$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3bd74b9-c0b6-327a-ab3a-1f11cd4ad2ac.roa File: c3bd74b9-c0b6-327a-ab3a-1f11cd4ad2ac.roa (raw, json) Hash identifier: oSXrn0pD7S5cKOTor0k0ak0UkYC63JiYBnkpLYSHcHk= Subject key identifier: E8:FF:E2:3F:50:AF:6E:7D:FB:88:09:7F:8B:0B:3C:F7:E5:E4:6D:58 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B79BCC5D7089CF058611F1AC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3bd74b9-c0b6-327a-ab3a-1f11cd4ad2ac.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 3855 IP address blocks: 199.172.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:c5:d7:08:9c:f0:58:61:1f:1a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=98aafc7f-b7f9-41f9-b036-29d64df2a384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3a:c0:f6:61:a6:65:72:61:05:25:f2:b9:f4: d7:04:ab:35:70:6e:64:57:2a:06:bf:23:8a:a8:70: 6f:d1:d7:b5:c9:65:b2:d6:84:de:62:d7:0b:97:0e: 4a:18:0c:14:dc:01:be:bd:be:f2:14:2f:e3:a6:25: 61:32:7a:95:03:b4:b3:c6:62:64:71:a2:2e:3c:06: 7b:e1:6b:d4:77:7d:45:55:e8:95:d2:62:ee:f5:f3: b9:5b:3c:c4:3d:b8:83:e7:ab:92:37:a1:5e:80:8b: 9a:ff:32:d4:93:1f:b8:7f:32:29:7c:81:7e:3b:3a: 42:71:76:9f:d9:66:c5:38:4a:9b:f5:80:a6:60:f0: ac:8e:d9:91:73:a0:f4:6f:0d:b2:c6:bd:bd:8b:98: 2b:63:e2:28:b5:74:a2:1a:16:35:55:bc:36:dd:63: 27:76:f9:ed:e0:c8:a1:d9:bb:3b:53:70:46:8e:15: a5:4f:24:d8:a8:cc:94:7b:82:74:89:2a:73:74:cf: 1f:c8:26:34:85:27:61:82:6e:79:7a:69:40:4d:11: 83:b7:35:1c:e8:fc:e9:18:73:36:6d:51:8c:68:0b: 51:bd:cd:54:ae:e1:0a:e5:b9:a6:bf:19:55:f6:f4: 11:26:c3:f9:04:25:73:f4:7a:f2:f6:b6:7a:46:8e: 7b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:FF:E2:3F:50:AF:6E:7D:FB:88:09:7F:8B:0B:3C:F7:E5:E4:6D:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3bd74b9-c0b6-327a-ab3a-1f11cd4ad2ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:ad:a8:4b:db:0d:43:a0:9e:68:43:43:20:4b:31:5d:4d:85: ba:2c:aa:68:fa:21:e2:3a:39:07:0d:6f:1b:c8:35:b1:ff:04: 86:3f:c7:3f:de:31:88:39:a8:77:b5:a4:a2:53:7d:7d:75:5f: 61:b2:a2:e8:97:83:19:0e:96:f8:93:89:fd:3c:b7:34:c8:56: c4:be:b8:45:b2:cc:47:59:ed:6e:76:ec:f0:81:d7:fa:b8:8d: 0f:85:fa:28:a6:b3:9a:1d:f6:51:94:45:9c:9c:dc:17:69:b6: 94:d4:fb:1d:43:a2:1f:d8:93:fd:28:08:03:d5:fd:eb:8f:60: bc:97:98:45:27:81:f8:47:b0:5f:4f:3a:e6:7f:e3:ef:db:e1: 68:d5:b8:22:e4:ef:2e:b7:90:32:d4:c7:d1:b3:6d:ff:60:f9: 99:8b:45:28:3b:42:f7:e9:be:b9:bf:48:8c:7d:4e:a8:27:88: 2b:37:5e:22:00:5b:ff:53:fb:5b:f9:2e:0a:d3:50:59:1e:3f: 42:2d:29:30:c2:5d:fd:d7:15:19:d7:66:57:de:55:5c:b1:08: 33:ab:6c:b5:2b:02:e8:80:a4:a2:c1:6c:58:af:d4:7c:3b:d0: bd:6e:e7:d6:68:17:20:4d:87:fe:a9:d8:5e:e4:f3:ea:cc:d3: 19:f6:a1:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vMXXCJzwWGEfGsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk OThhYWZjN2YtYjdmOS00MWY5LWIwMzYtMjlkNjRkZjJhMzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTrA9mGmZXJhBSXyufTXBKs1cG5kVyoGvyOK qHBv0de1yWWy1oTeYtcLlw5KGAwU3AG+vb7yFC/jpiVhMnqVA7SzxmJkcaIuPAZ7 4WvUd31FVeiV0mLu9fO5WzzEPbiD56uSN6FegIua/zLUkx+4fzIpfIF+OzpCcXaf 2WbFOEqb9YCmYPCsjtmRc6D0bw2yxr29i5grY+IotXSiGhY1Vbw23WMndvnt4Mih 2bs7U3BGjhWlTyTYqMyUe4J0iSpzdM8fyCY0hSdhgm55emlATRGDtzUc6PzpGHM2 bVGMaAtRvc1UruEK5bmmvxlV9vQRJsP5BCVz9Hry9rZ6Ro57VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOj/4j9Qr259+4gJf4sLPPfl5G1YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzNiZDc0YjktYzBiNi0z MjdhLWFiM2EtMWYxMWNkNGFkMmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKytqEvbDUOgnmhDQyBLMV1Nhbosqmj6IeI6OQcNbxvINbH/BIY/xz/e MYg5qHe1pKJTfX11X2GyouiXgxkOlviTif08tzTIVsS+uEWyzEdZ7W527PCB1/q4 jQ+F+iims5od9lGURZyc3BdptpTU+x1Doh/Yk/0oCAPV/euPYLyXmEUngfhHsF9P OuZ/4+/b4WjVuCLk7y63kDLUx9Gzbf9g+ZmLRSg7Qvfpvrm/SIx9TqgniCs3XiIA W/9T+1v5LgrTUFkeP0ItKTDCXf3XFRnXZlfeVVyxCDOrbLUrAuiApKLBbFiv1Hw7 0L1u59ZoFyBNh/6p2F7k8+rM0xn2oZQ= -----END CERTIFICATE-----Generated at Mon Oct 20 13:55:05 2025 by rpki-client