$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8f06c12-2be7-3e89-91bb-3850b2ac0392.roa File: c8f06c12-2be7-3e89-91bb-3850b2ac0392.roa (raw, json) Hash identifier: +MyDOaEwdnljarjwptEZBdjfcwH2QtMRjjHQ8KBVlpI= Subject key identifier: ED:D1:B8:0A:65:BF:BA:C9:9F:68:31:6F:73:FF:8E:58:60:D0:73:CB Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD23C07068DE16BF7521600D0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8f06c12-2be7-3e89-91bb-3850b2ac0392.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 701 IP address blocks: 96.240.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3c:07:06:8d:e1:6b:f7:52:16:00:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=b2d09e4e-e6ca-49c4-9bef-690e0367b5e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:2d:26:d4:8b:85:e4:47:d0:92:74:0a:90:c0: 89:75:d2:13:de:df:dc:f8:81:7b:b5:09:09:93:f0: 16:c2:b4:99:6f:87:0c:cd:02:aa:74:63:d3:62:53: 54:da:35:0e:c8:d1:02:84:f8:c7:67:e9:21:85:5a: 11:5d:f0:25:0e:16:a9:25:3d:ba:99:7d:0f:62:c9: f9:12:b3:34:77:5b:1e:4d:3a:17:12:f9:1b:f5:dd: 9e:c5:f3:4f:13:d2:ca:8a:e1:4c:d5:8e:b4:eb:b5: 99:e8:3b:02:52:c3:5e:6e:03:ba:94:b9:1a:4a:98: 2f:07:0c:c7:0b:0f:44:5e:64:cd:b4:0f:ec:52:2a: 04:56:4b:50:5e:67:c2:c9:47:b3:57:af:53:93:71: bd:b7:38:9c:90:de:6a:0e:5c:11:c8:f3:0e:12:76: 3d:b6:f3:6d:25:e1:04:ce:12:a0:9c:e7:64:2f:95: 57:a8:de:2d:33:1b:f9:48:94:15:a6:bb:ee:c2:bf: d5:f1:3d:90:3e:ee:7d:43:77:35:a5:a0:85:72:ca: 01:90:78:99:66:bb:be:b2:1d:01:d3:40:4f:8c:ef: a7:6f:e2:40:55:31:59:d9:d5:b0:74:cb:16:b4:80: b5:8f:1b:4a:f5:82:8f:59:e3:c2:9f:e6:d7:10:2a: 93:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D1:B8:0A:65:BF:BA:C9:9F:68:31:6F:73:FF:8E:58:60:D0:73:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8f06c12-2be7-3e89-91bb-3850b2ac0392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 96.240.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:5c:7c:5e:92:ef:a8:33:42:cf:68:38:e2:78:a1:b4:85:0a: 3e:f0:62:95:9c:d0:8f:26:d9:b3:9d:86:dc:8d:5b:9e:06:84: 08:ff:87:19:0f:72:b5:69:fd:59:b2:bb:7e:d6:8e:56:4f:bf: 55:f5:8f:49:ca:14:1c:9f:9a:d6:96:7d:9e:fe:6b:df:01:bc: 8d:a3:e7:26:21:07:e6:94:9e:9c:8d:d4:23:3c:6c:1c:ab:e2: 5c:80:93:dd:1e:c1:60:a6:23:88:6b:12:e7:e4:18:6a:b2:27: 74:cb:08:17:60:c3:3d:be:eb:db:2c:32:59:92:67:09:63:81: 68:13:0b:da:ba:3c:67:67:12:0f:b0:d0:62:08:f9:2e:19:da: 72:d4:8d:1e:a0:7c:7b:45:04:40:77:fb:fe:44:d4:5c:22:db: cf:2a:df:64:b8:28:4d:86:55:c6:6b:a3:b0:97:af:c3:15:7d: e6:d0:ad:bf:f3:47:a0:e6:b6:c4:27:29:59:aa:33:06:b2:5c: 06:b2:63:8d:96:20:cb:4c:a9:96:da:fe:d6:c5:ef:47:a2:1d: 45:a1:15:14:fb:08:e8:66:53:cd:41:fc:72:bf:25:ef:1a:c2: 9a:c3:bc:95:ee:62:5c:f5:8d:7c:88:52:e3:36:ed:14:9a:fb: 68:7a:39:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSPAcGjeFr91IWANAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk YjJkMDllNGUtZTZjYS00OWM0LTliZWYtNjkwZTAzNjdiNWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgi0m1IuF5EfQknQKkMCJddIT3t/c+IF7tQkJ k/AWwrSZb4cMzQKqdGPTYlNU2jUOyNEChPjHZ+khhVoRXfAlDhapJT26mX0PYsn5 ErM0d1seTToXEvkb9d2exfNPE9LKiuFM1Y6067WZ6DsCUsNebgO6lLkaSpgvBwzH Cw9EXmTNtA/sUioEVktQXmfCyUezV69Tk3G9tzickN5qDlwRyPMOEnY9tvNtJeEE zhKgnOdkL5VXqN4tMxv5SJQVprvuwr/V8T2QPu59Q3c1paCFcsoBkHiZZru+sh0B 00BPjO+nb+JAVTFZ2dWwdMsWtIC1jxtK9YKPWePCn+bXECqTwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3RuAplv7rJn2gxb3P/jlhg0HPLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzhmMDZjMTItMmJlNy0z ZTg5LTkxYmItMzg1MGIyYWMwMzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYPCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxcfF6S76gzQs9oOOJ4obSFCj7wYpWc0I8m2bOdhtyNW54GhAj/hxkP crVp/Vmyu37WjlZPv1X1j0nKFByfmtaWfZ7+a98BvI2j5yYhB+aUnpyN1CM8bByr 4lyAk90ewWCmI4hrEufkGGqyJ3TLCBdgwz2+69ssMlmSZwljgWgTC9q6PGdnEg+w 0GII+S4Z2nLUjR6gfHtFBEB3+/5E1Fwi288q32S4KE2GVcZro7CXr8MVfebQrb/z R6DmtsQnKVmqMwayXAayY42WIMtMqZba/tbF70eiHUWhFRT7COhmU81B/HK/Je8a wprDvJXuYlz1jXyIUuM27RSa+2h6OZk= -----END CERTIFICATE-----Generated at Sat Aug 23 14:23:05 2025 by rpki-client