$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d5cb289-3d0d-3697-a0ed-99d48d4efcd7.roa File: 4d5cb289-3d0d-3697-a0ed-99d48d4efcd7.roa (raw, json) Hash identifier: g8kGcjUNM2imiM7ue2Yq9dPLEpO5KK8uGS0iuzMSCfY= Subject key identifier: AE:4B:88:E4:49:5A:53:5D:30:67:21:1E:E9:A8:35:34:47:25:17:F9 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B891781B85399D0785FE8EF20 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d5cb289-3d0d-3697-a0ed-99d48d4efcd7.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 0 IP address blocks: 208.236.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:81:b8:53:99:d0:78:5f:e8:ef:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=cd3418c0-a564-4b77-be57-a4a2da864443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c6:6d:c4:4d:5d:71:c0:21:b1:18:0c:aa:bd: 44:52:d5:de:0f:e2:89:9b:11:4d:5b:3f:a3:42:f3: b7:78:25:b2:76:59:a3:3e:f9:20:18:27:d2:82:d1: 06:bd:a2:f1:8f:c4:db:51:03:5f:7b:b0:58:86:96: 4d:0d:3c:a3:f4:7c:72:c9:41:2b:f7:82:6e:a3:a9: 2f:4f:35:7a:8b:13:50:7e:29:a1:d5:66:fa:4c:82: c7:7b:75:95:bb:f0:05:cb:b5:3e:2f:0f:13:c8:0d: e9:58:23:47:da:3c:4c:0f:1f:74:85:05:4a:00:f8: 04:0d:1c:20:41:00:df:16:a8:d4:e7:4a:d8:fd:95: e1:98:55:09:bf:92:43:46:6c:1e:17:e3:9f:38:01: 88:06:9c:1a:50:c9:03:ba:d6:e1:2c:5a:8a:ea:b4: 2e:e9:ac:80:f4:de:2a:1a:b8:ff:c7:60:c9:0d:ab: 44:c0:cd:f5:3f:f4:d0:12:ea:54:ef:ff:9b:7c:a6: 57:85:10:c6:f1:04:11:c5:7b:e4:33:39:12:c4:ce: 58:a9:88:9b:5d:0a:34:49:a9:d9:b2:54:39:bd:81: 5e:44:45:9c:69:a1:d7:6c:92:b7:fa:52:34:41:35: 84:70:b7:74:a4:d0:4f:03:24:c0:3f:cf:dd:5b:c5: 78:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:4B:88:E4:49:5A:53:5D:30:67:21:1E:E9:A8:35:34:47:25:17:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d5cb289-3d0d-3697-a0ed-99d48d4efcd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.236.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:8d:8e:c6:91:9b:e7:c6:65:2f:fc:eb:b8:f4:80:85:26:46: 86:3e:52:09:16:9a:74:be:3e:bc:cd:ef:21:90:cc:56:b5:19: 78:21:4c:97:b6:4a:a5:1f:45:66:76:ae:47:4a:6f:38:68:e2: 57:0c:45:0b:d5:63:46:f6:c6:16:5d:de:a3:91:a7:d3:f0:b3: a0:3c:fc:19:1b:69:9e:17:07:ee:a7:4b:20:f5:b6:7e:fe:00: c0:fd:eb:f3:d9:ad:fc:e6:c4:c4:4b:8a:c1:55:44:72:49:20: 12:32:29:9c:76:73:f4:44:37:e6:0d:78:23:c8:fa:e0:81:b8: 8a:bd:79:6e:21:3b:20:86:0b:bb:cd:3d:da:6f:c6:66:0a:95: d3:14:3a:c7:e8:2a:55:50:40:d5:f9:e9:5e:1b:b0:ab:7f:3d: 72:c3:ca:e4:29:a9:a5:44:92:9e:ec:07:57:6c:e0:bc:ad:6d: e1:33:25:ba:81:1e:00:9c:45:bd:3e:13:08:5a:e5:f9:33:21: f5:70:e1:fe:ee:ed:29:5d:85:46:d8:75:a9:27:83:bd:59:de: 28:74:ec:04:b8:e6:84:9d:8b:5b:cf:e5:a4:c1:75:b7:0c:e0: 28:49:ec:19:d8:c9:36:e1:b1:8e:41:fd:9d:03:ca:83:c2:5e: 8c:15:0d:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF4G4U5nQeF/o7yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk Y2QzNDE4YzAtYTU2NC00Yjc3LWJlNTctYTRhMmRhODY0NDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38ZtxE1dccAhsRgMqr1EUtXeD+KJmxFNWz+j QvO3eCWydlmjPvkgGCfSgtEGvaLxj8TbUQNfe7BYhpZNDTyj9HxyyUEr94Juo6kv TzV6ixNQfimh1Wb6TILHe3WVu/AFy7U+Lw8TyA3pWCNH2jxMDx90hQVKAPgEDRwg QQDfFqjU50rY/ZXhmFUJv5JDRmweF+OfOAGIBpwaUMkDutbhLFqK6rQu6ayA9N4q Grj/x2DJDatEwM31P/TQEupU7/+bfKZXhRDG8QQRxXvkMzkSxM5YqYibXQo0SanZ slQ5vYFeREWcaaHXbJK3+lI0QTWEcLd0pNBPAyTAP8/dW8V4kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5LiORJWlNdMGchHumoNTRHJRf5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGQ1Y2IyODktM2QwZC0z Njk3LWEwZWQtOTlkNDhkNGVmY2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0OzUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiNjsaRm+fGZS/867j0gIUmRoY+UgkWmnS+PrzN7yGQzFa1GXghTJe2 SqUfRWZ2rkdKbzho4lcMRQvVY0b2xhZd3qORp9Pws6A8/BkbaZ4XB+6nSyD1tn7+ AMD96/PZrfzmxMRLisFVRHJJIBIyKZx2c/REN+YNeCPI+uCBuIq9eW4hOyCGC7vN PdpvxmYKldMUOsfoKlVQQNX56V4bsKt/PXLDyuQpqaVEkp7sB1ds4LytbeEzJbqB HgCcRb0+Ewha5fkzIfVw4f7u7SldhUbYdakng71Z3ih07AS45oSdi1vP5aTBdbcM 4ChJ7BnYyTbhsY5B/Z0DyoPCXowVDVg= -----END CERTIFICATE-----Generated at Sun Oct 19 23:56:47 2025 by rpki-client