$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3794f2da-3147-3e69-9bcf-df9b5790ae5b.roa File: 3794f2da-3147-3e69-9bcf-df9b5790ae5b.roa (raw, json) Hash identifier: I4wYqVDPXSVzeGaiuMkmSNskmfgV8iMMCZOnXGIVVPY= Subject key identifier: A1:6E:32:65:3F:B0:51:0F:46:ED:B7:50:50:9B:6A:2A:30:08:52:A6 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A126D475973BDEC1A2ED04FC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3794f2da-3147-3e69-9bcf-df9b5790ae5b.roa Signing time: Tue 03 Jun 2025 20:05:30 +0000 ROA not before: Tue 03 Jun 2025 20:05:30 +0000 ROA not after: Mon 01 Sep 2025 20:05:30 +0000 asID: 3855 IP address blocks: 199.172.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:12:6d:47:59:73:bd:ec:1a:2e:d0:4f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 3 20:05:30 2025 GMT Not After : Sep 1 20:05:30 2025 GMT Subject: CN=64df7624-dbc8-4119-8b36-c797c56ef7ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d4:3a:b2:1b:01:b0:e7:f1:9d:3d:d1:c4:56: 1f:b7:db:50:6a:01:56:7e:91:79:2a:09:ca:b3:49: 2e:09:7a:2e:c9:04:32:74:b0:74:47:a8:af:14:fc: 98:db:59:94:a4:91:8a:d6:f4:a4:67:0b:43:14:f4: 5c:6b:eb:df:10:0a:56:1d:31:cc:f9:95:0d:6c:0d: e7:38:d5:67:1e:fe:8d:6a:aa:41:68:03:ef:95:aa: c2:08:bf:4a:94:cb:e7:bd:f1:15:59:e1:58:c2:f7: b3:ba:38:82:56:31:ca:74:66:75:ea:da:2b:90:72: b1:8a:fd:e5:6c:e7:9b:d6:e2:8a:fb:a5:9f:ed:de: 22:e3:96:9a:d0:d1:2c:03:b7:85:b7:e6:32:60:21: c1:f2:bc:16:51:e4:71:19:55:09:05:b5:d3:53:ad: f1:44:b3:2a:d2:68:bf:e0:40:54:fa:cd:35:9d:e2: 46:2b:18:04:15:97:bf:ec:ad:d9:98:aa:cf:ee:8d: 86:5f:ee:6c:a2:ea:b0:3a:0e:bd:8a:dd:a5:e4:27: a6:b1:ed:c2:68:3c:27:5a:ae:eb:1f:47:c9:5b:a8: f0:50:14:2c:fc:03:82:30:b0:04:5f:c2:e8:91:06: 77:dd:2d:ce:40:ab:82:3c:dd:f7:c4:11:b2:65:7d: 2f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:6E:32:65:3F:B0:51:0F:46:ED:B7:50:50:9B:6A:2A:30:08:52:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3794f2da-3147-3e69-9bcf-df9b5790ae5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:f9:c7:b5:bc:c1:eb:93:e9:61:25:c6:a0:e3:c5:be:09:e9: a3:10:73:fc:a5:83:fe:c4:7b:51:34:93:5c:d9:92:e7:9f:69: c9:b6:34:86:e2:09:21:7f:2b:d9:97:79:63:60:23:74:f9:63: 04:f0:d4:60:1b:ea:35:b2:9a:32:3c:a5:d7:3e:51:fa:b7:e6: 9e:b8:5f:33:ce:f7:19:46:67:86:68:e1:a7:2c:6e:11:10:16: 97:84:43:18:90:49:94:e3:bd:cc:32:fa:96:4e:c2:c3:56:31: 58:91:77:a1:a9:38:1a:fa:09:1c:c8:e7:8a:40:c5:d0:0b:1f: 8c:2e:39:8d:71:c5:cc:6f:8b:18:60:89:a3:6d:02:21:fe:23: 08:0e:ad:72:1c:ef:e8:d9:04:eb:74:05:9d:9f:dd:36:0f:98: 3c:62:20:b7:57:ce:54:fd:ec:b9:b8:38:00:cb:e0:b0:ff:01: b2:0a:ae:1b:29:7b:16:5e:22:16:65:cb:56:1a:86:99:dc:47: 36:9a:f6:7b:9d:55:6e:ef:9e:ef:d4:8b:9e:90:e5:7c:a2:e1: 57:b0:e4:f5:35:f9:17:39:5d:8c:86:32:68:4f:d0:cb:70:e6: 44:da:83:07:a1:22:e7:d9:c1:c8:04:14:40:f2:e7:3a:83:05: 7e:af:82:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoSbUdZc73sGi7QT8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYwMzIwMDUzMFoXDTI1MDkwMTIwMDUzMFowLzEtMCsGA1UEAxMk NjRkZjc2MjQtZGJjOC00MTE5LThiMzYtYzc5N2M1NmVmN2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9Q6shsBsOfxnT3RxFYft9tQagFWfpF5KgnK s0kuCXouyQQydLB0R6ivFPyY21mUpJGK1vSkZwtDFPRca+vfEApWHTHM+ZUNbA3n ONVnHv6NaqpBaAPvlarCCL9KlMvnvfEVWeFYwvezujiCVjHKdGZ16torkHKxiv3l bOeb1uKK+6Wf7d4i45aa0NEsA7eFt+YyYCHB8rwWUeRxGVUJBbXTU63xRLMq0mi/ 4EBU+s01neJGKxgEFZe/7K3ZmKrP7o2GX+5souqwOg69it2l5Cemse3CaDwnWq7r H0fJW6jwUBQs/AOCMLAEX8LokQZ33S3OQKuCPN33xBGyZX0vOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFuMmU/sFEPRu23UFCbaiowCFKmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzc5NGYyZGEtMzE0Ny0z ZTY5LTliY2YtZGY5YjU3OTBhZTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIX5x7W8weuT6WElxqDjxb4J6aMQc/ylg/7Ee1E0k1zZkuefacm2NIbi CSF/K9mXeWNgI3T5YwTw1GAb6jWymjI8pdc+Ufq35p64XzPO9xlGZ4Zo4acsbhEQ FpeEQxiQSZTjvcwy+pZOwsNWMViRd6GpOBr6CRzI54pAxdALH4wuOY1xxcxvixhg iaNtAiH+IwgOrXIc7+jZBOt0BZ2f3TYPmDxiILdXzlT97Lm4OADL4LD/AbIKrhsp exZeIhZly1YahpncRzaa9nudVW7vnu/Ui56Q5Xyi4Vew5PU1+Rc5XYyGMmhP0Mtw 5kTagwehIufZwcgEFEDy5zqDBX6vgmo= -----END CERTIFICATE-----Generated at Mon Jun 30 16:01:02 2025 by rpki-client