$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a218aa9-a69e-3383-b2ce-6b813018e689.roa File: 5a218aa9-a69e-3383-b2ce-6b813018e689.roa (raw, json) Hash identifier: Xx7dIzPkz8ayHYjr6T9Q50I6BbqvYCTgap31jz0+f34= Subject key identifier: C3:57:30:AD:EC:28:C1:A9:E5:1B:E6:A9:51:47:4C:06:33:44:03:41 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B8D477F4054AC5762DB0DFD40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a218aa9-a69e-3383-b2ce-6b813018e689.roa Signing time: Fri 17 Oct 2025 13:00:39 +0000 ROA not before: Fri 17 Oct 2025 13:00:39 +0000 ROA not after: Thu 15 Jan 2026 14:00:39 +0000 asID: 14618 IP address blocks: 208.214.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8d:47:7f:40:54:ac:57:62:db:0d:fd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 17 13:00:39 2025 GMT Not After : Jan 15 14:00:39 2026 GMT Subject: CN=7bf986cf-ec25-44a1-adbe-fedee591647e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:37:36:67:17:94:66:d2:a4:6b:a4:e4:a4:66: a5:3b:fd:14:e8:74:8f:a8:c0:56:b3:7a:b5:9b:c5: dd:d5:11:8a:83:d4:1e:37:75:9f:58:7f:1a:24:1b: 45:40:6b:dc:0c:0f:14:ae:90:18:99:82:e7:93:0d: 04:67:a6:a5:da:06:b9:37:8b:95:60:eb:e8:53:12: ec:27:51:e8:14:14:ed:47:6e:f6:48:b7:a8:aa:48: 3b:a9:34:b1:86:fa:74:49:a2:ab:f6:14:7d:56:87: 61:34:fb:11:1d:7c:00:76:8e:f6:46:13:f9:f3:10: 57:81:15:d7:a3:a2:0a:e3:c7:79:9c:10:c6:86:72: 6a:26:d6:0e:4c:cd:dd:4a:e7:19:ec:53:42:27:ab: 3c:38:40:e9:c5:1b:0b:45:7d:28:28:90:0a:4b:21: 1d:4a:7a:a1:c0:4d:5a:7c:00:93:54:6c:8c:c5:d4: 44:1d:21:dc:ae:a3:49:11:98:59:2c:03:7e:3a:5d: 1f:5a:d1:fa:3b:46:99:6e:50:cf:1f:59:28:95:0f: b7:dd:43:6d:51:36:0d:15:2c:71:20:1f:e4:ce:2e: 91:97:68:ed:c2:9a:e1:bb:0f:af:7b:bb:c2:22:d7: 4a:b5:8d:a0:a5:0a:6c:55:b1:11:38:30:f0:bb:20: f0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:57:30:AD:EC:28:C1:A9:E5:1B:E6:A9:51:47:4C:06:33:44:03:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a218aa9-a69e-3383-b2ce-6b813018e689.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.214.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:82:e6:e0:d7:65:20:12:06:22:ba:af:cf:d7:0f:e1:c2:d7: 83:61:95:00:e4:e1:c6:ba:50:a8:95:02:7c:49:70:18:60:eb: 16:e3:35:69:f6:a7:4c:56:5c:20:86:e5:3d:de:1b:c7:43:05: 84:b9:7b:8f:98:65:26:44:66:52:bb:e6:08:fb:52:56:a5:2e: fd:75:d7:60:ab:b1:76:73:f0:65:40:76:51:d1:f1:da:fe:00: f1:a6:39:45:87:19:50:08:84:99:ce:4c:a9:1d:d1:ec:2c:ce: 1b:94:62:41:87:35:6e:73:17:be:ce:8f:32:e1:70:e4:f2:c3: 21:89:4a:e9:6d:a9:22:e2:52:3b:d9:00:f5:0b:60:bd:9a:03: cf:01:ab:3f:d2:e5:c5:da:27:02:30:a4:ec:8b:50:a7:9b:9e: c7:a5:1e:4e:fe:a7:12:d5:d8:7c:ed:66:7c:a3:11:56:f5:af: 5a:e3:36:98:46:c5:b6:2d:be:02:f2:10:db:aa:89:58:b6:a8: 0f:de:df:42:37:2d:08:32:17:d4:3d:9e:54:ed:ed:7b:38:6d: ab:9c:59:01:8b:12:24:37:b4:f2:0f:0b:55:ab:2f:ab:20:6c: b4:8b:29:b2:4a:a0:74:2c:d4:00:37:15:fb:70:0a:7d:5b:0f: 84:cc:66:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuNR39AVKxXYtsN/UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxNzEzMDAzOVoXDTI2MDExNTE0MDAzOVowLzEtMCsGA1UEAxMk N2JmOTg2Y2YtZWMyNS00NGExLWFkYmUtZmVkZWU1OTE2NDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjc2ZxeUZtKka6TkpGalO/0U6HSPqMBWs3q1 m8Xd1RGKg9QeN3WfWH8aJBtFQGvcDA8UrpAYmYLnkw0EZ6al2ga5N4uVYOvoUxLs J1HoFBTtR272SLeoqkg7qTSxhvp0SaKr9hR9VodhNPsRHXwAdo72RhP58xBXgRXX o6IK48d5nBDGhnJqJtYOTM3dSucZ7FNCJ6s8OEDpxRsLRX0oKJAKSyEdSnqhwE1a fACTVGyMxdREHSHcrqNJEZhZLAN+Ol0fWtH6O0aZblDPH1kolQ+33UNtUTYNFSxx IB/kzi6Rl2jtwprhuw+ve7vCItdKtY2gpQpsVbERODDwuyDw5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNXMK3sKMGp5RvmqVFHTAYzRANBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWEyMThhYTktYTY5ZS0z MzgzLWIyY2UtNmI4MTMwMThlNjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0NbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2C5uDXZSASBiK6r8/XD+HC14NhlQDk4ca6UKiVAnxJcBhg6xbjNWn2 p0xWXCCG5T3eG8dDBYS5e4+YZSZEZlK75gj7UlalLv1112CrsXZz8GVAdlHR8dr+ APGmOUWHGVAIhJnOTKkd0ewszhuUYkGHNW5zF77OjzLhcOTywyGJSultqSLiUjvZ APULYL2aA88Bqz/S5cXaJwIwpOyLUKebnselHk7+pxLV2HztZnyjEVb1r1rjNphG xbYtvgLyENuqiVi2qA/e30I3LQgyF9Q9nlTt7Xs4baucWQGLEiQ3tPIPC1WrL6sg bLSLKbJKoHQs1AA3FftwCn1bD4TMZmQ= -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:35 2025 by rpki-client