$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0a88928-30d2-3f62-9933-2ca85c1a174d.roa File: f0a88928-30d2-3f62-9933-2ca85c1a174d.roa (raw, json) Hash identifier: jQFku/bIZUmmLzc6Ti9WgmQksLl04HhacWIgF/nsqPU= Subject key identifier: E9:4C:37:4E:EE:7B:DA:A6:ED:6A:FD:F7:FC:04:10:65:1F:37:29:6E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B13D6CA907A8E0CB488573EC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0a88928-30d2-3f62-9933-2ca85c1a174d.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 8987 IP address blocks: 198.3.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:ca:90:7a:8e:0c:b4:88:57:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=cd7dc001-7e28-4084-aaa4-5c300851a8de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:de:10:ae:79:4d:09:56:9f:18:95:29:bd:02: 24:c7:41:3e:e2:25:f4:33:bf:ae:01:45:97:1d:13: 0c:01:f4:4b:6d:8b:97:55:91:9e:e5:3a:36:7f:94: 32:7d:e6:6b:7d:ac:33:f5:4c:ff:d7:41:fd:76:c5: 6a:b5:3b:f5:9e:4c:3f:40:c7:79:07:8a:82:b7:f3: 47:c6:2d:7a:c8:c0:e1:96:f4:d7:95:7d:8f:d6:d7: a8:24:61:3e:24:36:29:7a:ed:8d:2a:91:60:e4:03: cd:22:d4:b5:e1:bc:cb:f3:ac:04:7d:be:e0:b8:89: 7b:2a:34:33:5a:2e:08:df:0a:8e:d8:2f:5a:4f:28: b9:e9:8c:55:53:69:c1:60:15:67:e8:62:71:af:b2: 84:07:09:c5:be:fe:b6:9b:c6:12:3e:dc:a4:63:58: a2:80:0f:b4:d5:a5:0c:dc:eb:98:d0:24:10:50:b7: f0:ff:a5:ae:51:66:da:ea:f9:f0:6e:34:93:45:12: ae:15:ec:d4:4e:8e:e8:4e:c4:2d:af:df:5b:5c:de: 97:c2:28:31:84:66:23:37:aa:6b:c4:eb:ee:fd:4c: 49:aa:a0:d9:cb:2d:5e:96:55:cf:da:99:48:85:cd: 84:a0:3c:ef:4a:81:26:9b:8e:30:a2:8d:12:74:81: ce:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:4C:37:4E:EE:7B:DA:A6:ED:6A:FD:F7:FC:04:10:65:1F:37:29:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0a88928-30d2-3f62-9933-2ca85c1a174d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 198.3.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:9c:40:6b:60:60:a1:99:fd:c8:37:b7:32:14:c1:4a:f8:98: 13:76:11:d5:61:07:0d:f0:94:f4:93:c0:04:dd:95:c2:46:d4: 95:2b:90:47:4f:84:53:aa:f5:cf:c7:cc:7c:27:18:ef:1c:ee: bb:df:55:ba:82:4d:24:c0:fc:48:56:73:84:ba:c0:3c:eb:71: 69:da:5b:2a:93:3e:02:c3:4c:9c:61:fa:96:18:85:5c:b1:d9: 70:6a:bf:56:eb:fb:46:87:f0:f5:47:80:1f:a0:bb:2b:2e:6c: ba:ff:60:9f:e7:cf:f9:b5:ca:04:4f:16:95:cf:41:01:68:76: 67:06:6a:fd:e8:11:a0:9a:21:aa:d2:b9:cd:6c:2d:dc:70:3f: 63:bf:c3:7c:66:5d:24:eb:79:7e:07:76:db:cb:c9:e3:1d:3c: 10:a5:90:ff:be:20:3b:bd:b9:42:97:5f:e6:f5:b0:32:80:10: b1:f0:37:51:2d:48:10:dd:a7:26:8d:8e:42:6a:ca:c1:aa:45: 73:e4:4e:5b:a4:96:94:c0:78:7c:a6:78:94:04:8c:4f:35:9d: 10:ea:0f:09:f0:09:99:5d:27:f9:3b:cc:49:16:a0:f0:c2:77: 6d:51:9b:bd:77:d3:8a:ec:e9:ea:8b:11:ed:7e:31:91:13:be: ab:fa:85:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1sqQeo4MtIhXPsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk Y2Q3ZGMwMDEtN2UyOC00MDg0LWFhYTQtNWMzMDA4NTFhOGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA694QrnlNCVafGJUpvQIkx0E+4iX0M7+uAUWX HRMMAfRLbYuXVZGe5To2f5QyfeZrfawz9Uz/10H9dsVqtTv1nkw/QMd5B4qCt/NH xi16yMDhlvTXlX2P1teoJGE+JDYpeu2NKpFg5APNItS14bzL86wEfb7guIl7KjQz Wi4I3wqO2C9aTyi56YxVU2nBYBVn6GJxr7KEBwnFvv62m8YSPtykY1iigA+01aUM 3OuY0CQQULfw/6WuUWba6vnwbjSTRRKuFezUTo7oTsQtr99bXN6XwigxhGYjN6pr xOvu/UxJqqDZyy1ellXP2plIhc2EoDzvSoEmm44woo0SdIHOmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlMN07ue9qm7Wr99/wEEGUfNyluMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjBhODg5MjgtMzBkMi0z ZjYyLTk5MzMtMmNhODVjMWExNzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxgMUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+cQGtgYKGZ/cg3tzIUwUr4mBN2EdVhBw3wlPSTwATdlcJG1JUrkEdP hFOq9c/HzHwnGO8c7rvfVbqCTSTA/EhWc4S6wDzrcWnaWyqTPgLDTJxh+pYYhVyx 2XBqv1br+0aH8PVHgB+guysubLr/YJ/nz/m1ygRPFpXPQQFodmcGav3oEaCaIarS uc1sLdxwP2O/w3xmXSTreX4HdtvLyeMdPBClkP++IDu9uUKXX+b1sDKAELHwN1Et SBDdpyaNjkJqysGqRXPkTluklpTAeHymeJQEjE81nRDqDwnwCZldJ/k7zEkWoPDC d21Rm71304rs6eqLEe1+MZETvqv6hcc= -----END CERTIFICATE-----Generated at Sun Sep 7 13:49:34 2025 by rpki-client