$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/12bd1f8d-2543-392e-b7d2-6f4dd4e7b7b6.roa File: 12bd1f8d-2543-392e-b7d2-6f4dd4e7b7b6.roa (raw, json) Hash identifier: MB2WLRODQkXIX8IT7hb4IrJa0YZ2FzMzcnzLhXsDAuI= Subject key identifier: B5:91:B1:93:29:00:8B:51:3B:AA:E2:0E:C4:1F:89:55:F6:AC:D6:87 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B9CCF9EEA74294F21168E4A00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/12bd1f8d-2543-392e-b7d2-6f4dd4e7b7b6.roa Signing time: Thu 23 Oct 2025 02:32:08 +0000 ROA not before: Thu 23 Oct 2025 02:32:08 +0000 ROA not after: Wed 21 Jan 2026 03:32:08 +0000 asID: 0 IP address blocks: 198.229.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:cf:9e:ea:74:29:4f:21:16:8e:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 23 02:32:08 2025 GMT Not After : Jan 21 03:32:08 2026 GMT Subject: CN=646b4752-4c47-4198-8778-4f3b8e0f6a61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0b:8c:f3:26:cd:f6:98:eb:e2:e5:72:7a:39: 8a:02:9f:18:c8:b7:3b:2e:0a:b3:84:17:94:97:a7: c6:af:99:77:3d:49:57:6b:5b:46:63:ff:db:60:f6: 6e:fa:f2:d4:7a:62:57:fb:40:3c:29:c3:da:78:da: 15:cf:ef:c8:53:3b:37:4f:ce:b8:e7:b4:05:19:28: 88:11:55:ce:a1:54:7f:8f:eb:8e:5b:a0:ca:94:ff: e5:a7:d3:d5:76:c4:23:c8:1b:96:68:80:2a:cd:43: 7d:58:43:e1:99:5a:1f:8e:67:3d:88:d4:2c:c9:7c: a6:1a:20:b0:32:10:a5:9f:8f:9f:d3:74:de:37:97: ce:14:15:77:0a:70:7a:d9:5e:e0:db:23:21:52:62: 14:73:b5:41:9e:3e:49:a2:94:40:23:05:56:a1:6b: c1:d2:00:c3:42:4d:b7:4a:4d:3d:13:49:6a:c3:e0: c3:69:1b:25:cd:83:62:bb:ed:e4:2e:c6:69:62:94: e3:2a:81:31:12:e9:cc:78:c1:14:5c:f8:09:0a:9f: 72:8e:e0:9e:c8:e8:90:03:03:1c:a2:f4:2c:06:31: 7f:6d:55:ef:58:af:1c:e9:55:f6:b4:c7:ba:ae:12: 4f:6c:9f:1f:35:09:c2:21:a6:7e:36:0e:ce:d4:55: 28:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:91:B1:93:29:00:8B:51:3B:AA:E2:0E:C4:1F:89:55:F6:AC:D6:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/12bd1f8d-2543-392e-b7d2-6f4dd4e7b7b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 198.229.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:64:e6:3f:be:4a:3f:0d:0f:02:0b:e3:72:e6:2f:85:c9:c0: d7:ea:bf:44:ad:d7:09:98:d9:20:02:9e:b1:d1:87:d8:1d:f6: 71:fd:7a:95:1a:34:48:25:7b:77:7a:75:08:e7:f5:6a:37:bf: 87:1f:09:f8:47:94:a4:ee:a1:db:7a:90:e4:e7:5c:c1:f1:b7: 30:bb:fc:85:e3:3c:1c:db:42:c7:1d:b6:66:a8:fb:8a:ef:0f: 53:4b:99:f5:ff:4b:c2:a4:e4:14:b3:16:8f:9c:03:d6:aa:48: 4e:d2:46:42:fc:32:f6:2a:c1:45:ff:ae:3e:8f:b1:d8:d6:12: be:7f:fa:b4:77:47:ac:db:c9:45:5f:ef:8f:32:1d:39:94:95: c4:b1:64:65:01:86:10:f5:9b:fe:3c:31:2c:53:81:4f:19:4d: d1:2f:f2:87:44:23:d5:17:e7:c5:24:4d:4b:47:dc:bd:94:c5: d2:ff:70:b9:ea:77:23:28:78:2a:f9:fb:a8:cd:35:48:4a:eb: ba:3a:98:5f:11:8d:8d:b5:d8:00:44:7c:3c:ba:fa:8d:b7:be: fd:0c:3d:a2:3b:fa:7c:5b:f8:e4:40:69:ae:a3:38:28:35:9c: 9c:3a:1f:e4:a6:c7:fc:7d:21:5b:2f:04:37:a3:81:c5:8c:f1: 1c:d6:a7:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEucz57qdClPIRaOSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyMzAyMzIwOFoXDTI2MDEyMTAzMzIwOFowLzEtMCsGA1UEAxMk NjQ2YjQ3NTItNGM0Ny00MTk4LTg3NzgtNGYzYjhlMGY2YTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiguM8ybN9pjr4uVyejmKAp8YyLc7LgqzhBeU l6fGr5l3PUlXa1tGY//bYPZu+vLUemJX+0A8KcPaeNoVz+/IUzs3T86457QFGSiI EVXOoVR/j+uOW6DKlP/lp9PVdsQjyBuWaIAqzUN9WEPhmVofjmc9iNQsyXymGiCw MhCln4+f03TeN5fOFBV3CnB62V7g2yMhUmIUc7VBnj5JopRAIwVWoWvB0gDDQk23 Sk09E0lqw+DDaRslzYNiu+3kLsZpYpTjKoExEunMeMEUXPgJCp9yjuCeyOiQAwMc ovQsBjF/bVXvWK8c6VX2tMe6rhJPbJ8fNQnCIaZ+Ng7O1FUo8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWRsZMpAItRO6riDsQfiVX2rNaHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTJiZDFmOGQtMjU0My0z OTJlLWI3ZDItNmY0ZGQ0ZTdiN2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxuXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApk5j++Sj8NDwIL43LmL4XJwNfqv0St1wmY2SACnrHRh9gd9nH9epUa NEgle3d6dQjn9Wo3v4cfCfhHlKTuodt6kOTnXMHxtzC7/IXjPBzbQscdtmao+4rv D1NLmfX/S8Kk5BSzFo+cA9aqSE7SRkL8MvYqwUX/rj6PsdjWEr5/+rR3R6zbyUVf 748yHTmUlcSxZGUBhhD1m/48MSxTgU8ZTdEv8odEI9UX58UkTUtH3L2UxdL/cLnq dyMoeCr5+6jNNUhK67o6mF8RjY212ABEfDy6+o23vv0MPaI7+nxb+ORAaa6jOCg1 nJw6H+Smx/x9IVsvBDejgcWM8RzWp+o= -----END CERTIFICATE-----Generated at Tue Nov 4 21:02:53 2025 by rpki-client