$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8fb941ab-3a3d-3365-828a-a3e1a0209b40.roa File: 8fb941ab-3a3d-3365-828a-a3e1a0209b40.roa (raw, json) Hash identifier: b6B3+mTRloX5yixgiGOHNeYij/NXUg2IhnG7vtuo9Pw= Subject key identifier: 18:53:0F:8F:58:54:7D:45:4F:E1:4E:10:47:48:15:E8:A2:76:97:90 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD23C0F35D1361C477D68EC00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8fb941ab-3a3d-3365-828a-a3e1a0209b40.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 701 IP address blocks: 199.202.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:0f:35:d1:36:1c:47:7d:68:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=13fa90a0-0120-4197-a40b-5fe9643ac68a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:85:c2:09:fd:4c:d3:9c:d2:85:71:c3:1f:d8: a0:7a:d5:d7:f1:18:14:9e:b6:fc:a6:e2:ff:6b:f5: bc:20:11:93:d8:6f:1d:36:e9:9f:b9:1f:f6:eb:f6: f1:ec:7a:47:2c:d4:78:14:d5:2b:36:b3:44:14:bb: a0:32:64:a8:9d:56:fc:92:4b:23:2e:f5:fe:d7:97: 5b:e7:c8:8f:33:25:1b:1d:51:ed:0a:cb:21:d6:e6: 4c:e6:a4:69:90:ec:74:51:f7:91:68:dc:30:55:54: a1:3d:de:c2:84:9c:23:3b:8e:2c:66:18:ab:cf:3d: 46:42:44:1d:b0:76:7a:19:b3:ba:72:76:60:68:6d: 14:fb:8a:38:ff:5d:ce:93:40:83:1b:d1:5c:e7:72: 99:08:ab:b4:ba:45:83:c1:3b:ed:0a:cf:05:38:e7: 46:25:a7:9a:55:6d:64:ee:39:ef:66:22:ca:2b:dc: 0a:29:46:49:fb:a5:9a:57:76:90:3c:41:c0:15:93: 4a:43:4b:1c:e8:5d:a6:7d:10:08:c7:9b:d6:90:c1: be:a3:cb:98:eb:1f:fc:c8:24:be:11:47:01:66:24: f2:31:a7:1f:86:b8:75:11:64:64:e1:ef:b0:e7:f1: 85:2a:e1:f9:b4:d4:3a:36:36:92:10:fe:08:59:db: 0b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:53:0F:8F:58:54:7D:45:4F:E1:4E:10:47:48:15:E8:A2:76:97:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8fb941ab-3a3d-3365-828a-a3e1a0209b40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.202.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:8b:d2:08:36:69:e8:19:fe:79:86:89:87:d8:20:6c:54:57: ef:88:e7:93:76:82:76:29:46:a6:0e:bc:01:c6:fb:53:9f:6d: df:9a:04:36:b6:4f:91:27:97:4f:01:c4:23:6a:f4:16:ac:c7: 95:ea:cf:cc:e2:d2:52:81:8d:bb:ed:3d:df:d3:52:25:67:dd: 31:e0:9d:2f:66:8f:52:b6:e9:f0:be:29:65:e7:3b:4c:98:b7: 38:c8:7d:21:64:6a:fe:b4:ae:c4:15:f3:6a:6d:d0:12:49:b6: 75:5c:23:64:04:1f:25:17:ee:72:3b:c3:c5:2f:bb:25:00:9c: 95:aa:66:0f:b4:4f:df:f8:3b:40:87:c0:93:f2:56:b6:5a:d3: b0:e4:67:23:16:fd:05:42:c9:b4:8f:01:b6:c6:a8:c0:06:66: 7e:99:c4:14:a9:b7:ee:60:72:e2:31:8c:52:ee:0e:b2:46:9b: 2a:ac:fd:32:30:d7:d9:a7:88:37:87:e8:7f:80:0b:93:f7:2c: ae:24:71:91:d3:23:0a:14:4c:03:70:9a:c0:ec:60:d7:bd:ae: e3:2d:6d:15:de:31:5a:07:1b:6e:3c:d9:27:2d:64:8e:6c:1d: fa:21:45:54:83:b6:b8:b8:39:8f:21:24:0d:fe:ec:2e:41:fe: 4a:4c:fe:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSPA810TYcR31o7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MTNmYTkwYTAtMDEyMC00MTk3LWE0MGItNWZlOTY0M2FjNjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYXCCf1M05zShXHDH9igetXX8RgUnrb8puL/ a/W8IBGT2G8dNumfuR/26/bx7HpHLNR4FNUrNrNEFLugMmSonVb8kksjLvX+15db 58iPMyUbHVHtCssh1uZM5qRpkOx0UfeRaNwwVVShPd7ChJwjO44sZhirzz1GQkQd sHZ6GbO6cnZgaG0U+4o4/13Ok0CDG9Fc53KZCKu0ukWDwTvtCs8FOOdGJaeaVW1k 7jnvZiLKK9wKKUZJ+6WaV3aQPEHAFZNKQ0sc6F2mfRAIx5vWkMG+o8uY6x/8yCS+ EUcBZiTyMacfhrh1EWRk4e+w5/GFKuH5tNQ6NjaSEP4IWdsLWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhTD49YVH1FT+FOEEdIFeiidpeQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGZiOTQxYWItM2EzZC0z MzY1LTgyOGEtYTNlMWEwMjA5YjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx8p4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaL0gg2aegZ/nmGiYfYIGxUV++I55N2gnYpRqYOvAHG+1Ofbd+aBDa2 T5Enl08BxCNq9Basx5Xqz8zi0lKBjbvtPd/TUiVn3THgnS9mj1K26fC+KWXnO0yY tzjIfSFkav60rsQV82pt0BJJtnVcI2QEHyUX7nI7w8UvuyUAnJWqZg+0T9/4O0CH wJPyVrZa07DkZyMW/QVCybSPAbbGqMAGZn6ZxBSpt+5gcuIxjFLuDrJGmyqs/TIw 19mniDeH6H+AC5P3LK4kcZHTIwoUTANwmsDsYNe9ruMtbRXeMVoHG2482SctZI5s HfohRVSDtri4OY8hJA3+7C5B/kpM/ng= -----END CERTIFICATE-----Generated at Sat Aug 23 14:09:45 2025 by rpki-client