$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aaf41670-9101-34ad-ac92-f5d05de80639.roa File: aaf41670-9101-34ad-ac92-f5d05de80639.roa (raw, json) Hash identifier: mTfr0Fz23zwT0oVbCb+wqM3NbfdGrCiNuXdvXEazF7Y= Subject key identifier: 13:6D:BB:D1:BB:3C:D1:44:83:AB:6F:6E:FE:25:90:D6:33:D0:70:AB Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B9E07C89251EC5364E6753040 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aaf41670-9101-34ad-ac92-f5d05de80639.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 0 IP address blocks: 199.222.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:c8:92:51:ec:53:64:e6:75:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=e9ac1658-f338-4d2e-860e-6380c72dc9e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:98:b5:ef:61:e4:7d:d0:b4:9b:d5:67:c1:14: 4b:ba:a4:97:d3:9a:37:21:b1:b1:35:33:cc:4e:b2: 83:c8:f2:fb:ec:52:8e:9d:7a:7c:4f:15:51:b2:88: 8e:c1:f3:d1:a3:03:d9:1b:ce:60:cb:fe:74:22:51: 55:13:7f:19:e3:5e:94:a1:be:1c:93:42:b9:22:08: 88:84:05:89:2e:73:e0:d7:75:51:ee:f7:6a:09:1d: 32:1d:d3:ec:9c:62:31:e2:d6:a9:0b:6c:74:e6:75: 5d:f6:15:96:31:f6:e1:a3:4d:8d:45:57:34:d4:46: 7d:13:9d:45:bb:e8:b4:47:e2:7a:0a:d8:46:34:a8: 7f:25:da:0b:19:0b:3a:d2:fc:08:0c:34:74:24:7a: 99:c6:bd:a7:5b:2b:c1:ce:c6:08:a7:a8:74:7c:f1: 5f:74:7f:20:f7:97:c1:51:4a:64:19:44:9a:d2:d1: 3b:bb:dc:0f:95:d3:47:aa:0d:1a:75:44:52:df:34: 10:5c:b6:dd:76:07:81:e7:f1:53:44:89:9d:65:1f: 9f:3b:3a:b5:b7:6b:5a:a7:56:29:80:b7:1d:22:22: e2:98:e6:f0:47:b1:17:6e:00:5c:9c:4e:28:7a:9c: 6a:63:2d:e3:c5:a3:a4:23:18:da:1f:2c:c2:84:26: dc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:6D:BB:D1:BB:3C:D1:44:83:AB:6F:6E:FE:25:90:D6:33:D0:70:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aaf41670-9101-34ad-ac92-f5d05de80639.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.222.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:23:1b:f9:f1:a5:4a:f6:86:25:38:6d:90:63:63:28:e9:9f: 72:b6:c4:10:9d:ee:3e:92:db:51:5a:f2:54:b5:51:6f:20:54: 1f:ca:cf:17:e8:93:96:36:ca:26:a6:50:99:17:b9:93:70:36: 71:82:07:7e:b6:96:f7:c3:de:6c:8b:f9:38:21:93:cc:b3:9e: 06:af:80:15:19:07:70:82:e8:b2:74:23:eb:31:df:61:41:43: 2f:ae:92:e5:77:57:eb:d8:b3:8c:3b:b7:25:b9:7d:e1:79:b3: 92:72:bd:98:2b:c1:05:2e:5a:57:7d:16:a9:d7:0c:cf:99:ca: d9:6a:7d:52:f6:ef:a7:ce:52:f4:9c:57:90:2e:63:49:84:f5: 9a:aa:ad:1f:5b:dd:5f:71:82:0a:16:04:5c:1b:57:ae:39:92: 05:b7:77:59:0b:4c:f4:3b:e5:4e:5c:95:ab:46:5f:2a:b4:cc: 84:70:bc:fd:41:1c:1e:66:5e:20:a5:3a:8a:88:96:75:60:55: 6f:d5:9c:6e:6a:03:15:66:51:38:88:bd:3c:68:b2:0e:e9:09: e1:b0:87:33:66:27:21:4c:6b:32:bc:a9:f5:0f:d7:bd:51:2d: 0a:fb:95:ba:81:c5:d5:10:5b:0d:dd:60:57:da:69:75:ff:f5: 55:fe:3d:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8iSUexTZOZ1MEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZTlhYzE2NTgtZjMzOC00ZDJlLTg2MGUtNjM4MGM3MmRjOWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZi172HkfdC0m9VnwRRLuqSX05o3IbGxNTPM TrKDyPL77FKOnXp8TxVRsoiOwfPRowPZG85gy/50IlFVE38Z416Uob4ck0K5IgiI hAWJLnPg13VR7vdqCR0yHdPsnGIx4tapC2x05nVd9hWWMfbho02NRVc01EZ9E51F u+i0R+J6CthGNKh/JdoLGQs60vwIDDR0JHqZxr2nWyvBzsYIp6h0fPFfdH8g95fB UUpkGUSa0tE7u9wPldNHqg0adURS3zQQXLbddgeB5/FTRImdZR+fOzq1t2tap1Yp gLcdIiLimObwR7EXbgBcnE4oepxqYy3jxaOkIxjaHyzChCbc8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNtu9G7PNFEg6tvbv4lkNYz0HCrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWFmNDE2NzAtOTEwMS0z NGFkLWFjOTItZjVkMDVkZTgwNjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx96QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK0jG/nxpUr2hiU4bZBjYyjpn3K2xBCd7j6S21Fa8lS1UW8gVB/Kzxfo k5Y2yiamUJkXuZNwNnGCB362lvfD3myL+Tghk8yzngavgBUZB3CC6LJ0I+sx32FB Qy+ukuV3V+vYs4w7tyW5feF5s5JyvZgrwQUuWld9FqnXDM+ZytlqfVL276fOUvSc V5AuY0mE9ZqqrR9b3V9xggoWBFwbV645kgW3d1kLTPQ75U5clatGXyq0zIRwvP1B HB5mXiClOoqIlnVgVW/VnG5qAxVmUTiIvTxosg7pCeGwhzNmJyFMazK8qfUP171R LQr7lbqBxdUQWw3dYFfaaXX/9VX+PZo= -----END CERTIFICATE-----Generated at Wed Nov 5 01:57:25 2025 by rpki-client