$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3708b2e2-b1f4-3516-a6cc-623967a05732.roa File: 3708b2e2-b1f4-3516-a6cc-623967a05732.roa (raw, json) Hash identifier: Pk7+2xGatE/24lXNAofpHnHDw/z9AKaibd4pZREaUuU= Subject key identifier: 1B:84:8A:FD:65:F3:75:D7:39:01:A4:E6:14:05:C0:F4:D4:F3:35:B6 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD23C079040CB37143D701B80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3708b2e2-b1f4-3516-a6cc-623967a05732.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 701 IP address blocks: 98.117.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:07:90:40:cb:37:14:3d:70:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=5d7f6b0d-2fb6-4c6a-b251-5e71217ffa95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c2:3f:51:18:73:2d:92:a6:d2:8b:69:cf:1e: e7:a4:76:92:92:c7:71:38:c8:bd:fe:3a:07:5a:73: 2b:34:ac:08:57:40:be:5b:40:4b:92:d8:75:70:3a: d9:b2:53:eb:84:fa:74:64:cd:32:c5:18:86:5a:e4: 14:b7:6e:2c:b9:81:ce:d1:17:34:de:76:53:2a:b4: 80:4b:00:90:07:df:56:44:f1:d3:ef:09:90:83:5e: 27:01:19:e9:09:c9:fa:b1:65:75:a8:2c:f9:55:b8: 3a:0a:d4:c3:04:50:bc:8c:d1:30:56:2e:59:29:51: d3:b7:05:3c:e6:18:25:39:0a:44:30:59:29:79:90: e2:33:f9:74:d6:76:bb:a7:63:42:4b:ef:2d:63:73: e0:8f:6e:6b:f2:85:19:ac:b8:4e:1c:0a:43:62:e3: 0d:29:33:d6:9f:7a:78:2a:ab:45:9a:43:67:11:f2: 59:4b:e8:97:0e:50:a1:b6:6d:5a:09:15:63:b3:34: 17:b8:64:6e:b8:a6:e5:56:7a:1a:67:b7:87:a9:c3: f0:3a:d2:b8:1b:c4:0a:cf:81:ff:69:f3:5b:cc:73: c9:b7:04:f4:04:41:0b:c0:a2:94:50:42:ff:49:33: 06:82:dc:30:09:ad:ae:9b:ab:dc:58:65:ef:7e:6f: 2c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:84:8A:FD:65:F3:75:D7:39:01:A4:E6:14:05:C0:F4:D4:F3:35:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3708b2e2-b1f4-3516-a6cc-623967a05732.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 98.117.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:24:de:8a:ac:ab:65:e0:57:17:50:b9:7e:00:6d:49:8f:fc: 60:1c:a3:ea:2a:19:dc:e7:80:c1:9c:36:8b:d4:42:79:9e:10: 58:d3:bc:43:99:74:eb:d3:58:fe:17:77:b2:49:b9:f3:f7:0e: 1d:b6:07:70:aa:41:fa:8d:6a:0a:ef:d2:e4:4a:a6:ba:30:a5: 34:82:09:f2:af:58:bd:41:ba:3a:d8:51:26:f4:cc:2b:c2:cc: 63:3f:2b:f9:15:29:73:ce:92:43:b3:ef:7b:ee:be:66:8e:d9: c2:47:71:3f:16:51:ff:99:03:d2:aa:b6:33:76:b9:1d:8c:b7: bc:73:ab:01:0f:c6:48:2f:72:ec:98:3b:f9:25:d3:fe:1e:39: 4a:ab:18:fd:e3:95:58:e3:d6:99:ab:63:50:cd:48:b6:1d:26: 1e:c0:da:dd:77:68:81:ec:11:2b:dd:c8:0d:a1:c5:8e:11:cf: 27:4c:79:a8:8d:4d:2a:04:6b:88:aa:4c:89:3c:e8:a8:a8:87: 93:e8:68:87:3e:f9:5a:87:02:ea:4c:bc:e3:36:dc:59:3a:cf: aa:d1:dd:5e:34:69:07:ec:27:07:85:6c:d9:7a:37:f6:e5:c9: 59:40:50:f8:ef:c1:c3:9a:82:43:fa:3a:cd:76:f9:8f:42:e7: ab:f5:4b:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSPAeQQMs3FD1wG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NWQ3ZjZiMGQtMmZiNi00YzZhLWIyNTEtNWU3MTIxN2ZmYTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksI/URhzLZKm0otpzx7npHaSksdxOMi9/joH WnMrNKwIV0C+W0BLkth1cDrZslPrhPp0ZM0yxRiGWuQUt24suYHO0Rc03nZTKrSA SwCQB99WRPHT7wmQg14nARnpCcn6sWV1qCz5Vbg6CtTDBFC8jNEwVi5ZKVHTtwU8 5hglOQpEMFkpeZDiM/l01na7p2NCS+8tY3Pgj25r8oUZrLhOHApDYuMNKTPWn3p4 KqtFmkNnEfJZS+iXDlChtm1aCRVjszQXuGRuuKblVnoaZ7eHqcPwOtK4G8QKz4H/ afNbzHPJtwT0BEELwKKUUEL/STMGgtwwCa2um6vcWGXvfm8sIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuEiv1l83XXOQGk5hQFwPTU8zW2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzcwOGIyZTItYjFmNC0z NTE2LWE2Y2MtNjIzOTY3YTA1NzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYnXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIk3oqsq2XgVxdQuX4AbUmP/GAco+oqGdzngMGcNovUQnmeEFjTvEOZ dOvTWP4Xd7JJufP3Dh22B3CqQfqNagrv0uRKprowpTSCCfKvWL1BujrYUSb0zCvC zGM/K/kVKXPOkkOz73vuvmaO2cJHcT8WUf+ZA9KqtjN2uR2Mt7xzqwEPxkgvcuyY O/kl0/4eOUqrGP3jlVjj1pmrY1DNSLYdJh7A2t13aIHsESvdyA2hxY4RzydMeaiN TSoEa4iqTIk86Kioh5PoaIc++VqHAupMvOM23Fk6z6rR3V40aQfsJweFbNl6N/bl yVlAUPjvwcOagkP6Os12+Y9C56v1Sx8= -----END CERTIFICATE-----Generated at Sat Aug 23 14:34:14 2025 by rpki-client