$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3406c36c-3284-329c-b8fa-f414b6875662.roa File: 3406c36c-3284-329c-b8fa-f414b6875662.roa (raw, json) Hash identifier: JjapZFg41MFXof+huuTs1GZ3GlaerQDx/i31/xcR+tc= Subject key identifier: C0:53:02:7C:6E:AC:A6:0C:D2:E2:9B:16:7C:5E:38:AE:0A:93:4E:4B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AF256A4EA640F2A05A2470718 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3406c36c-3284-329c-b8fa-f414b6875662.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 3855 IP address blocks: 199.172.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:a4:ea:64:0f:2a:05:a2:47:07:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=9e26e3cb-8aeb-4c65-b07f-15c5b4f06137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2b:58:c0:25:b3:59:ac:64:5c:d5:a4:c1:61: 2e:dd:eb:f8:b0:7c:59:95:be:5e:e7:09:e8:e1:91: b5:b5:0d:c6:02:07:af:5e:68:34:57:87:12:f7:b0: cd:27:85:9a:5f:c5:29:da:28:79:5a:cd:a9:bb:e7: 82:db:01:b4:11:ef:44:d8:db:9d:c6:de:60:7c:11: 98:9b:7a:84:aa:ff:23:63:20:35:75:40:ca:91:2d: f0:a3:fb:cc:df:2b:3c:99:b9:59:f7:f9:b5:e2:7b: bd:3c:6e:56:f3:76:c2:a6:3b:ba:27:d3:fd:88:af: 53:1a:0b:64:63:ff:d4:7a:ca:d3:f6:25:a0:ad:80: 7b:1c:47:46:f3:33:8c:7f:19:bb:c0:3d:01:be:23: 2f:ca:37:f4:58:23:c7:ea:d9:f6:d9:15:c2:34:8d: 91:09:d7:72:2e:e7:2c:69:de:29:ab:4c:e8:01:f4: 56:ff:47:60:c6:be:99:1d:25:af:46:9f:83:fa:9f: 66:dc:98:e9:c2:d0:37:ca:5f:5e:23:31:36:c5:d5: 86:79:67:34:f3:80:8d:46:b2:ce:25:52:e9:c4:d5: 46:83:00:3d:35:2a:ca:be:e9:0d:fd:11:f9:4e:c3: 0b:cb:97:81:4a:7e:8d:62:3f:72:09:7b:ae:46:64: 18:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:53:02:7C:6E:AC:A6:0C:D2:E2:9B:16:7C:5E:38:AE:0A:93:4E:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3406c36c-3284-329c-b8fa-f414b6875662.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:8d:98:e6:81:8b:4c:46:49:ac:88:f1:56:c3:53:c7:f8:7f: ed:2d:5b:75:00:bd:02:aa:a1:5f:74:67:12:e9:e4:ad:a6:ad: 6c:fd:6c:e1:fb:89:50:65:5b:bf:64:ad:f3:49:d7:12:c4:37: 5f:33:2e:2c:18:68:25:c6:6e:02:6b:00:78:7e:7a:27:e6:9b: 4a:fc:cf:fc:4f:70:a2:86:c0:e8:3a:53:fa:b4:0b:64:05:e2: b0:86:d1:1b:5c:9a:5d:e1:90:3c:77:fd:c3:56:13:bb:1d:3f: a9:b8:f3:c3:27:48:33:af:d5:f5:43:39:5d:e7:95:13:f3:c1: 56:99:3c:9d:69:19:ea:44:b8:7e:0a:c9:06:f1:e9:a8:8a:8e: 01:88:47:65:07:1e:8f:93:84:e6:8f:8f:9b:df:de:53:9c:c8: c8:6d:7a:1f:4c:bf:f5:1a:a3:bb:e9:3c:23:0e:f0:7d:91:cd: 70:08:18:f8:c5:c8:0c:9a:d8:a3:30:a3:dd:c7:6b:0e:2e:01: ae:b3:02:88:13:0d:7a:a8:75:59:5e:b5:f2:21:15:f9:16:fb: 4b:65:96:9c:c6:d4:29:77:79:bc:01:60:03:05:3d:dc:5f:3b: d4:0d:29:ab:f0:df:1c:06:cc:59:be:31:79:a7:a6:04:63:dc: a1:78:a1:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVqTqZA8qBaJHBxgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk OWUyNmUzY2ItOGFlYi00YzY1LWIwN2YtMTVjNWI0ZjA2MTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhytYwCWzWaxkXNWkwWEu3ev4sHxZlb5e5wno 4ZG1tQ3GAgevXmg0V4cS97DNJ4WaX8Up2ih5Ws2pu+eC2wG0Ee9E2Nudxt5gfBGY m3qEqv8jYyA1dUDKkS3wo/vM3ys8mblZ9/m14nu9PG5W83bCpju6J9P9iK9TGgtk Y//UesrT9iWgrYB7HEdG8zOMfxm7wD0BviMvyjf0WCPH6tn22RXCNI2RCddyLucs ad4pq0zoAfRW/0dgxr6ZHSWvRp+D+p9m3JjpwtA3yl9eIzE2xdWGeWc084CNRrLO JVLpxNVGgwA9NSrKvukN/RH5TsMLy5eBSn6NYj9yCXuuRmQYRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBTAnxurKYM0uKbFnxeOK4Kk05LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzQwNmMzNmMtMzI4NC0z MjljLWI4ZmEtZjQxNGI2ODc1NjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCNmOaBi0xGSayI8VbDU8f4f+0tW3UAvQKqoV90ZxLp5K2mrWz9bOH7 iVBlW79krfNJ1xLEN18zLiwYaCXGbgJrAHh+eifmm0r8z/xPcKKGwOg6U/q0C2QF 4rCG0Rtcml3hkDx3/cNWE7sdP6m488MnSDOv1fVDOV3nlRPzwVaZPJ1pGepEuH4K yQbx6aiKjgGIR2UHHo+ThOaPj5vf3lOcyMhteh9Mv/Uao7vpPCMO8H2RzXAIGPjF yAya2KMwo93Haw4uAa6zAogTDXqodVletfIhFfkW+0tllpzG1Cl3ebwBYAMFPdxf O9QNKavw3xwGzFm+MXmnpgRj3KF4oXc= -----END CERTIFICATE-----Generated at Sat Aug 23 13:15:10 2025 by rpki-client