$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2329fe43-985c-3e19-8217-dae1f9cf9a27.roa File: 2329fe43-985c-3e19-8217-dae1f9cf9a27.roa (raw, json) Hash identifier: Bh3858Y0LhtI4lKztB7PnM2v6U57x1UFh9us8CngR+Q= Subject key identifier: 19:0A:5F:ED:08:22:7C:46:13:8D:19:F2:82:21:86:F3:00:A4:1D:20 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AC2E11565A5AD311516C29C00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2329fe43-985c-3e19-8217-dae1f9cf9a27.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 0 IP address blocks: 208.221.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:15:65:a5:ad:31:15:16:c2:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=ef514077-c5bf-4b76-9fac-a5f4380183ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:52:da:d0:5d:cc:65:7d:a6:93:dc:84:70:b7: ab:f1:20:03:a9:ce:25:29:f4:c5:2a:2c:26:ab:9e: b4:86:ff:d8:40:5d:3c:8e:b4:64:37:86:87:75:9b: ea:12:61:8b:dd:fd:b2:9e:ca:67:7f:3a:10:73:75: 4c:57:87:8b:7e:22:05:34:de:a8:c6:a8:a4:8c:32: d5:03:0f:dd:6e:21:48:aa:96:54:d2:9c:cd:6e:b9: f5:c4:27:8b:1f:31:19:89:34:d3:16:d3:9c:fa:ad: 1d:0c:36:21:18:31:56:c1:cc:bc:4c:e7:fa:cb:92: 51:92:a1:05:9f:66:7c:74:03:68:1d:e6:9e:ea:c6: 42:92:15:fc:08:60:a5:8b:fa:b4:fc:04:dc:92:02: 81:08:31:d3:1d:b1:47:db:3f:e1:19:9b:53:a9:e8: 5b:22:d3:ea:dc:3d:30:c2:9c:a5:bd:ad:27:3b:32: fc:a0:30:60:b7:11:eb:05:a4:53:76:78:dd:8c:be: 12:bf:24:2c:8e:bc:ce:18:67:b6:d4:af:7c:6c:c5: ac:14:0e:71:c5:90:14:f4:7b:a8:01:ac:f2:cb:cf: fc:c0:fb:0f:54:a7:ca:92:35:8b:83:f2:f2:61:32: f6:7d:51:5a:af:70:c1:1b:d3:20:c6:a0:0f:6e:83: 9a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0A:5F:ED:08:22:7C:46:13:8D:19:F2:82:21:86:F3:00:A4:1D:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2329fe43-985c-3e19-8217-dae1f9cf9a27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.221.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:61:ed:b6:9d:8c:eb:7a:b7:52:bc:b9:a3:31:23:ae:e9:7c: eb:d7:51:de:94:3c:d6:29:72:2d:d4:35:dc:72:50:d0:bd:9b: 35:ea:4e:72:45:2c:2c:ce:70:b0:60:c9:78:9c:12:5b:b5:57: fc:07:fd:86:8d:e6:d3:fd:a7:1f:b8:1f:9d:09:e7:56:b4:0d: f2:a9:a2:96:29:40:54:42:99:36:b2:5d:32:31:a7:8e:82:87: 87:28:46:a9:df:75:c6:f0:5b:e8:6b:84:d4:af:7f:77:f3:c3: 9e:b1:5f:02:03:f3:87:1f:ab:99:de:c4:96:79:4b:1b:b9:3b: ce:6d:60:57:ff:93:8f:3a:fe:60:2a:c8:00:8b:ac:2c:5b:de: 8e:94:bc:b4:4d:35:04:83:94:8d:8f:d8:9c:1d:01:6d:6e:8f: 48:f0:ad:66:c6:07:78:29:73:b4:31:cb:48:4a:50:e3:a5:34: 29:bd:94:9f:88:0b:a7:f7:73:b6:43:c5:3c:1b:b6:d1:18:1c: e7:e7:e3:3d:90:9d:d6:1c:49:f3:d9:a1:d7:3d:8a:23:30:66: 0d:6b:ec:df:0d:37:47:26:67:2b:27:bb:6a:0a:db:56:84:f4: c0:0c:72:6f:59:ca:84:42:c7:9a:e1:b5:c0:13:fd:88:1b:3d: 82:e7:54:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4RVlpa0xFRbCnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZWY1MTQwNzctYzViZi00Yjc2LTlmYWMtYTVmNDM4MDE4M2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1La0F3MZX2mk9yEcLer8SADqc4lKfTFKiwm q560hv/YQF08jrRkN4aHdZvqEmGL3f2ynspnfzoQc3VMV4eLfiIFNN6oxqikjDLV Aw/dbiFIqpZU0pzNbrn1xCeLHzEZiTTTFtOc+q0dDDYhGDFWwcy8TOf6y5JRkqEF n2Z8dANoHeae6sZCkhX8CGCli/q0/ATckgKBCDHTHbFH2z/hGZtTqehbItPq3D0w wpylva0nOzL8oDBgtxHrBaRTdnjdjL4SvyQsjrzOGGe21K98bMWsFA5xxZAU9Huo Aazyy8/8wPsPVKfKkjWLg/LyYTL2fVFar3DBG9MgxqAPboOaMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkKX+0IInxGE40Z8oIhhvMApB0gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjMyOWZlNDMtOTg1Yy0z ZTE5LTgyMTctZGFlMWY5Y2Y5YTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0N1IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRh7badjOt6t1K8uaMxI67pfOvXUd6UPNYpci3UNdxyUNC9mzXqTnJF LCzOcLBgyXicElu1V/wH/YaN5tP9px+4H50J51a0DfKpopYpQFRCmTayXTIxp46C h4coRqnfdcbwW+hrhNSvf3fzw56xXwID84cfq5nexJZ5Sxu5O85tYFf/k486/mAq yACLrCxb3o6UvLRNNQSDlI2P2JwdAW1uj0jwrWbGB3gpc7Qxy0hKUOOlNCm9lJ+I C6f3c7ZDxTwbttEYHOfn4z2QndYcSfPZodc9iiMwZg1r7N8NN0cmZysnu2oK21aE 9MAMcm9ZyoRCx5rhtcAT/YgbPYLnVCo= -----END CERTIFICATE-----Generated at Wed Aug 6 11:13:42 2025 by rpki-client