$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf09c582-e05e-3f22-b9a9-3fff0d84fd43.roa File: cf09c582-e05e-3f22-b9a9-3fff0d84fd43.roa (raw, json) Hash identifier: 8K4UyI6Qj6rytmZUdLKHeJ3ZwZvdEDkAQBA9DmQgA2Q= Subject key identifier: 5F:24:08:C1:6C:AC:A3:81:03:7C:D8:86:F5:76:82:35:0A:40:77:26 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B41E725E0B844C4617BE67300 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf09c582-e05e-3f22-b9a9-3fff0d84fd43.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 6167 IP address blocks: 97.213.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:25:e0:b8:44:c4:61:7b:e6:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=d34d6aef-50a6-40b7-85a4-6c3f22c3d0e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:81:a7:85:7b:e6:1e:0f:d1:22:21:f1:03:d0: 57:dd:d8:9a:e3:ce:81:85:06:dc:63:85:d9:2d:ef: 8e:52:ca:30:48:52:74:2e:b6:32:e1:16:87:84:04: 05:9b:6e:4a:9b:f8:50:74:a0:68:e1:40:59:c9:6f: a4:7c:4c:a0:ae:59:af:74:fb:7e:98:df:fe:bb:56: b4:16:ec:30:9d:19:41:86:39:13:23:33:08:8d:9e: 47:81:6e:f9:1d:e6:d2:2d:22:ef:2c:ea:f2:e5:20: 70:fe:5e:a2:b4:7b:a3:83:37:33:80:aa:2d:4e:ac: 5e:6a:55:b2:0e:5e:c2:6f:d4:c3:46:f1:a9:eb:74: 2e:10:56:26:c9:67:8a:11:da:ac:7d:33:2a:4e:25: a2:2f:94:1e:ef:ac:9d:bc:d7:48:42:72:2a:80:2f: 4f:2b:bc:d9:53:c9:87:6a:26:b6:be:2a:58:45:dd: a2:bb:73:2e:13:5a:6b:2f:fe:88:eb:ef:16:71:23: 2e:a3:23:df:4d:9d:91:f3:65:37:22:ee:67:ba:a6: e9:cb:ce:ba:5d:e7:0b:1a:b7:d9:dc:73:56:a7:e2: de:8f:8b:a1:be:f4:4d:46:56:65:98:5b:c6:d6:be: 84:32:e3:0a:2a:d4:7b:42:d2:eb:32:43:c3:a2:7c: 00:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:24:08:C1:6C:AC:A3:81:03:7C:D8:86:F5:76:82:35:0A:40:77:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf09c582-e05e-3f22-b9a9-3fff0d84fd43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 97.213.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:aa:e8:96:50:77:e5:ec:0b:07:1b:3f:bc:53:4d:d3:ce:00: c2:f0:fc:6f:52:52:32:04:0f:27:fc:66:b3:38:9b:5b:36:4d: 61:55:b0:3a:a4:c6:c4:b7:4e:e1:9a:d4:5c:e4:f7:b5:96:3b: e9:f3:da:1b:53:01:79:58:53:ca:46:36:a3:03:ad:1e:a8:0a: 6f:6d:8c:b4:ff:7f:bf:fb:a4:96:fb:d0:8b:8a:54:da:b7:72: ed:b0:bb:50:de:ba:e8:42:f0:3f:c9:6e:66:79:df:20:b0:19: f0:a8:e3:26:0f:45:14:3f:e3:75:39:8c:7d:d2:db:37:80:b2: 1c:0a:fd:80:96:eb:0f:1b:13:99:1e:4a:ec:10:45:09:68:6f: 4c:52:b6:ad:24:4e:34:e8:12:69:63:00:cb:a9:45:9f:b0:bb: 91:ba:3e:bd:41:5f:2a:9d:b3:cf:1f:b6:c2:cb:78:b6:06:50: 81:60:ec:55:25:70:a0:d3:c2:d6:da:42:0e:4f:82:8a:31:05: 65:34:1a:5c:17:5c:61:79:9e:59:a3:fb:05:cf:2c:f8:1f:1f: db:61:a5:e8:88:71:e1:e7:67:9b:6b:83:c1:5d:ec:6f:b9:dc: c5:42:a6:89:6b:d8:87:08:fb:3f:f5:53:4d:ac:24:a5:09:f2: 93:b1:a9:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5yXguETEYXvmcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ZDM0ZDZhZWYtNTBhNi00MGI3LTg1YTQtNmMzZjIyYzNkMGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4GnhXvmHg/RIiHxA9BX3dia486BhQbcY4XZ Le+OUsowSFJ0LrYy4RaHhAQFm25Km/hQdKBo4UBZyW+kfEygrlmvdPt+mN/+u1a0 FuwwnRlBhjkTIzMIjZ5HgW75HebSLSLvLOry5SBw/l6itHujgzczgKotTqxealWy Dl7Cb9TDRvGp63QuEFYmyWeKEdqsfTMqTiWiL5Qe76ydvNdIQnIqgC9PK7zZU8mH aia2vipYRd2iu3MuE1prL/6I6+8WcSMuoyPfTZ2R82U3Iu5nuqbpy866XecLGrfZ 3HNWp+Lej4uhvvRNRlZlmFvG1r6EMuMKKtR7QtLrMkPDonwAmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8kCMFsrKOBA3zYhvV2gjUKQHcmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2YwOWM1ODItZTA1ZS0z ZjIyLWI5YTktM2ZmZjBkODRmZDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYdXcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuq6JZQd+XsCwcbP7xTTdPOAMLw/G9SUjIEDyf8ZrM4m1s2TWFVsDqk xsS3TuGa1Fzk97WWO+nz2htTAXlYU8pGNqMDrR6oCm9tjLT/f7/7pJb70IuKVNq3 cu2wu1DeuuhC8D/JbmZ53yCwGfCo4yYPRRQ/43U5jH3S2zeAshwK/YCW6w8bE5ke SuwQRQlob0xStq0kTjToEmljAMupRZ+wu5G6Pr1BXyqds88ftsLLeLYGUIFg7FUl cKDTwtbaQg5PgooxBWU0GlwXXGF5nlmj+wXPLPgfH9thpeiIceHnZ5trg8Fd7G+5 3MVCpolr2IcI+z/1U02sJKUJ8pOxqWw= -----END CERTIFICATE-----Generated at Wed Nov 5 14:29:10 2025 by rpki-client