$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af8fbb5b-c77e-30b4-8d00-9ead956f54d3.roa File: af8fbb5b-c77e-30b4-8d00-9ead956f54d3.roa (raw, json) Hash identifier: Mn17EGnZwSKntdMmzIY+2The0YGY+3yhItq+kj9vzv0= Subject key identifier: 70:31:A1:AC:B6:1E:95:11:22:59:97:CA:D5:A2:C1:66:2B:06:3B:45 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AAC8B840104B37BF82D83C2C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af8fbb5b-c77e-30b4-8d00-9ead956f54d3.roa Signing time: Tue 29 Jul 2025 01:00:48 +0000 ROA not before: Tue 29 Jul 2025 01:00:48 +0000 ROA not after: Mon 27 Oct 2025 01:00:48 +0000 asID: 14618 IP address blocks: 208.214.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ac:8b:84:01:04:b3:7b:f8:2d:83:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 29 01:00:48 2025 GMT Not After : Oct 27 01:00:48 2025 GMT Subject: CN=79f4b9d9-d3df-47a9-a2bb-ce446ce761f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:15:f9:1d:d7:9c:98:f5:70:b3:9f:8a:53:83: eb:5b:2f:3f:52:6c:09:22:ac:aa:94:14:5d:0e:d7: 68:0b:04:03:53:16:47:96:32:18:21:00:c6:b5:d2: 3c:b0:c2:ef:b5:bf:11:0c:fe:3f:0b:fc:54:e5:23: 52:ab:18:2f:87:9a:6d:83:51:6b:d0:d7:7b:8d:8b: 01:8e:58:84:00:95:2d:5b:c8:6e:db:3e:95:6a:3f: 54:93:67:44:15:ac:54:a1:21:88:64:7b:d4:d5:de: db:d3:33:a9:67:02:f8:23:3b:cf:2d:f6:f4:d1:e6: fa:7e:0a:6f:07:1b:6e:45:57:6b:76:41:fd:1e:7a: 38:78:9d:48:5c:ff:ce:f4:ae:eb:72:07:7e:a3:c7: a1:9f:ed:2f:74:01:fd:39:e8:df:a8:0f:56:d6:fa: 4c:c0:5a:1a:46:e1:06:5b:c9:a7:e7:16:9c:8d:51: f4:c2:e8:b0:e4:61:b1:41:bc:7e:fc:30:eb:d2:1e: 50:2e:f4:c7:ea:99:d9:85:87:27:3c:29:af:dd:7c: 18:5f:b4:f1:73:37:2b:64:2c:76:7c:c8:29:b0:70: 34:4c:58:5c:d0:27:b5:b6:b4:88:f1:bb:f9:2b:44: 28:48:6d:02:ee:36:08:2d:47:8d:29:c3:d1:94:63: ec:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:31:A1:AC:B6:1E:95:11:22:59:97:CA:D5:A2:C1:66:2B:06:3B:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af8fbb5b-c77e-30b4-8d00-9ead956f54d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.214.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:a1:c3:41:f4:85:18:52:e6:6a:62:3e:8c:1b:43:25:49:b6: 6b:b5:60:31:7c:4b:d0:91:02:30:54:11:07:3c:5f:3f:39:af: 21:a1:12:86:8d:18:ca:88:d6:b8:d8:50:23:99:6e:0c:b3:6a: 4c:75:ce:69:54:da:e3:96:6d:b7:f8:b1:9f:a8:63:68:38:c5: 78:e9:f9:7a:2d:86:4b:72:f6:64:59:f5:eb:7d:eb:24:a8:d3: 59:6c:bf:b5:ce:41:2b:49:99:94:02:9d:84:63:3d:67:b1:b9: 07:31:7b:35:bf:12:8f:9b:d8:95:84:7c:22:b6:3a:26:22:9c: a5:72:42:83:0a:fd:bf:9c:88:87:8e:f5:9a:79:89:28:48:85: 29:28:d6:06:40:e3:55:4a:b6:e5:aa:04:cf:9d:1f:88:99:91: c9:e6:80:bd:18:d9:2a:d2:02:96:90:d2:3f:5e:57:b8:42:1c: 56:b2:0f:57:cc:31:5b:57:a9:94:0c:74:ce:fc:30:21:44:21: 79:59:f2:4d:ae:aa:46:4a:97:bf:ba:d3:f5:92:d6:63:8a:ab: 54:9f:f5:13:ea:6a:0a:c1:93:7d:f8:e4:fa:51:85:5e:f5:61: 8f:4e:69:09:08:6f:f5:6f:48:f5:e4:48:36:a7:bd:96:9e:cf: 11:92:8b:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqsi4QBBLN7+C2DwsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcyOTAxMDA0OFoXDTI1MTAyNzAxMDA0OFowLzEtMCsGA1UEAxMk NzlmNGI5ZDktZDNkZi00N2E5LWEyYmItY2U0NDZjZTc2MWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxX5HdecmPVws5+KU4PrWy8/UmwJIqyqlBRd DtdoCwQDUxZHljIYIQDGtdI8sMLvtb8RDP4/C/xU5SNSqxgvh5ptg1Fr0Nd7jYsB jliEAJUtW8hu2z6Vaj9Uk2dEFaxUoSGIZHvU1d7b0zOpZwL4IzvPLfb00eb6fgpv BxtuRVdrdkH9Hno4eJ1IXP/O9K7rcgd+o8ehn+0vdAH9OejfqA9W1vpMwFoaRuEG W8mn5xacjVH0wuiw5GGxQbx+/DDr0h5QLvTH6pnZhYcnPCmv3XwYX7TxczcrZCx2 fMgpsHA0TFhc0Ce1trSI8bv5K0QoSG0C7jYILUeNKcPRlGPsqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAxoay2HpURIlmXytWiwWYrBjtFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWY4ZmJiNWItYzc3ZS0z MGI0LThkMDAtOWVhZDk1NmY1NGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0NboMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKhw0H0hRhS5mpiPowbQyVJtmu1YDF8S9CRAjBUEQc8Xz85ryGhEoaN GMqI1rjYUCOZbgyzakx1zmlU2uOWbbf4sZ+oY2g4xXjp+Xothkty9mRZ9et96ySo 01lsv7XOQStJmZQCnYRjPWexuQcxezW/Eo+b2JWEfCK2OiYinKVyQoMK/b+ciIeO 9Zp5iShIhSko1gZA41VKtuWqBM+dH4iZkcnmgL0Y2SrSApaQ0j9eV7hCHFayD1fM MVtXqZQMdM78MCFEIXlZ8k2uqkZKl7+60/WS1mOKq1Sf9RPqagrBk3345PpRhV71 YY9OaQkIb/VvSPXkSDanvZaezxGSi6U= -----END CERTIFICATE-----Generated at Wed Aug 6 07:54:06 2025 by rpki-client