$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1da8bac0-bc71-3493-ba19-cd7d324a98ed.roa File: 1da8bac0-bc71-3493-ba19-cd7d324a98ed.roa (raw, json) Hash identifier: q431yEpkrY+sfPjn6bvbbFqQ4nKFiQDOxBz63tx/2IU= Subject key identifier: 61:DF:76:1F:4C:82:2B:A7:C0:10:A0:77:D8:32:6C:5A:A5:F0:84:CA Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AC2E116A4647F909BB5835400 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1da8bac0-bc71-3493-ba19-cd7d324a98ed.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 701 IP address blocks: 209.220.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:16:a4:64:7f:90:9b:b5:83:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=95ccb454-b68e-496c-8345-2d0897303367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:8c:cc:59:56:e3:70:7d:95:32:d3:f1:d6:c5: 79:ab:d3:dc:42:1b:9c:8f:2a:1f:64:47:e7:9f:3e: cf:3f:96:ae:bf:16:6e:7a:f4:48:05:9d:49:3a:f9: 17:a7:6b:e2:10:83:42:d1:9f:ce:2d:93:ca:6c:0a: c4:f5:c2:ab:93:e8:47:a2:bf:fe:bd:c5:05:59:72: 45:9c:d3:de:a4:82:8c:8f:39:ad:af:7a:a3:fd:12: ad:67:0e:d8:cb:26:d6:8c:67:71:33:ff:64:be:3a: d4:68:72:83:fe:16:2c:5f:18:0f:0a:ae:1e:fa:21: 9b:b4:21:22:54:76:3d:96:c1:3b:2d:ce:0b:ab:13: ed:55:39:6f:d2:72:7f:b6:ae:05:c8:9f:2b:10:d1: 34:db:e4:ea:af:11:96:3f:b2:b2:db:98:d5:64:39: 27:3d:85:88:67:20:82:44:6f:36:3f:ef:11:a2:d8: e5:d0:94:b4:3e:fb:ee:65:7c:f9:4b:fe:c6:6a:35: 53:b3:e9:a1:60:03:7c:8d:01:79:cd:41:ff:d5:bd: c8:7c:9a:cc:1b:52:55:7a:13:29:b7:c0:2a:27:42: 84:f7:38:db:c6:5a:25:8c:9f:7c:79:5e:52:f1:98: 7f:00:c0:55:d5:df:07:b3:57:8d:37:d0:3e:a0:80: d1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:DF:76:1F:4C:82:2B:A7:C0:10:A0:77:D8:32:6C:5A:A5:F0:84:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1da8bac0-bc71-3493-ba19-cd7d324a98ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 209.220.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:35:cd:1d:01:ef:5f:1c:95:76:27:cc:ae:c1:86:3e:aa:cc: e5:a2:be:71:77:37:bf:19:af:b9:d5:f1:11:ec:18:90:00:bf: bd:d6:ac:da:b9:62:a6:cd:da:3e:ab:41:c1:c2:1f:b2:0b:5d: 86:f1:9b:42:04:49:27:69:2a:92:d6:1c:db:89:03:74:c4:8a: d5:79:ac:fb:5e:12:03:31:c0:20:ca:cb:b3:9e:be:91:6c:76: 68:4d:85:d7:46:9b:80:7b:9f:79:df:9f:3f:df:5c:f3:d7:6d: f4:56:59:69:eb:d7:e1:39:23:a8:83:30:36:cf:0d:ad:e3:48: 5f:ef:75:80:35:77:68:c6:69:f1:65:eb:fd:6f:d2:0f:3b:4f: f9:a1:af:82:f3:34:2b:9a:23:95:65:b3:b5:25:a3:77:b2:71: 00:92:77:a4:00:29:9c:62:b3:60:5f:fa:cc:93:1d:6e:61:20: bb:35:36:f5:76:d1:e3:35:0f:a6:dd:93:9e:a7:91:71:94:3c: 9f:90:83:21:a1:d4:88:8b:58:fa:1f:06:57:51:f2:50:fd:5e: 55:f8:8f:7f:e2:9d:46:f4:52:83:ad:a2:c3:22:e0:61:c9:90: 86:fd:65:19:11:90:26:c4:76:c0:79:a6:ac:0a:50:e8:c1:b7: 8d:47:b3:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4RakZH+Qm7WDVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk OTVjY2I0NTQtYjY4ZS00OTZjLTgzNDUtMmQwODk3MzAzMzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YzMWVbjcH2VMtPx1sV5q9PcQhucjyofZEfn nz7PP5auvxZuevRIBZ1JOvkXp2viEINC0Z/OLZPKbArE9cKrk+hHor/+vcUFWXJF nNPepIKMjzmtr3qj/RKtZw7YyybWjGdxM/9kvjrUaHKD/hYsXxgPCq4e+iGbtCEi VHY9lsE7Lc4LqxPtVTlv0nJ/tq4FyJ8rENE02+TqrxGWP7Ky25jVZDknPYWIZyCC RG82P+8Rotjl0JS0PvvuZXz5S/7GajVTs+mhYAN8jQF5zUH/1b3IfJrMG1JVehMp t8AqJ0KE9zjbxloljJ98eV5S8Zh/AMBV1d8Hs1eNN9A+oIDRzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHfdh9MgiunwBCgd9gybFql8ITKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWRhOGJhYzAtYmM3MS0z NDkzLWJhMTktY2Q3ZDMyNGE5OGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0dxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALg1zR0B718clXYnzK7Bhj6qzOWivnF3N78Zr7nV8RHsGJAAv73WrNq5 YqbN2j6rQcHCH7ILXYbxm0IESSdpKpLWHNuJA3TEitV5rPteEgMxwCDKy7OevpFs dmhNhddGm4B7n3nfnz/fXPPXbfRWWWnr1+E5I6iDMDbPDa3jSF/vdYA1d2jGafFl 6/1v0g87T/mhr4LzNCuaI5Vls7Ulo3eycQCSd6QAKZxis2Bf+syTHW5hILs1NvV2 0eM1D6bdk56nkXGUPJ+QgyGh1IiLWPofBldR8lD9XlX4j3/inUb0UoOtosMi4GHJ kIb9ZRkRkCbEdsB5pqwKUOjBt41Hs8I= -----END CERTIFICATE-----Generated at Sat Aug 9 14:22:46 2025 by rpki-client