$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/605e3bca-e9b3-3763-a84a-e22a0857ef60.roa File: 605e3bca-e9b3-3763-a84a-e22a0857ef60.roa (raw, json) Hash identifier: 3vCKeGpjz2h3MOMXrytpzsBnfoW5I3VxrUXx3JDrT90= Subject key identifier: 44:03:4E:28:21:63:3F:7A:50:2C:BF:35:57:DF:A9:3C:D0:1B:ED:64 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B9CCF9D17B422D4B9D5AEE200 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/605e3bca-e9b3-3763-a84a-e22a0857ef60.roa Signing time: Thu 23 Oct 2025 02:32:07 +0000 ROA not before: Thu 23 Oct 2025 02:32:07 +0000 ROA not after: Wed 21 Jan 2026 03:32:07 +0000 asID: 6167 IP address blocks: 198.225.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:cf:9d:17:b4:22:d4:b9:d5:ae:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 23 02:32:07 2025 GMT Not After : Jan 21 03:32:07 2026 GMT Subject: CN=836de181-6853-4182-98c8-ac3a3dc00352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3b:e5:53:ab:55:19:58:2a:ee:5c:7f:71:cc: 04:9a:60:31:b9:1f:38:c9:11:d2:ab:a0:88:cd:2b: 2f:e6:bd:8d:44:75:63:ee:56:7b:cd:62:51:d0:e1: da:e0:35:20:93:04:25:c7:a8:44:c5:6b:58:b8:45: c4:3c:ae:9d:7d:bc:08:12:c7:b2:c1:75:8b:c1:b3: 1d:f2:7f:c6:74:2a:60:a1:da:9d:a3:cd:4a:7e:a9: cf:1f:63:4c:2f:98:25:ff:cd:d9:15:0b:46:42:ae: f4:1f:26:4a:f0:29:1f:d4:81:af:51:f0:6c:80:da: d6:fe:90:2c:56:8f:56:41:e3:5a:09:62:a5:d4:02: b8:fd:45:e7:3c:0f:f5:08:a3:97:9c:2f:38:b6:55: f1:57:ec:4d:8e:31:9e:22:5c:66:d4:67:50:7c:9c: d9:88:ad:ec:5b:73:6d:e3:13:63:d6:b1:4c:f6:80: 40:30:10:e0:bd:cd:df:36:e2:f4:4d:25:87:05:34: 01:c2:3f:8f:a9:53:13:80:9f:7f:8d:79:1b:f0:ee: 2a:d1:44:34:84:1a:cb:93:94:b3:b1:bb:44:13:85: 38:1a:b5:d9:34:72:e8:f8:9c:fb:8f:9e:15:ad:b3: 94:c6:01:e4:ac:01:45:c5:48:56:ad:5f:44:c4:d6: 00:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:03:4E:28:21:63:3F:7A:50:2C:BF:35:57:DF:A9:3C:D0:1B:ED:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/605e3bca-e9b3-3763-a84a-e22a0857ef60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 198.225.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:28:67:3a:9c:06:1c:5b:a9:77:98:f2:99:33:72:5a:b5:81: fe:6e:de:f3:2f:33:35:91:7a:0c:2d:98:70:7d:ea:d4:0e:ff: 85:53:b9:1e:29:2e:0a:3c:49:53:39:00:55:ae:86:05:8a:8f: d5:d0:41:25:10:21:d2:92:68:97:29:9d:61:f9:13:53:d2:d1: 23:6e:18:0e:2f:01:b0:ab:e0:af:c0:21:56:df:9e:2f:1c:ae: a4:07:d9:cb:b9:be:83:78:bd:da:33:6d:24:f4:70:46:c4:9b: fe:51:b9:57:d8:fe:5a:e3:5f:a8:e7:f8:b6:06:31:8c:de:3c: 2b:87:61:4b:12:c2:be:8f:c8:08:27:f5:fd:7e:03:7a:ef:7a: b5:f3:2a:79:1d:5a:c6:e4:fa:34:90:44:f9:5b:d3:64:3b:ef: aa:75:22:2d:98:59:9c:35:59:90:af:18:33:cf:af:b4:1f:b3: 30:40:4e:62:e1:65:a7:8b:1f:de:de:83:26:6d:4b:91:d9:fe: 23:95:8b:8a:11:fd:42:1d:82:e6:15:28:13:f4:41:41:5b:07: f9:00:1f:19:e3:45:b1:85:de:05:0f:55:78:38:36:c4:cd:19: 94:9d:12:8d:64:27:64:13:23:a4:7e:19:2d:5c:e2:5a:fe:b3: 16:bb:c3:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEucz50XtCLUudWu4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyMzAyMzIwN1oXDTI2MDEyMTAzMzIwN1owLzEtMCsGA1UEAxMk ODM2ZGUxODEtNjg1My00MTgyLTk4YzgtYWMzYTNkYzAwMzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTvlU6tVGVgq7lx/ccwEmmAxuR84yRHSq6CI zSsv5r2NRHVj7lZ7zWJR0OHa4DUgkwQlx6hExWtYuEXEPK6dfbwIEseywXWLwbMd 8n/GdCpgodqdo81KfqnPH2NML5gl/83ZFQtGQq70HyZK8Ckf1IGvUfBsgNrW/pAs Vo9WQeNaCWKl1AK4/UXnPA/1CKOXnC84tlXxV+xNjjGeIlxm1GdQfJzZiK3sW3Nt 4xNj1rFM9oBAMBDgvc3fNuL0TSWHBTQBwj+PqVMTgJ9/jXkb8O4q0UQ0hBrLk5Sz sbtEE4U4GrXZNHLo+Jz7j54VrbOUxgHkrAFFxUhWrV9ExNYAywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQDTighYz96UCy/NVffqTzQG+1kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjA1ZTNiY2EtZTliMy0z NzYzLWE4NGEtZTIyYTA4NTdlZjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxuHKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYoZzqcBhxbqXeY8pkzclq1gf5u3vMvMzWRegwtmHB96tQO/4VTuR4p Lgo8SVM5AFWuhgWKj9XQQSUQIdKSaJcpnWH5E1PS0SNuGA4vAbCr4K/AIVbfni8c rqQH2cu5voN4vdozbST0cEbEm/5RuVfY/lrjX6jn+LYGMYzePCuHYUsSwr6PyAgn 9f1+A3rverXzKnkdWsbk+jSQRPlb02Q776p1Ii2YWZw1WZCvGDPPr7QfszBATmLh ZaeLH97egyZtS5HZ/iOVi4oR/UIdguYVKBP0QUFbB/kAHxnjRbGF3gUPVXg4NsTN GZSdEo1kJ2QTI6R+GS1c4lr+sxa7wwg= -----END CERTIFICATE-----Generated at Sat Oct 25 10:50:09 2025 by rpki-client