$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29f2f972-8653-3688-9bc8-f78adbb0d8ef.roa File: 29f2f972-8653-3688-9bc8-f78adbb0d8ef.roa (raw, json) Hash identifier: GDeX8E9C1lPc6oG7Xyz8oSybaqIQ1kltLzuZlQBlAoo= Subject key identifier: DE:BD:E0:6D:8A:96:E4:A2:39:54:1B:3F:AC:79:59:EF:C4:AC:A1:8C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BA39D2C2F80C5A38060FA7A40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29f2f972-8653-3688-9bc8-f78adbb0d8ef.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 701 IP address blocks: 209.116.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:2c:2f:80:c5:a3:80:60:fa:7a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=8536e620-344d-426d-945b-c94eaafa4ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7e:38:63:e7:50:da:a8:51:7c:73:df:ea:f0: 94:50:49:51:f5:6f:6e:9a:ce:de:12:a8:a0:6d:68: 98:11:70:19:d3:6d:02:8d:c6:21:35:30:60:16:2d: fe:60:93:9e:d9:e5:2a:95:2f:b6:a1:19:29:55:7d: 58:b3:48:10:73:f4:64:37:73:80:fd:32:15:e2:cf: 1e:89:61:19:cc:46:18:db:88:8e:63:9c:82:ec:64: 86:4b:75:5e:3a:4d:4f:19:de:58:ba:b1:79:c9:a8: a3:42:21:81:7b:c9:71:f4:c8:33:2e:0c:3d:51:02: 5e:22:19:46:0b:c2:a0:79:a3:5b:12:db:7b:67:61: b8:4e:11:06:e6:52:e9:2c:ed:5f:56:8b:9f:5b:8f: 92:85:2c:e1:f4:51:a0:ed:c9:ba:cf:98:0c:cc:f2: 10:65:b6:32:fd:7f:7f:7a:93:33:e5:41:54:e2:1e: 44:21:b4:17:cb:64:d9:7d:eb:55:d1:f2:25:c6:9c: 17:e7:2e:c4:87:89:86:ad:47:49:7f:f2:28:41:1a: 20:f1:a9:e5:9a:b4:9a:88:f4:b3:76:ed:5b:e9:0a: 11:f7:a5:fb:9f:8c:24:3c:e7:54:8c:e3:f1:71:2c: 7e:42:34:84:06:a2:b4:d1:f4:32:ff:69:0b:2c:32: fd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:BD:E0:6D:8A:96:E4:A2:39:54:1B:3F:AC:79:59:EF:C4:AC:A1:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29f2f972-8653-3688-9bc8-f78adbb0d8ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 209.116.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:11:15:4f:b4:b1:79:5f:07:46:55:c1:73:7b:0f:96:65:1c: 71:6d:aa:88:8c:d2:24:e5:e1:cd:e5:18:4e:97:9b:f2:6e:95: 6e:92:7c:df:b3:bc:90:d6:d6:39:69:5a:a2:cb:b6:35:15:ba: e9:07:9e:83:c1:dd:68:0d:76:38:d4:b6:33:dd:1b:4f:9c:d7: a5:02:02:98:0e:e7:65:64:ee:5a:45:ba:24:d4:ef:b1:31:d9: 1d:cd:4a:ae:c9:47:8e:8d:d2:2f:02:d6:bf:c0:ce:80:f2:3e: 15:4a:6f:d3:6c:fd:85:00:ab:bc:29:98:dc:8f:fc:31:74:bf: 13:f2:31:07:fe:0f:e1:ba:18:9b:3d:dc:fd:38:4a:ec:d2:ad: 20:c8:60:3e:f8:d2:f3:7f:cf:e6:57:3d:3d:ce:f8:49:4d:8d: 9a:60:7d:09:67:a1:1d:51:b1:84:0c:ff:32:9c:5c:e7:6e:78: 25:38:f4:cb:a7:10:c9:4b:8f:7c:b1:9e:3d:c5:2b:03:26:13: 89:2f:a3:ac:60:37:64:a9:e4:0c:1c:96:2e:a7:4a:58:ba:87: bc:29:3e:64:86:07:88:99:b3:87:a9:36:74:ef:ce:ad:6b:19: d9:c7:a6:9d:f4:27:d3:c8:8a:5d:a0:dd:9d:47:3d:2d:82:39: 06:74:e3:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSwvgMWjgGD6ekAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ODUzNmU2MjAtMzQ0ZC00MjZkLTk0NWItYzk0ZWFhZmE0ZWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn44Y+dQ2qhRfHPf6vCUUElR9W9ums7eEqig bWiYEXAZ020CjcYhNTBgFi3+YJOe2eUqlS+2oRkpVX1Ys0gQc/RkN3OA/TIV4s8e iWEZzEYY24iOY5yC7GSGS3VeOk1PGd5YurF5yaijQiGBe8lx9MgzLgw9UQJeIhlG C8KgeaNbEtt7Z2G4ThEG5lLpLO1fVoufW4+ShSzh9FGg7cm6z5gMzPIQZbYy/X9/ epMz5UFU4h5EIbQXy2TZfetV0fIlxpwX5y7Eh4mGrUdJf/IoQRog8anlmrSaiPSz du1b6QoR96X7n4wkPOdUjOPxcSx+QjSEBqK00fQy/2kLLDL9KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN694G2KluSiOVQbP6x5We/ErKGMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjlmMmY5NzItODY1My0z Njg4LTliYzgtZjc4YWRiYjBkOGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XSYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAERFU+0sXlfB0ZVwXN7D5ZlHHFtqoiM0iTl4c3lGE6Xm/JulW6SfN+z vJDW1jlpWqLLtjUVuukHnoPB3WgNdjjUtjPdG0+c16UCApgO52Vk7lpFuiTU77Ex 2R3NSq7JR46N0i8C1r/AzoDyPhVKb9Ns/YUAq7wpmNyP/DF0vxPyMQf+D+G6GJs9 3P04SuzSrSDIYD740vN/z+ZXPT3O+ElNjZpgfQlnoR1RsYQM/zKcXOdueCU49Mun EMlLj3yxnj3FKwMmE4kvo6xgN2Sp5Awcli6nSli6h7wpPmSGB4iZs4epNnTvzq1r GdnHpp30J9PIil2g3Z1HPS2COQZ049o= -----END CERTIFICATE-----Generated at Wed Nov 5 13:04:36 2025 by rpki-client