$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/757c7316-eb27-3d3c-aa04-7dc01e4efd12.roa File: 757c7316-eb27-3d3c-aa04-7dc01e4efd12.roa (raw, json) Hash identifier: qstiPxAiiYkaYZmqHa70Lf0T5W8X4gAasZz1HTNmmUg= Subject key identifier: D2:05:AD:B5:F0:DB:B4:6E:80:8A:9B:24:3E:F7:1B:91:B5:59:73:81 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B4A4712BB2C05F921A6AAFDC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/757c7316-eb27-3d3c-aa04-7dc01e4efd12.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 0 IP address blocks: 208.200.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:12:bb:2c:05:f9:21:a6:aa:fd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=aed37149-7048-4b2a-a28f-05be4d58a9ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e7:02:ca:08:74:5e:4c:17:88:5b:11:0f:48: d8:97:09:f8:32:47:b8:7f:33:e0:e0:60:79:06:72: db:10:a0:fd:5c:67:23:21:ec:0d:18:d8:10:52:bf: 8c:98:d0:12:34:78:87:2b:ca:9c:b1:26:eb:2e:78: 39:34:6d:12:d8:b3:46:21:eb:0a:c7:0b:c1:9e:f3: 2c:b9:09:a7:d9:79:23:4b:13:9a:9a:99:03:5e:70: d9:a1:38:05:5f:a8:57:ea:f2:58:cf:65:8a:41:b7: 80:ea:22:be:32:5b:59:59:00:24:63:7d:e6:67:f3: a3:35:09:f8:71:11:46:5f:4e:70:5e:a2:55:4b:8d: 60:c9:4f:2f:27:67:e4:8a:23:9c:8c:d9:2c:97:c5: 6d:1d:f4:c4:50:67:f6:3b:11:eb:09:d3:81:b0:61: 2d:94:cf:e8:18:9e:cb:b6:2d:09:3d:33:7c:5b:6a: b6:05:70:de:fd:80:86:1a:f2:0c:e1:f3:9f:e0:7d: fb:35:e0:84:8f:19:dd:78:7f:07:ec:07:8c:4a:7b: c3:e0:44:ba:b0:9d:58:16:6c:93:74:40:14:22:91: 6e:ff:28:fa:bf:e2:c5:50:ee:1c:63:a1:da:51:91: e8:91:77:26:4f:18:97:3b:1e:42:9a:15:9a:7a:55: 22:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:05:AD:B5:F0:DB:B4:6E:80:8A:9B:24:3E:F7:1B:91:B5:59:73:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/757c7316-eb27-3d3c-aa04-7dc01e4efd12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.200.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:b4:1b:d2:ca:7b:74:3a:72:6d:cc:1a:d1:80:9c:e8:a6:75: e4:68:86:2a:15:e0:02:78:fc:ac:a7:56:20:14:56:56:51:11: d0:dc:ff:73:45:85:2f:a5:5e:e7:b0:9b:82:5e:e5:c6:83:77: c2:d4:94:ef:d1:be:35:ff:95:8a:b9:e8:54:6f:eb:d7:80:50: 70:7f:88:19:a9:d6:81:e4:25:16:fa:ab:2a:9c:84:21:09:91: cb:c6:38:5e:e5:2d:2e:f2:82:e9:d9:52:72:41:c9:b6:80:03: 50:66:7a:93:6b:64:5d:74:07:48:70:51:25:b8:30:7b:d0:92: e7:64:ad:4a:9c:50:2d:4a:ec:c3:17:3a:55:7b:bb:06:36:99: ce:c4:a2:a6:2e:cd:ca:c9:d2:f8:c0:04:ee:7a:45:05:58:b5: ec:a1:d6:e3:e2:cc:95:02:ff:d5:25:05:6e:6d:c2:a5:89:0a: 4c:e7:7a:ab:4b:ea:5e:76:a4:27:15:f2:e6:cc:c5:3e:a0:76: fb:75:99:28:5b:22:56:fd:b5:72:b5:93:87:40:81:22:aa:d0: 11:a9:4f:e8:2b:59:b0:1c:48:a8:86:c9:a7:b2:f2:5e:9c:cd: 61:25:ce:39:28:10:fd:4f:af:f4:42:b9:1b:6f:fe:76:b3:63: 17:b3:0a:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRxK7LAX5Iaaq/cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk YWVkMzcxNDktNzA0OC00YjJhLWEyOGYtMDViZTRkNThhOWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoucCygh0XkwXiFsRD0jYlwn4Mke4fzPg4GB5 BnLbEKD9XGcjIewNGNgQUr+MmNASNHiHK8qcsSbrLng5NG0S2LNGIesKxwvBnvMs uQmn2XkjSxOampkDXnDZoTgFX6hX6vJYz2WKQbeA6iK+MltZWQAkY33mZ/OjNQn4 cRFGX05wXqJVS41gyU8vJ2fkiiOcjNksl8VtHfTEUGf2OxHrCdOBsGEtlM/oGJ7L ti0JPTN8W2q2BXDe/YCGGvIM4fOf4H37NeCEjxndeH8H7AeMSnvD4ES6sJ1YFmyT dEAUIpFu/yj6v+LFUO4cY6HaUZHokXcmTxiXOx5CmhWaelUiDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIFrbXw27RugIqbJD73G5G1WXOBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzU3YzczMTYtZWIyNy0z ZDNjLWFhMDQtN2RjMDFlNGVmZDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0MgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+0G9LKe3Q6cm3MGtGAnOimdeRohioV4AJ4/KynViAUVlZREdDc/3NF hS+lXuewm4Je5caDd8LUlO/RvjX/lYq56FRv69eAUHB/iBmp1oHkJRb6qyqchCEJ kcvGOF7lLS7ygunZUnJBybaAA1BmepNrZF10B0hwUSW4MHvQkudkrUqcUC1K7MMX OlV7uwY2mc7EoqYuzcrJ0vjABO56RQVYteyh1uPizJUC/9UlBW5twqWJCkzneqtL 6l52pCcV8ubMxT6gdvt1mShbIlb9tXK1k4dAgSKq0BGpT+grWbAcSKiGyaey8l6c zWElzjkoEP1Pr/RCuRtv/nazYxezCqU= -----END CERTIFICATE-----Generated at Wed Nov 5 01:24:40 2025 by rpki-client