoktWuhGlg1fP5eZ40gKiCzE= Subject key identifier: 2E:32:02:2D:E7:77:23:46:E6:78:84:2C:CC:86:18:16:D4:3C:CB:25 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B4A4717E44617147DE980DE80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e94b2e2d-f1bc-3e70-8063-56d4d9b7946a.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 0 IP address blocks: 208.198.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:17:e4:46:17:14:7d:e9:80:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=a3fa6166-fcf6-4cd3-a7da-3dc502244c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8f:3f:c3:3a:45:06:cb:49:cb:50:50:a5:8d: da:5c:db:f8:28:63:c1:c4:0f:29:55:bb:07:51:e3: 1b:8f:f1:90:aa:7b:49:61:e2:c7:e2:95:4b:d2:e6: fe:7a:b5:c2:46:dc:f5:6d:ab:92:ab:0b:15:46:2b: 7b:dd:ea:11:17:2a:2a:85:17:09:d4:38:68:d7:6a: d5:45:d9:bf:35:7f:a2:15:82:c1:5a:89:b6:87:82: f5:56:1e:07:2e:53:0d:e4:e0:ba:1e:25:0f:6a:71: 1a:89:ec:9d:53:98:cc:aa:13:e7:59:20:97:18:e7: 2e:d2:33:65:2c:4c:81:d0:e4:74:36:87:84:15:5a: a1:5e:fb:02:02:e9:fa:1b:96:69:01:15:40:1a:ef: 0d:53:fe:3f:23:68:29:ee:58:5d:27:2c:1d:74:36: 08:c6:56:61:d9:44:98:6d:2c:bc:f3:65:a4:ec:dd: cb:ad:e0:6f:3b:61:bd:1e:fd:91:f0:b4:73:70:24: fa:54:1d:86:9a:38:12:25:67:ef:0d:a2:32:3c:c4: f8:f4:ef:21:7d:92:5b:63:60:db:40:a7:4a:e9:b9: 63:48:4c:2a:24:e3:2c:6a:b3:ec:4e:47:87:69:a0: 10:ee:54:fe:a9:f5:fa:78:e0:d3:3e:db:a0:08:63: ba:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:32:02:2D:E7:77:23:46:E6:78:84:2C:CC:86:18:16:D4:3C:CB:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e94b2e2d-f1bc-3e70-8063-56d4d9b7946a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.198.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:1d:0e:81:df:1c:36:1d:2a:bc:17:3a:5f:65:c6:f5:f8:3c: 5d:0e:d1:8e:24:e3:75:9b:54:da:7c:c5:70:ee:50:5f:71:97: c6:4a:31:8b:2f:59:78:c1:a1:b6:6e:db:d2:41:98:35:23:56: 74:35:b4:a8:9e:a2:86:54:57:27:67:a6:d1:f3:5c:64:3f:f3: fc:8c:5c:c2:a5:48:48:06:8d:07:31:fb:2f:67:33:36:33:e4: 12:63:f5:b0:74:1f:8c:7a:68:9f:55:ad:5d:c8:89:80:e2:f5: f6:a2:02:0b:27:8d:4b:30:0c:8a:78:ed:81:34:47:7b:46:b5: 57:41:0a:ea:1a:27:e0:99:fb:66:7c:db:50:e2:b9:87:50:2c: f3:44:e9:fa:c0:18:44:42:b8:14:92:c8:81:91:94:ba:e9:37: ef:25:2f:8a:e7:d8:ac:98:7d:19:b1:8a:98:a7:75:16:08:d5: 76:72:86:6a:17:ee:d0:c7:d1:3b:5c:2e:96:9f:d3:6c:7c:10: ed:9e:1b:8a:9b:ea:13:80:f4:fc:eb:04:7b:25:1c:e1:a0:d4: 2f:1c:6f:cf:5f:5f:20:08:0a:b7:26:f8:f4:49:64:0b:55:f4: e5:69:e7:2b:12:a3:d7:c8:a8:c5:f4:26:33:a6:6b:40:f3:1a: ac:a3:9c:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRxfkRhcUfemA3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk YTNmYTYxNjYtZmNmNi00Y2QzLWE3ZGEtM2RjNTAyMjQ0YzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAio8/wzpFBstJy1BQpY3aXNv4KGPBxA8pVbsH UeMbj/GQqntJYeLH4pVL0ub+erXCRtz1bauSqwsVRit73eoRFyoqhRcJ1Dho12rV Rdm/NX+iFYLBWom2h4L1Vh4HLlMN5OC6HiUPanEaieydU5jMqhPnWSCXGOcu0jNl LEyB0OR0NoeEFVqhXvsCAun6G5ZpARVAGu8NU/4/I2gp7lhdJywddDYIxlZh2USY bSy882Wk7N3LreBvO2G9Hv2R8LRzcCT6VB2GmjgSJWfvDaIyPMT49O8hfZJbY2Db QKdK6bljSEwqJOMsarPsTkeHaaAQ7lT+qfX6eODTPtugCGO6KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4yAi3ndyNG5niELMyGGBbUPMslMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTk0YjJlMmQtZjFiYy0z ZTcwLTgwNjMtNTZkNGQ5Yjc5NDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0MYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALcdDoHfHDYdKrwXOl9lxvX4PF0O0Y4k43WbVNp8xXDuUF9xl8ZKMYsv WXjBobZu29JBmDUjVnQ1tKieooZUVydnptHzXGQ/8/yMXMKlSEgGjQcx+y9nMzYz 5BJj9bB0H4x6aJ9VrV3IiYDi9faiAgsnjUswDIp47YE0R3tGtVdBCuoaJ+CZ+2Z8 21DiuYdQLPNE6frAGERCuBSSyIGRlLrpN+8lL4rn2KyYfRmxipindRYI1XZyhmoX 7tDH0TtcLpaf02x8EO2eG4qb6hOA9PzrBHslHOGg1C8cb89fXyAICrcm+PRJZAtV 9OVp5ysSo9fIqMX0JjOma0DzGqyjnB0= -----END CERTIFICATE-----Generated at Fri Oct 10 20:00:11 2025 by rpki-client