$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f8e3b30-9a3a-3c21-a9e5-d50c9a1a37e6.roa File: 8f8e3b30-9a3a-3c21-a9e5-d50c9a1a37e6.roa (raw, json) Hash identifier: wojAAi66Fgi2tSWg2xkLXBaCxpJE61oV9lSSY3HLsFI= Subject key identifier: C2:56:A4:78:60:51:9B:C1:1D:0F:17:0D:8C:4E:BA:BF:23:56:C1:41 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AF256A4DA22A47375FB356980 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f8e3b30-9a3a-3c21-a9e5-d50c9a1a37e6.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 3855 IP address blocks: 199.172.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:a4:da:22:a4:73:75:fb:35:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=1846c1c5-a1cc-446b-885f-5692294345f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ec:10:51:31:cd:c5:42:aa:95:ca:90:bd:f6: df:81:87:75:b8:88:9f:7e:b8:83:cf:51:ea:ff:09: 66:35:43:14:0e:05:e4:a4:9f:8b:47:f9:bc:0f:4a: 54:33:47:0b:d2:a0:ce:7a:4b:4f:85:60:22:11:67: d6:4a:42:1e:3e:e9:65:0b:ea:11:82:a2:ec:e1:ab: c4:0d:aa:e7:16:da:ef:c1:4c:56:01:d7:b1:52:87: fa:f6:a0:08:a4:fe:64:5e:2d:06:83:dd:c4:2b:c8: df:09:0b:6f:bf:08:9a:b5:50:aa:29:4d:c1:b1:60: f4:d0:14:00:1a:99:40:70:28:c5:01:84:be:56:10: a3:20:d5:6c:d5:a7:94:a1:36:c5:c3:3d:af:81:ff: 11:63:bb:c0:b2:bb:96:8e:0b:ca:56:fb:2e:82:16: 0f:2b:df:63:e2:63:f4:0b:cc:35:ae:33:36:32:00: d9:57:1a:62:a6:e7:5d:91:35:83:bd:1c:23:6f:64: 8c:2b:7f:d1:a6:5b:9c:5d:cf:73:20:36:a8:e0:89: e6:0f:52:32:eb:eb:87:22:24:42:90:0a:24:d9:f4: 06:1b:c3:75:a7:c8:4c:b9:38:37:2d:a8:cd:b6:db: 58:d3:39:ad:fd:e7:7d:e8:79:27:6b:a4:64:84:8c: 7a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:56:A4:78:60:51:9B:C1:1D:0F:17:0D:8C:4E:BA:BF:23:56:C1:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f8e3b30-9a3a-3c21-a9e5-d50c9a1a37e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:40:8c:5e:0f:8b:ff:ab:00:f8:98:70:db:8d:8f:68:78:05: f3:61:8c:cb:a9:0f:9d:58:f7:da:85:0e:aa:78:0b:20:5b:6a: 76:8e:2f:95:cd:e8:4d:07:63:83:da:49:ca:c6:94:13:c6:b8: 53:57:ad:d0:43:52:b6:30:61:51:b8:97:dd:11:ef:2f:cd:1f: ac:f3:83:ad:32:c7:7a:de:03:c7:a2:86:bf:d6:47:76:44:f3: 2e:72:8b:7b:62:f8:91:64:2d:21:e8:b3:b2:92:fd:e6:82:e2: 4e:61:fd:4a:f2:02:2b:a6:aa:ff:c9:8f:07:14:d0:d0:81:2b: 45:b7:31:6f:cd:ce:f2:d7:cb:c3:c6:84:e4:f6:65:75:c3:df: aa:d5:a5:74:fb:b9:41:fe:2f:21:72:46:a7:b1:ab:cb:77:e1: 41:91:e7:8e:1d:bb:84:5a:2f:4b:8b:3e:7f:35:f2:14:41:35: 5f:5e:84:79:38:e4:77:b5:2a:a0:5f:b8:2b:a0:45:fe:9f:5b: 4c:50:b9:f2:5e:45:50:fe:be:44:f5:71:51:c8:30:0d:e9:12: 13:63:4f:dc:01:c8:dd:16:0b:5e:03:cc:94:ec:6c:0e:c7:31: 56:5c:3c:98:e9:76:90:2a:f4:d5:a1:67:60:79:da:41:bf:b6: 44:e3:31:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVqTaIqRzdfs1aYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk MTg0NmMxYzUtYTFjYy00NDZiLTg4NWYtNTY5MjI5NDM0NWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApewQUTHNxUKqlcqQvfbfgYd1uIiffriDz1Hq /wlmNUMUDgXkpJ+LR/m8D0pUM0cL0qDOektPhWAiEWfWSkIePullC+oRgqLs4avE DarnFtrvwUxWAdexUof69qAIpP5kXi0Gg93EK8jfCQtvvwiatVCqKU3BsWD00BQA GplAcCjFAYS+VhCjINVs1aeUoTbFwz2vgf8RY7vAsruWjgvKVvsughYPK99j4mP0 C8w1rjM2MgDZVxpipuddkTWDvRwjb2SMK3/RplucXc9zIDao4InmD1Iy6+uHIiRC kAok2fQGG8N1p8hMuTg3LajNtttY0zmt/ed96Hkna6RkhIx6+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJWpHhgUZvBHQ8XDYxOur8jVsFBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGY4ZTNiMzAtOWEzYS0z YzIxLWE5ZTUtZDUwYzlhMWEzN2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKBAjF4Pi/+rAPiYcNuNj2h4BfNhjMupD51Y99qFDqp4CyBbanaOL5XN 6E0HY4PaScrGlBPGuFNXrdBDUrYwYVG4l90R7y/NH6zzg60yx3reA8eihr/WR3ZE 8y5yi3ti+JFkLSHos7KS/eaC4k5h/UryAiumqv/JjwcU0NCBK0W3MW/NzvLXy8PG hOT2ZXXD36rVpXT7uUH+LyFyRqexq8t34UGR544du4RaL0uLPn818hRBNV9ehHk4 5He1KqBfuCugRf6fW0xQufJeRVD+vkT1cVHIMA3pEhNjT9wByN0WC14DzJTsbA7H MVZcPJjpdpAq9NWhZ2B52kG/tkTjMeQ= -----END CERTIFICATE-----Generated at Wed Nov 5 01:13:41 2025 by rpki-client