$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bff8be77-1ce7-34cc-8d57-44fc6d3a42ff.roa File: bff8be77-1ce7-34cc-8d57-44fc6d3a42ff.roa (raw, json) Hash identifier: fXGzQOdG6vhGEeG/9j8rWndI7sRuPizHUYAlX/tgn08= Subject key identifier: 9A:B2:C6:8D:37:E5:9C:1F:50:61:D8:77:F1:3B:BC:B7:E4:19:F0:B7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B2B918E66A5FC84967EC49800 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bff8be77-1ce7-34cc-8d57-44fc6d3a42ff.roa Signing time: Fri 12 Sep 2025 13:00:42 +0000 ROA not before: Fri 12 Sep 2025 13:00:42 +0000 ROA not after: Thu 11 Dec 2025 14:00:42 +0000 asID: 0 IP address blocks: 204.254.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2b:91:8e:66:a5:fc:84:96:7e:c4:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 12 13:00:42 2025 GMT Not After : Dec 11 14:00:42 2025 GMT Subject: CN=d3e781c8-0603-4b92-9b99-29d161b0158c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:17:fd:69:e5:ff:48:a3:99:e8:f9:27:7f:3e: 54:91:69:1b:fb:f2:4f:55:74:bf:c1:f1:45:cc:27: 67:83:de:4f:2f:64:55:df:28:c7:41:ff:9b:bd:f9: c4:3e:b2:66:10:58:5f:f7:4c:1c:4e:03:28:fe:80: a1:df:4b:60:ef:b7:26:06:50:27:9d:2f:67:dd:62: 05:2b:63:0a:a4:22:4b:50:38:d8:99:55:35:5e:00: 7f:57:da:48:2a:30:9b:31:79:3d:eb:69:25:e2:31: ac:c9:e5:0c:03:11:a8:78:47:e4:2a:23:c9:87:96: 7a:3b:28:af:17:2f:de:f4:a4:69:17:7c:62:03:be: 97:87:10:00:a6:bc:84:02:73:c8:01:63:9b:6d:2d: c2:d4:d9:27:ab:0a:5a:63:4b:ce:08:9d:b1:bc:fd: 83:77:31:f5:56:9b:8b:60:75:8c:9c:96:3e:31:5f: 01:3c:34:65:c4:6d:09:35:c8:7b:c8:7b:dd:fa:8d: 94:03:b1:86:0a:18:6b:1e:67:27:a3:7f:98:6a:25: bc:ee:bf:91:a3:1e:eb:5c:50:53:fb:78:39:11:b0: 35:ee:54:52:04:2d:f2:3c:8e:53:cf:b5:d9:a6:0e: a0:85:d5:34:f3:cc:2f:bb:d9:8a:67:51:d2:2f:41: b4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B2:C6:8D:37:E5:9C:1F:50:61:D8:77:F1:3B:BC:B7:E4:19:F0:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bff8be77-1ce7-34cc-8d57-44fc6d3a42ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 204.254.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:f9:ed:63:9f:4a:48:23:2b:07:59:07:9c:7f:bb:9f:d6:c3: e9:f9:be:84:b2:8d:07:f7:6f:4f:2d:2d:e2:68:c6:87:7a:d4: e5:ef:cd:f1:f6:ad:13:6c:d3:e4:f5:ea:a1:06:13:66:80:b4: c7:65:61:60:df:da:7c:34:c7:3f:18:6c:a0:18:43:46:fa:39: 28:7f:37:11:b5:8e:a1:d0:17:a7:05:f8:ea:88:b8:c5:94:b6: d6:68:9b:0b:a2:23:b2:87:08:f9:1f:7e:79:76:10:58:36:42: 19:70:ae:e3:84:20:80:db:c7:a4:18:2f:56:f9:a3:ee:e3:b8: f9:47:dd:33:a3:fd:39:4e:87:27:1d:c8:35:6e:52:06:c5:ff: 65:bc:68:46:e7:88:37:1f:65:76:39:f7:8c:4a:7b:0b:9d:86: cb:2f:e3:3f:bd:fe:18:06:47:16:7f:e9:2a:74:35:c3:e7:20: 1d:23:20:ff:4a:2d:e5:fb:1d:11:2a:18:72:1a:f5:ba:ff:95: c0:77:18:3a:9c:8f:5d:9a:26:e4:26:fa:7a:9f:bf:9f:a2:0c: 74:04:7a:91:34:71:e3:ab:28:27:d1:d0:6b:67:43:6a:18:4e: e3:f3:3e:4c:6d:af:ca:34:90:2f:a8:ad:93:ce:fb:5a:a0:dc: 25:bd:c3:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsrkY5mpfyEln7EmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkxMjEzMDA0MloXDTI1MTIxMTE0MDA0MlowLzEtMCsGA1UEAxMk ZDNlNzgxYzgtMDYwMy00YjkyLTliOTktMjlkMTYxYjAxNThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRf9aeX/SKOZ6Pknfz5UkWkb+/JPVXS/wfFF zCdng95PL2RV3yjHQf+bvfnEPrJmEFhf90wcTgMo/oCh30tg77cmBlAnnS9n3WIF K2MKpCJLUDjYmVU1XgB/V9pIKjCbMXk962kl4jGsyeUMAxGoeEfkKiPJh5Z6Oyiv Fy/e9KRpF3xiA76XhxAApryEAnPIAWObbS3C1NknqwpaY0vOCJ2xvP2DdzH1VpuL YHWMnJY+MV8BPDRlxG0JNch7yHvd+o2UA7GGChhrHmcno3+YaiW87r+Rox7rXFBT +3g5EbA17lRSBC3yPI5Tz7XZpg6ghdU088wvu9mKZ1HSL0G0YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqyxo035ZwfUGHYd/E7vLfkGfC3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmZmOGJlNzctMWNlNy0z NGNjLThkNTctNDRmYzZkM2E0MmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzP54MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEz57WOfSkgjKwdZB5x/u5/Ww+n5voSyjQf3b08tLeJoxod61OXvzfH2 rRNs0+T16qEGE2aAtMdlYWDf2nw0xz8YbKAYQ0b6OSh/NxG1jqHQF6cF+OqIuMWU ttZomwuiI7KHCPkffnl2EFg2QhlwruOEIIDbx6QYL1b5o+7juPlH3TOj/TlOhycd yDVuUgbF/2W8aEbniDcfZXY594xKewudhssv4z+9/hgGRxZ/6Sp0NcPnIB0jIP9K LeX7HREqGHIa9br/lcB3GDqcj12aJuQm+nqfv5+iDHQEepE0ceOrKCfR0GtnQ2oY TuPzPkxtr8o0kC+orZPO+1qg3CW9w4s= -----END CERTIFICATE-----Generated at Wed Nov 5 01:24:32 2025 by rpki-client