$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89453d6d-22c8-3f4f-ac06-9d29c56a2cef.roa File: 89453d6d-22c8-3f4f-ac06-9d29c56a2cef.roa (raw, json) Hash identifier: XlC0ufKUBaU2kEXbk+w65+oGYk32Xw2zDSsla5Lk/lc= Subject key identifier: A0:6B:D0:1B:3A:BF:27:D9:F6:C3:83:C8:70:A6:10:B7:ED:3D:F7:11 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD23BDAC75DB1ECED28BA4DC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89453d6d-22c8-3f4f-ac06-9d29c56a2cef.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 701 IP address blocks: 96.249.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:da:c7:5d:b1:ec:ed:28:ba:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=9803cd6f-e372-4dfc-b6c1-230fe1c3b753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:38:be:a2:d7:59:92:72:00:05:ae:30:2c:e7: a8:ec:20:c9:07:66:cb:be:24:d3:c7:b0:52:13:c8: fe:c7:f2:93:f6:6b:0a:a2:dd:7c:e8:26:a7:a1:93: 8e:89:07:50:46:20:ca:32:3b:e1:75:4e:2b:9d:e6: c4:8a:05:4f:47:e4:6c:c3:42:22:6d:90:ae:61:60: 6b:34:88:f4:e8:3c:ba:95:50:3d:6b:a3:f3:22:d7: cf:6a:fe:8f:56:7e:b5:3a:d0:ee:a3:c1:48:21:f4: ef:10:68:6b:3c:b4:f3:e4:18:88:5c:7a:7d:d6:e4: 47:56:79:c5:14:e7:3a:0c:f0:4d:f6:8e:8e:27:f2: d0:55:93:95:f8:60:5f:c0:eb:a0:b3:ba:2b:b6:8f: 6a:48:38:02:e8:a5:b4:13:da:c2:c7:56:c8:f0:eb: 05:07:78:5c:88:e1:10:48:d5:1a:bf:5f:bf:c1:f6: c7:0f:4e:cb:69:3d:41:1c:3a:aa:1b:3d:02:4b:0b: 18:cc:84:f1:d2:3e:bd:bb:3a:41:f2:88:9e:ec:e3: 3f:1e:67:10:ba:c7:07:9f:b4:b7:41:15:9f:3b:bd: 33:fa:00:ba:d3:2c:7d:30:4e:f4:54:c3:f5:aa:0b: 46:d6:b5:5c:0c:80:0b:4e:fe:14:37:96:75:07:03: 27:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:6B:D0:1B:3A:BF:27:D9:F6:C3:83:C8:70:A6:10:B7:ED:3D:F7:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89453d6d-22c8-3f4f-ac06-9d29c56a2cef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 96.249.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:db:b6:5b:71:a0:28:1b:95:a1:db:a4:f7:8f:75:3f:4b:42: 99:cb:15:be:ab:d9:af:f8:de:ac:a5:b5:84:7c:c4:46:ab:4a: fb:5d:39:d6:15:a0:26:d4:35:f3:68:37:c8:50:3d:3f:66:e3: 44:51:b0:9e:fd:2f:37:c6:84:3d:c1:63:44:c3:ed:47:d5:c7: a7:c4:dc:9a:93:fe:61:60:fe:fc:3e:fd:06:05:e2:13:3f:4b: 09:e7:c7:12:01:c5:cd:57:e6:b5:af:41:f3:10:02:be:54:12: e3:b2:3c:4b:35:e2:1f:8b:00:d6:eb:4f:b1:30:13:c6:72:c1: ad:19:1d:06:5d:94:2e:e0:7b:c1:1a:f6:fa:25:40:df:c4:11: 8c:bd:45:a7:5f:a9:ae:e7:a9:19:4d:7c:7e:5a:75:d4:40:fc: 58:61:d2:ac:d9:8b:74:82:01:ee:0c:bf:32:64:92:6d:33:f4: 29:0f:8b:5a:54:d6:c9:3e:47:5a:c8:24:fc:11:99:ca:d7:f4: fa:49:30:ba:9b:81:45:5e:96:69:34:2f:df:dd:a9:33:11:8a: a8:5f:10:d2:a9:64:01:31:17:53:ff:74:df:78:7f:f4:55:22: cf:f5:52:bd:6a:09:bd:20:d8:83:9d:33:1f:25:a3:61:29:f9: f8:7d:be:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO9rHXbHs7Si6TcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk OTgwM2NkNmYtZTM3Mi00ZGZjLWI2YzEtMjMwZmUxYzNiNzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhji+otdZknIABa4wLOeo7CDJB2bLviTTx7BS E8j+x/KT9msKot186CanoZOOiQdQRiDKMjvhdU4rnebEigVPR+Rsw0IibZCuYWBr NIj06Dy6lVA9a6PzItfPav6PVn61OtDuo8FIIfTvEGhrPLTz5BiIXHp91uRHVnnF FOc6DPBN9o6OJ/LQVZOV+GBfwOugs7orto9qSDgC6KW0E9rCx1bI8OsFB3hciOEQ SNUav1+/wfbHD07LaT1BHDqqGz0CSwsYzITx0j69uzpB8oie7OM/HmcQuscHn7S3 QRWfO70z+gC60yx9ME70VMP1qgtG1rVcDIALTv4UN5Z1BwMnhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBr0Bs6vyfZ9sODyHCmELftPfcRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODk0NTNkNmQtMjJjOC0z ZjRmLWFjMDYtOWQyOWM1NmEyY2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYPmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXbtltxoCgblaHbpPePdT9LQpnLFb6r2a/43qyltYR8xEarSvtdOdYV oCbUNfNoN8hQPT9m40RRsJ79LzfGhD3BY0TD7UfVx6fE3JqT/mFg/vw+/QYF4hM/ SwnnxxIBxc1X5rWvQfMQAr5UEuOyPEs14h+LANbrT7EwE8Zywa0ZHQZdlC7ge8Ea 9volQN/EEYy9Radfqa7nqRlNfH5addRA/Fhh0qzZi3SCAe4MvzJkkm0z9CkPi1pU 1sk+R1rIJPwRmcrX9PpJMLqbgUVelmk0L9/dqTMRiqhfENKpZAExF1P/dN94f/RV Is/1Ur1qCb0g2IOdMx8lo2Ep+fh9vlU= -----END CERTIFICATE-----Generated at Sat Aug 23 13:14:07 2025 by rpki-client