$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ba65a00-a9ae-335a-8742-8ba3d767c5fe.roa File: 0ba65a00-a9ae-335a-8742-8ba3d767c5fe.roa (raw, json) Hash identifier: 7ovRSLRDl5CA/hmqRkp/OrZe+7YbPFqaw5yxG/gG6Dk= Subject key identifier: 1A:5C:88:6F:0B:D0:3D:27:79:36:82:61:11:33:68:43:E1:57:1C:8C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B1C36DDBB2FA010FD16BF5B40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ba65a00-a9ae-335a-8742-8ba3d767c5fe.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 701 IP address blocks: 209.159.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:dd:bb:2f:a0:10:fd:16:bf:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=3b8dd60b-9d7d-451c-9c34-52d3c00998de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9a:cd:11:e8:4d:aa:88:e4:06:5d:24:6c:48: f2:3c:ae:e4:3a:e0:c8:18:08:4b:c3:0b:4e:ac:a3: 98:3f:1a:35:57:46:82:b0:5a:d5:ed:5f:0a:af:04: a4:58:bc:4e:22:2f:b4:38:0a:59:bd:5d:90:43:bd: 73:62:4f:0b:e9:1d:4b:5d:42:5b:c1:f6:ba:33:fb: 0d:12:a5:1a:e7:55:4c:5d:51:54:5f:1b:63:89:99: 88:53:65:51:dc:7d:58:83:86:d0:4d:f1:43:08:f4: fb:b6:f6:62:23:bf:11:81:ef:27:f4:78:d2:17:2d: 68:16:33:e8:1a:4d:b3:ee:1d:9d:c9:55:71:e3:39: 12:88:ab:ea:71:6a:b2:45:e5:31:e6:1d:d0:70:07: 0c:f9:3a:48:ae:ba:50:b7:fd:0a:f9:bb:a8:4b:24: e2:7b:7d:46:1c:3d:ed:11:a2:4d:81:7c:8a:62:3d: 0a:93:d7:90:8a:2a:5a:79:39:91:b8:8c:ad:30:d0: f7:3f:29:36:a5:08:31:99:1c:67:e3:a1:3f:1b:76: a2:94:f5:61:68:3b:a5:6f:59:f1:c7:9e:61:bb:95: df:07:85:aa:c9:6c:e3:ec:d6:ce:ff:1e:c6:a3:eb: 81:ce:16:20:7f:62:a7:b9:73:16:04:a7:eb:8d:be: d8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5C:88:6F:0B:D0:3D:27:79:36:82:61:11:33:68:43:E1:57:1C:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ba65a00-a9ae-335a-8742-8ba3d767c5fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 209.159.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:b2:22:64:a3:55:e0:9f:bf:54:9a:16:dc:cd:f8:af:53:8a: ad:14:7d:d5:15:57:57:65:2f:1c:8d:bf:33:02:ae:dd:ee:65: fd:0a:8f:b9:17:f6:fe:53:bf:20:72:f0:92:18:9e:07:12:d9: 92:f8:ff:7a:0f:eb:1e:1a:1a:2d:03:e8:f0:17:ea:d1:c6:6d: 9b:3c:43:c6:41:be:0a:ee:1e:13:a5:f9:c9:eb:01:15:01:48: 95:bf:ed:ff:5d:d0:d7:bd:d3:3f:bc:42:9e:e7:ec:6a:8d:23: f1:dd:b6:cc:2f:f8:bd:fd:d2:db:f1:8b:4b:64:f8:bb:0e:bd: ed:f6:81:bc:5a:37:a0:ec:d6:c8:51:fb:95:76:3f:15:4b:0a: 9a:bf:bc:75:94:7e:22:6a:e1:38:e4:c0:7e:23:b0:d1:ed:15: 6c:ef:df:a5:5c:6a:c4:bb:17:50:0a:d7:58:22:38:dd:90:16: 44:a6:e7:e5:57:a8:0a:ff:f0:cd:a4:9e:a2:e6:d2:ad:17:6b: 0a:7a:ad:e8:77:6d:d9:e2:c8:1f:57:15:ce:98:21:9e:76:ae: df:f7:b5:bc:2f:7d:02:c4:84:26:63:07:2c:1e:06:4b:e0:1c: d8:ec:10:d0:6d:20:a9:7c:42:92:7c:46:07:3f:59:9e:94:9a: 2c:bd:00:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNt27L6AQ/Ra/W0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk M2I4ZGQ2MGItOWQ3ZC00NTFjLTljMzQtNTJkM2MwMDk5OGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZrNEehNqojkBl0kbEjyPK7kOuDIGAhLwwtO rKOYPxo1V0aCsFrV7V8KrwSkWLxOIi+0OApZvV2QQ71zYk8L6R1LXUJbwfa6M/sN EqUa51VMXVFUXxtjiZmIU2VR3H1Yg4bQTfFDCPT7tvZiI78Rge8n9HjSFy1oFjPo Gk2z7h2dyVVx4zkSiKvqcWqyReUx5h3QcAcM+TpIrrpQt/0K+buoSyTie31GHD3t EaJNgXyKYj0Kk9eQiipaeTmRuIytMND3Pyk2pQgxmRxn46E/G3ailPVhaDulb1nx x55hu5XfB4WqyWzj7NbO/x7Go+uBzhYgf2KnuXMWBKfrjb7YWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpciG8L0D0neTaCYREzaEPhVxyMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGJhNjVhMDAtYTlhZS0z MzVhLTg3NDItOGJhM2Q3NjdjNWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Z8CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+yImSjVeCfv1SaFtzN+K9Tiq0UfdUVV1dlLxyNvzMCrt3uZf0Kj7kX 9v5TvyBy8JIYngcS2ZL4/3oP6x4aGi0D6PAX6tHGbZs8Q8ZBvgruHhOl+cnrARUB SJW/7f9d0Ne90z+8Qp7n7GqNI/Hdtswv+L390tvxi0tk+LsOve32gbxaN6Ds1shR +5V2PxVLCpq/vHWUfiJq4TjkwH4jsNHtFWzv36VcasS7F1AK11giON2QFkSm5+VX qAr/8M2knqLm0q0Xawp6reh3bdniyB9XFc6YIZ52rt/3tbwvfQLEhCZjByweBkvg HNjsENBtIKl8QpJ8Rgc/WZ6Umiy9AMU= -----END CERTIFICATE-----Generated at Mon Oct 20 20:22:20 2025 by rpki-client