$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0254b60b-a409-3e5d-beee-47898507d1b4.roa File: 0254b60b-a409-3e5d-beee-47898507d1b4.roa (raw, json) Hash identifier: +0Xu52YAY0BMtoJ47YJ5xjK7TJ02DGqKJfT7d2cg1N8= Subject key identifier: 22:5B:37:76:0B:37:44:3D:87:60:EE:10:2E:97:6F:41:3E:62:6D:74 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A126D4820659FA84D38A6AA90 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0254b60b-a409-3e5d-beee-47898507d1b4.roa Signing time: Tue 03 Jun 2025 20:05:30 +0000 ROA not before: Tue 03 Jun 2025 20:05:30 +0000 ROA not after: Mon 01 Sep 2025 20:05:30 +0000 asID: 3855 IP address blocks: 199.172.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:12:6d:48:20:65:9f:a8:4d:38:a6:aa:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 3 20:05:30 2025 GMT Not After : Sep 1 20:05:30 2025 GMT Subject: CN=3f370ea0-ed03-4e7e-88c7-351398f7753b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c3:c6:6f:a4:2b:47:03:fd:c5:60:23:92:0e: 62:fb:68:3a:4f:93:e0:94:ee:28:68:37:52:a1:6b: 9f:62:88:a4:84:2f:8c:47:d8:ec:4a:38:88:b6:69: a2:0b:15:a7:71:6c:0f:f8:0c:b7:79:bb:66:e5:c4: 3f:7a:5f:f4:d5:0d:e0:50:de:8e:ee:7e:4d:cf:07: 78:da:8c:60:f6:aa:e7:fc:3b:1c:7f:4e:cc:2f:49: ff:c3:60:9d:63:b5:43:54:69:d1:5d:a8:0e:76:0e: 03:01:3c:63:16:81:f1:f1:bf:a0:e7:36:2a:69:a9: 06:76:bf:bb:65:61:4c:af:a8:ae:cf:78:a9:3f:8d: 1d:7e:4c:da:d5:18:87:85:1a:2f:9f:31:6b:0d:88: 94:bd:35:fd:b6:3d:d7:52:65:46:46:b5:f0:fb:23: 9c:ee:03:c9:d4:8f:b6:88:04:b8:fe:8d:58:52:a9: b7:67:5f:d3:cd:62:24:fd:53:8b:7f:1b:57:43:c6: dd:b4:1f:5a:7a:b0:84:bf:e5:2b:9d:46:73:bb:45: e1:68:48:29:0f:45:25:3e:8e:21:a2:a1:3b:f8:c6: 00:ce:db:e4:41:13:2e:ee:d9:1f:17:3b:78:40:e5: 1f:5d:b7:94:f6:2b:fc:c4:38:5a:20:e0:8a:1e:83: ae:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5B:37:76:0B:37:44:3D:87:60:EE:10:2E:97:6F:41:3E:62:6D:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0254b60b-a409-3e5d-beee-47898507d1b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:ad:4b:86:b2:f8:61:d6:4b:8a:b3:48:2e:03:81:4a:7e:fb: ec:cc:ee:79:82:34:c8:47:df:fa:5a:de:f4:9c:98:f0:a8:66: c1:6a:90:7b:57:ec:85:7e:0f:a1:7d:ce:33:08:75:52:24:a4: 7c:63:7b:f6:06:b2:8c:d7:e7:24:4f:f2:02:c6:c8:f3:52:29: 64:02:1f:e1:19:f6:89:da:05:78:88:cb:ed:67:d2:da:fe:d2: c3:ac:9a:0d:30:be:f7:87:45:b0:26:64:f1:1c:4a:c5:6c:f2: f0:05:ab:b7:38:c8:56:72:e5:43:62:5f:1a:e5:97:46:ff:2c: 80:4d:78:6c:2b:74:d2:39:04:2b:ac:f3:3a:9a:77:bd:c5:aa: 68:3e:19:14:bd:fd:76:51:82:a7:65:b7:4b:87:6d:79:13:29: 3c:ae:6f:01:d3:af:01:af:4a:ec:79:91:a2:a5:02:71:6b:dd: ad:b8:6e:f0:57:68:3b:02:de:3d:a1:0c:7a:20:46:59:0e:c1: 5c:d6:4e:d4:47:3c:33:25:95:84:16:1c:25:96:fd:79:c1:f6: 97:97:18:ed:09:25:27:eb:e8:50:36:f8:cc:d7:09:20:1c:19: c6:1c:62:b8:bf:18:4c:da:34:0c:1b:d4:96:22:26:e7:01:02: 94:f0:99:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoSbUggZZ+oTTimqpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYwMzIwMDUzMFoXDTI1MDkwMTIwMDUzMFowLzEtMCsGA1UEAxMk M2YzNzBlYTAtZWQwMy00ZTdlLTg4YzctMzUxMzk4Zjc3NTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMPGb6QrRwP9xWAjkg5i+2g6T5PglO4oaDdS oWufYoikhC+MR9jsSjiItmmiCxWncWwP+Ay3ebtm5cQ/el/01Q3gUN6O7n5Nzwd4 2oxg9qrn/Dscf07ML0n/w2CdY7VDVGnRXagOdg4DATxjFoHx8b+g5zYqaakGdr+7 ZWFMr6iuz3ipP40dfkza1RiHhRovnzFrDYiUvTX9tj3XUmVGRrXw+yOc7gPJ1I+2 iAS4/o1YUqm3Z1/TzWIk/VOLfxtXQ8bdtB9aerCEv+UrnUZzu0XhaEgpD0UlPo4h oqE7+MYAztvkQRMu7tkfFzt4QOUfXbeU9iv8xDhaIOCKHoOuHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJbN3YLN0Q9h2DuEC6Xb0E+Ym10MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDI1NGI2MGItYTQwOS0z ZTVkLWJlZWUtNDc4OTg1MDdkMWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6z0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALetS4ay+GHWS4qzSC4DgUp+++zM7nmCNMhH3/pa3vScmPCoZsFqkHtX 7IV+D6F9zjMIdVIkpHxje/YGsozX5yRP8gLGyPNSKWQCH+EZ9onaBXiIy+1n0tr+ 0sOsmg0wvveHRbAmZPEcSsVs8vAFq7c4yFZy5UNiXxrll0b/LIBNeGwrdNI5BCus 8zqad73Fqmg+GRS9/XZRgqdlt0uHbXkTKTyubwHTrwGvSux5kaKlAnFr3a24bvBX aDsC3j2hDHogRlkOwVzWTtRHPDMllYQWHCWW/XnB9peXGO0JJSfr6FA2+MzXCSAc GcYcYri/GEzaNAwb1JYiJucBApTwmcQ= -----END CERTIFICATE-----Generated at Mon Jun 30 18:25:47 2025 by rpki-client