$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14d01a77-a3a2-3355-bf9c-f975bcfd852b.roa File: 14d01a77-a3a2-3355-bf9c-f975bcfd852b.roa (raw, json) Hash identifier: gbHUaqj5dtis1X2hlx9PRIB3s6n6nGHb3V+xki1Dyho= Subject key identifier: 22:D2:86:D9:97:A4:5B:64:B6:39:27:65:EA:4D:1F:BA:04:8C:AB:78 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849CE9A6CFAEE5EBC418B16AB00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14d01a77-a3a2-3355-bf9c-f975bcfd852b.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 20447 IP address blocks: 199.170.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:6c:fa:ee:5e:bc:41:8b:16:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=bb4d5028-6047-4bd6-841d-fdc0ef8e9254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6f:11:2a:14:56:89:42:db:f7:1f:f8:3e:c6: e0:8b:a9:7a:9d:7d:c9:4d:dd:06:a3:c0:20:a6:cc: 17:2e:a9:bb:e4:8c:5b:0b:a5:0e:a1:6d:e9:c6:4c: d0:db:23:04:17:78:5c:8b:3a:21:89:2d:0c:19:93: f7:08:f1:36:00:be:57:46:11:60:79:1e:f1:0e:08: eb:45:3b:01:30:fb:86:d5:07:98:f0:2a:c1:fe:b6: 0b:78:1f:da:cd:46:92:1a:fe:1f:48:9c:ed:ee:ea: a2:90:3a:13:31:8b:3d:26:74:6d:bb:73:4d:31:1c: 59:31:19:3e:34:d3:fa:bf:17:87:42:d2:f5:57:40: 67:1a:ba:fa:a2:e7:e7:90:41:52:00:7c:ff:0b:f5: 7b:b1:f1:39:bc:03:dc:0b:67:bc:da:36:ba:89:86: 2a:69:64:ad:ee:89:3b:fd:02:32:c1:41:af:83:79: d5:26:f0:f1:68:46:ea:22:e3:35:ed:ab:c5:7a:da: fb:c0:99:70:f7:5a:d8:00:ad:3c:28:30:ec:4a:72: fe:a6:e1:fc:88:3a:af:18:b6:81:98:54:12:9c:db: d2:df:dd:22:69:e0:09:b5:1b:47:b4:00:8b:12:31: 38:47:e7:a1:47:b3:60:dd:84:78:04:1c:7c:31:e4: 6a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D2:86:D9:97:A4:5B:64:B6:39:27:65:EA:4D:1F:BA:04:8C:AB:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14d01a77-a3a2-3355-bf9c-f975bcfd852b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.170.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:81:c2:70:7c:89:64:bf:00:35:90:f4:8e:0a:1a:25:2b:85: 6c:12:10:0b:de:d1:0e:4e:12:95:5f:08:21:8c:b4:63:ee:35: 83:05:c9:a9:c0:6d:ed:1c:bf:db:fd:3b:65:1c:13:4f:50:e4: 46:27:7b:4a:69:34:7d:e0:18:d1:a6:9f:5a:03:c7:05:7a:c2: c8:dd:93:e8:77:53:82:21:29:6a:c3:8c:52:a1:cc:dc:61:67: 8b:3e:2d:67:66:43:45:c0:aa:ba:11:fa:a9:40:9c:c8:5f:84: ff:b0:f2:f8:aa:8d:e5:15:c2:98:c0:e7:05:b2:27:ce:10:62: 6c:33:29:58:31:91:d7:ef:4c:5e:3e:c7:37:52:02:63:1f:e0: 73:6a:89:8b:80:29:2f:15:1e:8d:05:b6:b1:e2:48:9a:33:d0: b5:ee:29:e9:d7:51:e4:00:48:4a:bd:ae:31:08:95:2e:e1:a3: 7d:fb:e1:f2:10:ec:27:43:8b:5c:e9:89:02:dc:9d:21:b3:2a: 85:9d:91:a9:76:a3:dc:29:1e:30:33:42:2d:0d:95:0d:70:14: 98:7d:30:d7:90:b2:01:f8:d7:20:49:40:31:6c:3c:0f:d1:aa: f8:dc:1d:81:15:07:5e:34:c8:8a:9e:67:53:07:4a:26:10:88: 66:b6:e7:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmmz67l68QYsWqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk YmI0ZDUwMjgtNjA0Ny00YmQ2LTg0MWQtZmRjMGVmOGU5MjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg28RKhRWiULb9x/4Psbgi6l6nX3JTd0Go8Ag pswXLqm75IxbC6UOoW3pxkzQ2yMEF3hcizohiS0MGZP3CPE2AL5XRhFgeR7xDgjr RTsBMPuG1QeY8CrB/rYLeB/azUaSGv4fSJzt7uqikDoTMYs9JnRtu3NNMRxZMRk+ NNP6vxeHQtL1V0BnGrr6oufnkEFSAHz/C/V7sfE5vAPcC2e82ja6iYYqaWSt7ok7 /QIywUGvg3nVJvDxaEbqIuM17avFetr7wJlw91rYAK08KDDsSnL+puH8iDqvGLaB mFQSnNvS390iaeAJtRtHtACLEjE4R+ehR7Ng3YR4BBx8MeRqpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLShtmXpFtktjknZepNH7oEjKt4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTRkMDFhNzctYTNhMi0z MzU1LWJmOWMtZjk3NWJjZmQ4NTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx6oYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSBwnB8iWS/ADWQ9I4KGiUrhWwSEAve0Q5OEpVfCCGMtGPuNYMFyanA be0cv9v9O2UcE09Q5EYne0ppNH3gGNGmn1oDxwV6wsjdk+h3U4IhKWrDjFKhzNxh Z4s+LWdmQ0XAqroR+qlAnMhfhP+w8viqjeUVwpjA5wWyJ84QYmwzKVgxkdfvTF4+ xzdSAmMf4HNqiYuAKS8VHo0FtrHiSJoz0LXuKenXUeQASEq9rjEIlS7ho3374fIQ 7CdDi1zpiQLcnSGzKoWdkal2o9wpHjAzQi0NlQ1wFJh9MNeQsgH41yBJQDFsPA/R qvjcHYEVB140yIqeZ1MHSiYQiGa252Y= -----END CERTIFICATE-----Generated at Thu Jul 3 06:50:44 2025 by rpki-client