$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/20e47143-3c01-3676-9b5c-ae8354875cc8.roa File: 20e47143-3c01-3676-9b5c-ae8354875cc8.roa (raw, json) Hash identifier: C0poP5mOnvlSvkBX9TMgXtIPxxCBz3SUmcJHQi7O7BM= Subject key identifier: B9:D4:27:45:E3:97:D8:F9:6F:0A:74:ED:4F:CA:F1:B2:B7:E8:83:5B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A126D44DEB0A4D40CCF34F700 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/20e47143-3c01-3676-9b5c-ae8354875cc8.roa Signing time: Tue 03 Jun 2025 20:05:29 +0000 ROA not before: Tue 03 Jun 2025 20:05:29 +0000 ROA not after: Mon 01 Sep 2025 20:05:29 +0000 asID: 3855 IP address blocks: 199.172.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:12:6d:44:de:b0:a4:d4:0c:cf:34:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 3 20:05:29 2025 GMT Not After : Sep 1 20:05:29 2025 GMT Subject: CN=5ceaff7f-b997-4a84-84ba-1ca3ace8b751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:41:0d:b5:66:c2:e2:2a:6d:fd:cd:f7:6f:8a: 20:5d:45:9b:ca:00:f2:05:07:52:ca:b2:cd:5b:52: 15:ef:e7:54:23:9a:12:c3:c0:2b:93:28:23:0a:6a: c5:65:5c:e9:03:f0:f6:b5:3f:89:da:17:02:59:f9: b0:7c:58:c2:16:93:e4:f6:e9:b1:37:6b:97:4f:0f: 50:11:cb:2d:6b:f9:0c:8b:71:78:5b:f6:0c:c9:11: a5:27:6f:b3:c5:f3:db:27:e9:31:da:b8:00:10:db: f9:0e:0d:af:f2:30:73:f4:2b:7a:f1:52:65:01:50: ab:fa:b3:61:8b:b4:50:ac:ae:89:05:84:74:56:bc: e9:43:6c:ef:42:79:ba:8b:c9:19:f3:46:c7:78:fd: 23:34:4e:99:36:04:16:8c:a6:07:33:a0:53:3c:ea: 76:89:36:8b:49:90:da:64:40:82:2f:61:ef:bc:9f: cd:e9:ad:f7:97:cf:09:c3:9a:4b:cd:d7:f8:c9:f2: a2:88:eb:e1:20:83:bd:cb:bd:53:2d:dc:c8:fd:ce: 56:6c:30:97:02:ca:40:15:67:12:0c:a1:bb:62:9c: b7:9d:39:2d:98:0d:88:34:0f:72:2a:cc:17:ac:30: ec:11:0d:2a:df:8d:67:a8:1d:b3:ed:4c:18:43:34: 7f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D4:27:45:E3:97:D8:F9:6F:0A:74:ED:4F:CA:F1:B2:B7:E8:83:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/20e47143-3c01-3676-9b5c-ae8354875cc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:17:49:41:5f:b0:46:e5:b9:cf:6e:c8:9e:5c:a2:d9:49:41: d7:e3:61:de:70:96:f5:4d:70:de:ad:51:21:d6:94:9a:8d:c3: b8:01:12:9b:6f:8a:a0:22:0e:12:88:a9:d2:59:30:5f:5d:3f: 71:ae:8c:a0:db:70:ff:0b:d9:dd:c5:8a:b0:2e:53:7a:81:48: cf:5e:96:45:2a:85:d5:db:39:8b:22:a9:4b:f7:80:c8:fa:07: 53:bc:dd:8c:b8:a3:33:d7:de:30:2a:d2:a5:35:0c:80:a3:c3: d9:2b:25:97:83:cd:90:20:99:29:fd:a0:22:61:7e:03:7e:0c: 45:bb:6f:d8:a7:f6:8f:24:9c:93:b9:05:43:99:6f:77:2d:62: 9b:58:8c:3a:a1:96:6f:ab:26:55:a5:5c:db:24:44:aa:93:ba: de:09:77:35:68:07:23:51:11:ad:44:f8:58:4e:6b:f1:cb:17: 7f:09:dd:6a:f9:eb:cf:ca:f3:ad:b4:2c:78:73:eb:59:15:bc: 2a:27:f7:ab:7d:71:f8:11:0a:1d:6a:90:07:fe:8b:98:b9:56: 6c:8f:1a:45:b1:b4:87:d8:12:be:5e:57:02:38:25:27:fe:47: 38:87:fa:4f:2e:45:42:98:5f:54:01:d3:65:34:04:68:f8:01: b6:24:b9:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoSbUTesKTUDM809wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYwMzIwMDUyOVoXDTI1MDkwMTIwMDUyOVowLzEtMCsGA1UEAxMk NWNlYWZmN2YtYjk5Ny00YTg0LTg0YmEtMWNhM2FjZThiNzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEENtWbC4ipt/c33b4ogXUWbygDyBQdSyrLN W1IV7+dUI5oSw8ArkygjCmrFZVzpA/D2tT+J2hcCWfmwfFjCFpPk9umxN2uXTw9Q Ecsta/kMi3F4W/YMyRGlJ2+zxfPbJ+kx2rgAENv5Dg2v8jBz9Ct68VJlAVCr+rNh i7RQrK6JBYR0VrzpQ2zvQnm6i8kZ80bHeP0jNE6ZNgQWjKYHM6BTPOp2iTaLSZDa ZECCL2HvvJ/N6a33l88Jw5pLzdf4yfKiiOvhIIO9y71TLdzI/c5WbDCXAspAFWcS DKG7Ypy3nTktmA2INA9yKswXrDDsEQ0q341nqB2z7UwYQzR/jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnUJ0Xjl9j5bwp07U/K8bK36INbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjBlNDcxNDMtM2MwMS0z Njc2LTliNWMtYWU4MzU0ODc1Y2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkXSUFfsEbluc9uyJ5cotlJQdfjYd5wlvVNcN6tUSHWlJqNw7gBEptv iqAiDhKIqdJZMF9dP3GujKDbcP8L2d3FirAuU3qBSM9elkUqhdXbOYsiqUv3gMj6 B1O83Yy4ozPX3jAq0qU1DICjw9krJZeDzZAgmSn9oCJhfgN+DEW7b9in9o8knJO5 BUOZb3ctYptYjDqhlm+rJlWlXNskRKqTut4JdzVoByNREa1E+FhOa/HLF38J3Wr5 68/K8620LHhz61kVvCon96t9cfgRCh1qkAf+i5i5VmyPGkWxtIfYEr5eVwI4JSf+ RziH+k8uRUKYX1QB02U0BGj4AbYkuXg= -----END CERTIFICATE-----Generated at Tue Jul 1 07:05:39 2025 by rpki-client