$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/714e3bd7-31de-32e4-aed1-ae9696b0ae52.roa File: 714e3bd7-31de-32e4-aed1-ae9696b0ae52.roa (raw, json) Hash identifier: O93hGn2oJaxPqDk/4IoSCdRAuRChHza8oFl+srYZZhQ= Subject key identifier: 71:28:A3:C5:76:F5:92:A7:45:16:E3:DD:1A:E5:81:A3:57:93:1F:9C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B79BCB26E1EB62025C7E2E700 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/714e3bd7-31de-32e4-aed1-ae9696b0ae52.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 3855 IP address blocks: 199.172.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b2:6e:1e:b6:20:25:c7:e2:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=c5c45bef-a8df-43f0-8c1c-4c5fd7f3df3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:99:b0:3b:fa:f6:10:50:f9:7b:b6:92:49:03: ea:8b:b9:4b:b3:0b:38:76:5d:b5:99:94:50:cc:0c: a3:db:e0:97:9c:3e:1a:be:97:31:9c:18:33:96:6a: a2:1f:d9:a3:2c:93:f9:c9:f5:b8:09:30:a5:22:ea: d6:30:3c:4f:0c:e6:0f:e4:42:16:57:ef:93:82:7f: 6f:2d:4c:3e:65:ee:2b:7b:a7:7a:f2:d9:c9:f3:50: c0:39:35:bc:0d:eb:65:77:08:0c:4e:85:a5:ba:19: 51:f2:59:f4:99:24:1a:9b:1e:22:b4:0e:04:99:fe: 6b:02:43:23:41:16:80:38:69:65:46:1b:8e:99:75: d2:ee:c5:70:9a:53:e3:ef:d0:77:4c:20:c8:30:d9: 66:4a:f0:66:ac:10:e8:57:96:8d:a2:11:77:5f:ea: 1a:e5:01:bd:8b:39:f0:a5:54:57:25:87:3e:e0:f7: 3c:ca:b8:fb:64:30:87:84:1c:fe:4a:d5:34:84:ee: d1:e9:81:16:0e:89:1c:bb:03:b3:fa:ca:24:5d:41: b0:a1:c9:2a:ab:32:6b:d6:3c:0d:ba:5a:10:44:91: 73:02:85:11:38:81:72:99:34:0f:39:88:5f:be:ae: 5c:63:f8:22:29:95:31:e1:e8:f4:f3:a5:44:bd:ee: 06:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:28:A3:C5:76:F5:92:A7:45:16:E3:DD:1A:E5:81:A3:57:93:1F:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/714e3bd7-31de-32e4-aed1-ae9696b0ae52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:55:8a:d6:f7:ff:02:b8:3f:57:ac:48:6c:67:88:e3:20:61: a3:be:2a:97:ea:ce:50:42:5a:ba:b7:ad:d0:15:67:51:bf:cc: 6a:2e:c2:f1:5a:41:63:14:93:93:bc:b3:dc:04:45:1a:f5:92: de:fb:f5:0d:e0:fc:d3:d4:dd:c8:53:e5:65:95:6a:94:ef:8d: 24:b2:94:c4:e4:03:f4:5c:23:dc:6a:e3:9a:bc:bf:d7:97:44: 52:b8:46:17:36:97:20:d8:96:84:85:31:4c:2c:f2:e0:c9:64: 62:33:49:c7:5a:5f:44:d8:11:ff:a3:98:43:1d:43:ce:fd:2b: 08:3e:ff:15:44:8a:00:99:43:43:72:b4:9f:50:0c:f4:a9:4a: cc:80:4d:b3:c1:f5:06:bf:ce:62:76:34:22:f5:22:48:b5:e5: de:53:13:bc:90:64:5b:e8:8a:eb:7b:6d:8f:f6:95:08:bc:79: 6b:2d:63:dc:36:ae:2b:25:2e:59:c9:a7:6e:34:76:cb:aa:ae: 3f:92:07:ac:60:14:ca:e0:94:e9:1f:8d:fc:12:d2:09:e8:5b: 40:fc:41:1c:cb:71:04:66:30:0b:4c:c1:0f:0f:79:ac:6c:09: 9a:ba:c5:dd:11:61:d5:8a:9e:a1:b4:fb:bd:99:fd:da:58:5f: d6:5a:aa:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLJuHrYgJcfi5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk YzVjNDViZWYtYThkZi00M2YwLThjMWMtNGM1ZmQ3ZjNkZjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5mwO/r2EFD5e7aSSQPqi7lLsws4dl21mZRQ zAyj2+CXnD4avpcxnBgzlmqiH9mjLJP5yfW4CTClIurWMDxPDOYP5EIWV++Tgn9v LUw+Ze4re6d68tnJ81DAOTW8DetldwgMToWluhlR8ln0mSQamx4itA4Emf5rAkMj QRaAOGllRhuOmXXS7sVwmlPj79B3TCDIMNlmSvBmrBDoV5aNohF3X+oa5QG9iznw pVRXJYc+4Pc8yrj7ZDCHhBz+StU0hO7R6YEWDokcuwOz+sokXUGwockqqzJr1jwN uloQRJFzAoUROIFymTQPOYhfvq5cY/giKZUx4ej086VEve4GKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEoo8V29ZKnRRbj3RrlgaNXkx+cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzE0ZTNiZDctMzFkZS0z MmU0LWFlZDEtYWU5Njk2YjBhZTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBVitb3/wK4P1esSGxniOMgYaO+KpfqzlBCWrq3rdAVZ1G/zGouwvFa QWMUk5O8s9wERRr1kt779Q3g/NPU3chT5WWVapTvjSSylMTkA/RcI9xq45q8v9eX RFK4Rhc2lyDYloSFMUws8uDJZGIzScdaX0TYEf+jmEMdQ879Kwg+/xVEigCZQ0Ny tJ9QDPSpSsyATbPB9Qa/zmJ2NCL1Iki15d5TE7yQZFvoiut7bY/2lQi8eWstY9w2 rislLlnJp240dsuqrj+SB6xgFMrglOkfjfwS0gnoW0D8QRzLcQRmMAtMwQ8Peaxs CZq6xd0RYdWKnqG0+72Z/dpYX9Zaqgs= -----END CERTIFICATE-----Generated at Mon Oct 20 20:21:53 2025 by rpki-client