$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2aacea34-269b-3e95-a3b1-ce065f46f42d.roa File: 2aacea34-269b-3e95-a3b1-ce065f46f42d.roa (raw, json) Hash identifier: tpgUAo7i2okW/4obx+85/ONcpwYYh99LzbTP4+k0euM= Subject key identifier: 71:FB:81:1E:FE:6E:BF:6D:56:E7:7F:16:1A:C1:9E:60:AB:33:78:46 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A3B7B0DE69B245E7157017780 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2aacea34-269b-3e95-a3b1-ce065f46f42d.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 701 IP address blocks: 199.202.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:0d:e6:9b:24:5e:71:57:01:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=d9be35c5-1ae9-444d-8390-5654023e2916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:50:52:2c:b6:7f:6e:56:50:65:1d:21:4b:97: 50:17:73:69:e3:49:9f:4f:16:50:42:28:8d:2d:60: 24:9e:98:1b:ff:5c:4a:5c:e5:4b:83:33:e1:5c:3b: 13:a6:ef:90:97:28:f5:92:78:1b:cc:0a:32:b4:72: f6:e6:77:a2:eb:78:1b:91:99:d7:06:6a:72:fd:7d: a2:62:56:d4:5e:54:86:1a:ab:1a:57:cf:57:25:4f: 48:a7:e0:17:66:b3:49:26:4c:32:f0:71:6a:71:d9: 93:11:24:95:a1:de:ab:81:97:dd:23:61:73:e3:61: 0c:8f:6e:d1:a9:d7:ae:a2:e2:bf:d1:21:9c:a2:bd: 35:b6:bd:76:31:90:39:c4:f6:96:42:20:33:1e:39: 47:8c:0d:a4:17:79:d2:99:c5:08:e9:10:63:76:1f: 37:6a:45:0e:0e:d0:2e:55:81:bf:fe:dd:df:8d:1f: d3:70:85:b3:ed:ad:83:86:9f:3d:b2:0e:e8:c1:28: 6c:6a:ee:e9:99:c8:51:89:d4:55:de:97:72:ac:f1: cb:8e:31:3e:a8:16:6c:b3:75:41:ef:75:87:d9:e5: df:d9:b9:da:d2:28:4d:c2:85:03:7f:bb:40:45:ac: 8c:16:ed:44:6a:c3:a1:18:b9:03:48:be:9b:b2:6a: d8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:FB:81:1E:FE:6E:BF:6D:56:E7:7F:16:1A:C1:9E:60:AB:33:78:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2aacea34-269b-3e95-a3b1-ce065f46f42d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.202.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:63:f4:a2:07:22:14:90:6e:20:7d:ef:f6:3d:0e:78:50:32: f5:69:cd:d4:40:32:87:0b:3b:e9:2e:25:a9:aa:86:b4:14:d5: 2d:bf:32:b1:22:e5:64:c7:af:b6:7d:b3:bf:e1:18:05:d4:1e: 6d:a9:f5:9c:f1:aa:c8:52:56:ee:bf:31:d2:84:5d:d1:05:c6: 9e:5b:87:3b:36:95:73:71:68:82:f0:0e:80:25:2b:ee:78:07: 48:c8:fc:96:da:bb:ff:ab:7f:14:01:f2:c0:b2:a7:70:b3:e8: d5:8f:50:f4:bf:78:f9:dc:7f:bd:b3:b9:72:f9:53:ee:d3:31: d9:46:f2:bb:65:44:95:03:8e:1a:c2:be:fb:e8:2a:e8:ee:76: 24:24:96:7c:33:5b:81:36:e2:76:7a:73:62:25:95:61:4d:0c: 0e:49:c9:60:aa:9e:79:5c:92:27:5a:4a:5e:58:38:ca:04:29: 43:89:2c:17:49:89:c6:9d:6f:a3:57:d4:20:eb:74:77:6a:e8: e1:e5:cc:f2:e3:d4:3a:e9:ff:66:7f:d4:8d:ce:ab:6d:45:4e: a5:56:7a:3c:9e:98:ea:46:0b:b6:f2:00:db:af:86:93:1d:3a: ca:7a:93:78:16:cf:8b:85:ef:e9:3a:16:91:61:2a:aa:80:56: 75:d7:b3:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ew3mmyRecVcBd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk ZDliZTM1YzUtMWFlOS00NDRkLTgzOTAtNTY1NDAyM2UyOTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVBSLLZ/blZQZR0hS5dQF3Np40mfTxZQQiiN LWAknpgb/1xKXOVLgzPhXDsTpu+Qlyj1kngbzAoytHL25nei63gbkZnXBmpy/X2i YlbUXlSGGqsaV89XJU9Ip+AXZrNJJkwy8HFqcdmTESSVod6rgZfdI2Fz42EMj27R qdeuouK/0SGcor01tr12MZA5xPaWQiAzHjlHjA2kF3nSmcUI6RBjdh83akUODtAu VYG//t3fjR/TcIWz7a2Dhp89sg7owShsau7pmchRidRV3pdyrPHLjjE+qBZss3VB 73WH2eXf2bna0ihNwoUDf7tARayMFu1EasOhGLkDSL6bsmrYMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHH7gR7+br9tVud/FhrBnmCrM3hGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmFhY2VhMzQtMjY5Yi0z ZTk1LWEzYjEtY2UwNjVmNDZmNDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8p0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhj9KIHIhSQbiB97/Y9DnhQMvVpzdRAMocLO+kuJamqhrQU1S2/MrEi 5WTHr7Z9s7/hGAXUHm2p9ZzxqshSVu6/MdKEXdEFxp5bhzs2lXNxaILwDoAlK+54 B0jI/Jbau/+rfxQB8sCyp3Cz6NWPUPS/ePncf72zuXL5U+7TMdlG8rtlRJUDjhrC vvvoKujudiQklnwzW4E24nZ6c2IllWFNDA5JyWCqnnlckidaSl5YOMoEKUOJLBdJ icadb6NX1CDrdHdq6OHlzPLj1Drp/2Z/1I3Oq21FTqVWejyemOpGC7byANuvhpMd Osp6k3gWz4uF7+k6FpFhKqqAVnXXs7k= -----END CERTIFICATE-----Generated at Tue Jul 1 17:52:24 2025 by rpki-client