$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c35ba012-b023-3826-aa1c-f48042f6ae6a.roa File: c35ba012-b023-3826-aa1c-f48042f6ae6a.roa (raw, json) Hash identifier: yedXYPWvpFJ+QzdeFLXLkZ8mArQ3rkcibe+LFiP0KbY= Subject key identifier: 50:01:06:CA:12:23:E3:FC:85:2C:88:DC:8C:53:6B:01:C3:0F:BF:AC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B8D477A14883A69E8C7883980 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c35ba012-b023-3826-aa1c-f48042f6ae6a.roa Signing time: Fri 17 Oct 2025 13:00:39 +0000 ROA not before: Fri 17 Oct 2025 13:00:39 +0000 ROA not after: Thu 15 Jan 2026 14:00:39 +0000 asID: 14618 IP address blocks: 208.214.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8d:47:7a:14:88:3a:69:e8:c7:88:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 17 13:00:39 2025 GMT Not After : Jan 15 14:00:39 2026 GMT Subject: CN=69a9b9a7-d509-46e1-8ccf-13666a08300b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:46:0f:bc:36:c0:be:92:14:7e:1a:0f:3c:f1: 5f:a6:05:c5:59:9f:08:fc:b0:4f:8f:49:22:52:4c: a6:da:9d:b9:f4:96:30:e2:77:77:6b:91:c1:a7:05: 6e:bc:cc:68:2a:da:89:ef:ca:6b:39:a0:ee:60:3f: f2:ab:82:ba:f2:3f:70:1b:74:47:9e:56:21:dd:88: 40:18:a2:b6:38:38:ab:39:02:30:ce:ec:d9:61:6b: 06:b1:17:3b:0e:34:b3:d1:8d:f8:74:ec:41:1a:26: db:43:d3:f7:a1:85:7b:52:a3:7d:98:2c:40:1e:7b: f2:e1:90:0a:87:a8:a0:ea:2e:48:2c:1f:58:51:05: b3:9c:ca:0a:b1:2a:b1:47:ae:7e:f5:5f:4b:c2:0c: 18:fc:df:6d:27:67:0a:b7:8a:8e:63:03:a1:de:18: a5:25:f9:98:d3:97:56:b4:2c:87:87:07:4a:b2:37: 7c:e3:46:cd:1e:72:6c:13:4b:04:a0:1b:b7:da:b1: 9a:8a:cd:f4:9e:99:13:60:b6:d1:ae:49:32:0d:9d: e7:7a:4c:34:e2:df:48:8e:7b:6f:48:9c:cb:24:a4: 9f:27:29:4d:9e:42:d6:fe:4a:5c:4d:44:98:ec:de: 5c:dd:58:17:2a:56:59:97:5f:86:b0:95:56:b0:f4: 9f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:01:06:CA:12:23:E3:FC:85:2C:88:DC:8C:53:6B:01:C3:0F:BF:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c35ba012-b023-3826-aa1c-f48042f6ae6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.214.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:fb:e8:e3:a7:7f:75:1a:16:81:c5:a1:c8:d9:4d:75:fb:88: 05:23:0a:86:12:97:ea:4e:41:00:4a:19:b4:21:ee:f3:07:ba: 02:4a:5e:2c:6a:63:90:91:a2:d0:c0:41:0c:e4:66:23:a1:77: be:ec:d8:47:19:97:43:14:41:7c:6d:b9:55:a1:02:d5:7f:8f: 32:d0:f5:1b:fa:df:5b:fe:c3:9c:25:80:4e:b1:24:92:58:7e: 5e:12:e6:9e:5c:09:1d:51:a2:48:be:82:68:c5:70:5b:db:7d: 73:fa:9d:65:a0:95:14:07:ec:8d:56:cb:1c:d7:e6:9c:e7:9b: a2:ab:a3:c8:ee:3c:cf:93:ef:62:1a:71:7e:39:19:5f:f3:f1: fc:a0:6d:39:8d:09:a4:fd:46:1f:1f:89:c3:de:09:ff:88:09: d3:d8:fe:4b:de:47:4a:ff:b4:a8:8a:97:35:0b:40:61:63:5e: e4:e9:c8:db:ca:e1:00:08:18:52:0e:91:94:32:f7:5d:31:eb: cc:78:0a:d6:43:06:51:7e:ed:6f:09:b1:78:fc:97:15:26:3f: f3:37:47:e3:2b:1c:d7:0b:1a:6d:db:25:44:5f:22:fb:6d:05: 78:db:3d:3e:0a:48:b1:2d:ad:d6:6a:2c:b0:da:eb:43:f7:4d: 5a:e2:e0:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuNR3oUiDpp6MeIOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxNzEzMDAzOVoXDTI2MDExNTE0MDAzOVowLzEtMCsGA1UEAxMk NjlhOWI5YTctZDUwOS00NmUxLThjY2YtMTM2NjZhMDgzMDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUYPvDbAvpIUfhoPPPFfpgXFWZ8I/LBPj0ki Ukym2p259JYw4nd3a5HBpwVuvMxoKtqJ78prOaDuYD/yq4K68j9wG3RHnlYh3YhA GKK2ODirOQIwzuzZYWsGsRc7DjSz0Y34dOxBGibbQ9P3oYV7UqN9mCxAHnvy4ZAK h6ig6i5ILB9YUQWznMoKsSqxR65+9V9LwgwY/N9tJ2cKt4qOYwOh3hilJfmY05dW tCyHhwdKsjd840bNHnJsE0sEoBu32rGais30npkTYLbRrkkyDZ3nekw04t9Ijntv SJzLJKSfJylNnkLW/kpcTUSY7N5c3VgXKlZZl1+GsJVWsPSfQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFABBsoSI+P8hSyI3IxTawHDD7+sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzM1YmEwMTItYjAyMy0z ODI2LWFhMWMtZjQ4MDQyZjZhZTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0NbiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF376OOnf3UaFoHFocjZTXX7iAUjCoYSl+pOQQBKGbQh7vMHugJKXixq Y5CRotDAQQzkZiOhd77s2EcZl0MUQXxtuVWhAtV/jzLQ9Rv631v+w5wlgE6xJJJY fl4S5p5cCR1Roki+gmjFcFvbfXP6nWWglRQH7I1WyxzX5pznm6Kro8juPM+T72Ia cX45GV/z8fygbTmNCaT9Rh8ficPeCf+ICdPY/kveR0r/tKiKlzULQGFjXuTpyNvK 4QAIGFIOkZQy910x68x4CtZDBlF+7W8JsXj8lxUmP/M3R+MrHNcLGm3bJURfIvtt BXjbPT4KSLEtrdZqLLDa60P3TVri4Ls= -----END CERTIFICATE-----Generated at Mon Oct 20 05:32:05 2025 by rpki-client