$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1da8bac0-bc71-3493-ba19-cd7d324a98ed.roa File: 1da8bac0-bc71-3493-ba19-cd7d324a98ed.roa (raw, json) Hash identifier: vshFsaO9Nk6ipvd6XEkamc2AlJ5e0T0EBeTH2O0GBfk= Subject key identifier: 54:1D:C3:6C:F1:07:21:E6:DD:50:B8:20:3B:B3:E1:5D:85:CE:B7:C3 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BA39D31DA2D8C683304C7AA80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1da8bac0-bc71-3493-ba19-cd7d324a98ed.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 701 IP address blocks: 209.220.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:31:da:2d:8c:68:33:04:c7:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=05c99335-3ab2-4166-be36-fef8520bc3b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:48:3f:28:f5:0a:06:90:a5:0d:fc:0f:cd:32: 2f:81:67:d9:9a:7f:48:ba:1a:4d:a1:95:d4:31:3a: 7c:2d:0b:07:ad:25:71:e8:4e:00:a3:ce:d0:77:a7: 0e:cb:8d:98:e1:e3:31:85:bf:de:9d:58:96:5a:39: 24:48:81:bb:16:cf:27:30:28:9d:9b:1c:35:5b:7b: e4:5c:80:86:f9:b8:98:8c:ba:f8:f9:36:a9:bf:04: 2f:45:8a:1e:22:5c:5e:14:00:61:14:d7:7d:30:1d: 50:ef:41:22:87:42:3d:8d:42:15:e7:54:00:ff:22: 2f:dd:59:21:80:4d:f1:2c:a3:c1:23:20:09:fa:c0: 5b:f4:10:fa:a6:c3:0b:76:26:4e:54:b1:6d:b5:8e: e1:4d:38:f9:f5:37:5b:1d:ff:1c:ed:7f:2f:46:bb: 92:62:b9:3b:6c:80:06:6f:bd:0a:a0:68:d8:95:b2: 35:6a:3f:a2:b3:0a:2e:17:b9:48:bc:a3:5d:ad:b6: 21:76:f3:8a:b2:d5:6e:27:ad:22:be:9f:38:26:ac: 14:cc:a0:d1:91:c6:fd:e1:38:05:43:5c:04:ca:c6: ab:2f:dd:a5:c6:35:18:85:67:4b:7d:b3:a6:46:82: 5c:b9:00:41:77:0b:a8:17:ef:0b:85:7d:9f:db:23: 9b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:1D:C3:6C:F1:07:21:E6:DD:50:B8:20:3B:B3:E1:5D:85:CE:B7:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1da8bac0-bc71-3493-ba19-cd7d324a98ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 209.220.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:56:16:4e:08:fb:5d:92:90:d3:8c:94:09:2f:7b:e5:02:3e: 76:3d:4d:81:96:3d:d2:91:5a:9d:1b:93:cd:5e:b8:62:35:ed: 9b:79:77:a6:9f:83:c8:bf:ea:01:dd:c8:1b:f5:73:88:78:46: 04:3e:5d:a3:98:56:74:d0:70:c0:e3:34:4c:cf:15:46:fe:2e: 21:d4:43:bd:a4:a3:72:44:1f:1f:6d:d8:af:0a:1d:24:f2:77: 61:e4:52:3f:87:c3:72:10:ac:2c:85:e4:dc:04:37:34:7f:0f: 02:77:9f:40:54:e7:3a:a1:50:74:bb:04:3c:8b:91:3b:7d:ea: 03:ec:32:ef:a1:b6:cc:27:4b:a6:db:56:51:3a:a2:1d:3e:65: 40:52:c8:f0:e8:40:35:f1:e0:cd:c8:ae:88:61:a1:b7:cf:5e: 24:c1:73:f0:07:dc:0f:da:cb:8e:0f:9a:9d:d6:f2:8b:21:bd: 08:c1:38:17:4d:e0:22:f1:00:b1:3d:3a:38:8a:78:eb:eb:2b: ac:f9:b0:8e:46:bf:32:85:56:6d:11:32:70:3e:75:69:7c:71: 26:16:fd:80:e6:1c:94:e0:b2:f6:ae:ee:15:29:a0:60:09:45: 4e:60:ed:d5:57:d3:9f:e0:1b:b8:b4:97:f7:0e:2f:e3:0e:61: 57:eb:af:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTHaLYxoMwTHqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MDVjOTkzMzUtM2FiMi00MTY2LWJlMzYtZmVmODUyMGJjM2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0g/KPUKBpClDfwPzTIvgWfZmn9IuhpNoZXU MTp8LQsHrSVx6E4Ao87Qd6cOy42Y4eMxhb/enViWWjkkSIG7Fs8nMCidmxw1W3vk XICG+biYjLr4+TapvwQvRYoeIlxeFABhFNd9MB1Q70Eih0I9jUIV51QA/yIv3Vkh gE3xLKPBIyAJ+sBb9BD6psMLdiZOVLFttY7hTTj59TdbHf8c7X8vRruSYrk7bIAG b70KoGjYlbI1aj+iswouF7lIvKNdrbYhdvOKstVuJ60ivp84JqwUzKDRkcb94TgF Q1wEysarL92lxjUYhWdLfbOmRoJcuQBBdwuoF+8LhX2f2yObCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQdw2zxByHm3VC4IDuz4V2FzrfDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWRhOGJhYzAtYmM3MS0z NDkzLWJhMTktY2Q3ZDMyNGE5OGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0dxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtWFk4I+12SkNOMlAkve+UCPnY9TYGWPdKRWp0bk81euGI17Zt5d6af g8i/6gHdyBv1c4h4RgQ+XaOYVnTQcMDjNEzPFUb+LiHUQ72ko3JEHx9t2K8KHSTy d2HkUj+Hw3IQrCyF5NwENzR/DwJ3n0BU5zqhUHS7BDyLkTt96gPsMu+htswnS6bb VlE6oh0+ZUBSyPDoQDXx4M3IrohhobfPXiTBc/AH3A/ay44Pmp3W8oshvQjBOBdN 4CLxALE9OjiKeOvrK6z5sI5GvzKFVm0RMnA+dWl8cSYW/YDmHJTgsvau7hUpoGAJ RU5g7dVX05/gG7i0l/cOL+MOYVfrr8U= -----END CERTIFICATE-----Generated at Wed Nov 5 11:36:16 2025 by rpki-client