$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9b7bf6a0-22e1-3b09-bdfb-24950d49a0bd.roa File: 9b7bf6a0-22e1-3b09-bdfb-24950d49a0bd.roa (raw, json) Hash identifier: KEYu8egZtZ3gfi8eIfu/Nt6SfkGYT4rVhYWB23a08ck= Subject key identifier: C3:4D:1F:E3:AB:3F:6D:38:84:6E:1E:1D:D7:83:3F:08:1E:A2:6E:C4 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BA39D3195562CCC8B93D84F40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9b7bf6a0-22e1-3b09-bdfb-24950d49a0bd.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 701 IP address blocks: 209.119.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:31:95:56:2c:cc:8b:93:d8:4f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=64d91e8a-0fbf-4368-a739-6427dd8b2bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0d:fc:dc:19:f7:41:d9:c6:f6:9e:84:cd:53: 26:54:65:48:91:b9:18:f2:4b:3a:0b:24:97:58:48: 60:c1:1f:45:1a:ac:c9:a3:4f:b5:c6:18:d2:f9:43: ab:30:a2:26:8a:b1:2a:37:f4:bb:3a:60:8f:01:e9: 4b:f3:a1:eb:56:39:5a:d5:d9:9c:47:45:5f:83:7a: 95:38:fc:c1:eb:11:ac:2f:7b:95:41:4b:5c:60:cb: 1e:12:ed:a3:b8:44:44:3d:62:69:db:ff:3c:6d:7d: 36:1d:b4:59:df:3b:13:99:a9:2b:4b:97:9f:68:3b: 53:cf:54:56:64:f8:ae:58:6e:e2:d0:a5:cd:bb:0e: bd:72:b3:94:b5:00:9a:23:33:32:f5:21:3d:44:81: 8b:ea:5d:9f:79:de:1f:46:e4:01:87:26:e1:ab:7d: 5d:b5:41:e6:dc:d2:14:9e:b7:9b:8e:5b:c9:a3:41: 5e:3c:b5:67:33:68:49:19:4b:12:cd:54:52:80:18: bf:01:85:be:52:fc:6a:af:c1:ff:75:16:8e:d1:c5: 65:63:6f:2c:ff:ba:d3:a9:49:33:92:d6:69:21:75: 3c:e7:c3:2e:5f:b0:54:c9:a5:09:f7:72:1b:6c:d4: 1e:1b:26:e8:87:2b:4f:c6:1f:48:64:06:fd:fd:41: 3b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:4D:1F:E3:AB:3F:6D:38:84:6E:1E:1D:D7:83:3F:08:1E:A2:6E:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9b7bf6a0-22e1-3b09-bdfb-24950d49a0bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 209.119.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:19:a3:a2:c7:78:26:f0:f2:3b:a2:ef:17:81:43:09:7a:30: f2:35:d3:f7:eb:25:f6:6b:e0:39:11:a4:a9:70:f2:d3:24:50: e1:df:b9:7a:61:9d:90:9b:18:1f:80:b1:5f:2c:76:87:b4:81: d2:bc:4c:a0:08:c4:fa:64:e4:18:d7:7a:cf:16:44:f3:e1:31: 1e:11:65:56:39:3b:e7:f2:80:d3:b8:7f:d5:fc:54:4d:fa:ce: d0:19:4c:07:d8:80:8c:6a:33:73:a6:6a:a1:ee:a9:3c:03:53: 7f:b6:bd:a7:34:e3:19:af:8f:31:85:f6:38:c5:a9:14:f2:e9: bb:98:94:fb:36:f0:e0:be:3c:4e:05:4a:a4:07:82:2d:4a:83: 3c:52:7c:8f:b4:19:cf:ba:dd:eb:0b:6f:f0:37:6f:c8:eb:7c: b6:ec:1f:c6:e4:b9:85:a7:0c:8b:be:e1:b0:87:69:c6:41:8c: 56:0a:23:aa:50:37:3c:13:de:07:9c:e6:21:4d:67:97:cc:8d: 7d:52:61:3e:db:a5:09:57:26:23:9e:ed:68:d7:4e:1b:25:8b: 65:54:78:37:e1:56:ec:a6:86:03:c5:a1:64:75:f1:c7:ca:38: 7d:86:40:17:65:57:62:12:15:3e:6c:ad:f3:77:13:a8:d0:7b: 29:08:de:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnTGVVizMi5PYT0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NjRkOTFlOGEtMGZiZi00MzY4LWE3MzktNjQyN2RkOGIyYmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0g383Bn3QdnG9p6EzVMmVGVIkbkY8ks6CySX WEhgwR9FGqzJo0+1xhjS+UOrMKImirEqN/S7OmCPAelL86HrVjla1dmcR0Vfg3qV OPzB6xGsL3uVQUtcYMseEu2juEREPWJp2/88bX02HbRZ3zsTmakrS5efaDtTz1RW ZPiuWG7i0KXNuw69crOUtQCaIzMy9SE9RIGL6l2fed4fRuQBhybhq31dtUHm3NIU nrebjlvJo0FePLVnM2hJGUsSzVRSgBi/AYW+Uvxqr8H/dRaO0cVlY28s/7rTqUkz ktZpIXU858MuX7BUyaUJ93IbbNQeGybohytPxh9IZAb9/UE76QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNNH+OrP204hG4eHdeDPwgeom7EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOWI3YmY2YTAtMjJlMS0z YjA5LWJkZmItMjQ5NTBkNDlhMGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XcBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKkZo6LHeCbw8jui7xeBQwl6MPI10/frJfZr4DkRpKlw8tMkUOHfuXph nZCbGB+AsV8sdoe0gdK8TKAIxPpk5BjXes8WRPPhMR4RZVY5O+fygNO4f9X8VE36 ztAZTAfYgIxqM3OmaqHuqTwDU3+2vac04xmvjzGF9jjFqRTy6buYlPs28OC+PE4F SqQHgi1KgzxSfI+0Gc+63esLb/A3b8jrfLbsH8bkuYWnDIu+4bCHacZBjFYKI6pQ NzwT3gec5iFNZ5fMjX1SYT7bpQlXJiOe7WjXThsli2VUeDfhVuymhgPFoWR18cfK OH2GQBdlV2ISFT5srfN3E6jQeykI3ok= -----END CERTIFICATE-----Generated at Wed Nov 5 14:29:19 2025 by rpki-client