$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d07a051-76a7-37e3-b818-0a725c5f03cb.roa File: 4d07a051-76a7-37e3-b818-0a725c5f03cb.roa (raw, json) Hash identifier: zINESCqkwWsGdGcl/MKTNAOt/Qsu6DCortnVGF1NyZ0= Subject key identifier: 78:A8:22:D0:0F:11:CD:E2:D8:1C:CF:37:34:5F:60:38:E1:7A:5F:DF Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AF256A4C7BB3E985E63A83000 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d07a051-76a7-37e3-b818-0a725c5f03cb.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 3855 IP address blocks: 199.172.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:a4:c7:bb:3e:98:5e:63:a8:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=42b0a7aa-651e-4b16-86ed-072c293e609c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:dc:fc:6c:81:3e:04:15:83:2e:bd:89:07:6d: 37:fe:43:11:37:6c:67:d5:04:e0:04:d9:40:95:7e: 67:26:ca:a7:b2:44:22:7b:37:ed:88:61:05:34:3c: f8:11:75:e4:29:21:c1:cd:3b:db:d1:ff:9d:45:64: 95:c5:3d:89:6a:2e:41:78:aa:fd:62:06:2a:14:d2: f4:f6:fb:0e:fe:92:87:87:72:96:44:4f:96:a2:f0: ab:f0:22:8d:dc:ed:d1:fa:ab:af:98:83:71:4e:ae: 5e:90:9f:f1:e7:40:88:db:8b:57:98:89:c8:24:e0: 5c:66:7e:a0:e0:56:bc:ff:bb:f8:75:a0:da:ed:7a: 35:70:16:b2:d8:8c:16:68:10:b3:54:79:b9:a3:d8: f2:7e:12:a0:4a:c4:d3:e6:c2:56:5e:2d:58:8b:85: 76:0d:f7:e3:09:a9:14:c4:25:df:82:fc:9a:01:fb: b5:97:a5:5e:e5:ad:c9:1b:cf:b4:0e:73:b0:a1:02: 28:63:5f:23:c4:aa:a2:b3:e0:aa:fd:1b:67:17:e9: a0:94:84:7f:62:40:be:95:ee:f3:c1:ce:27:a2:8e: 5d:14:15:64:10:b0:b0:c7:47:47:e1:05:2b:59:41: 3d:4f:11:f7:73:95:56:bc:6a:8f:75:c4:2e:bd:1f: 45:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A8:22:D0:0F:11:CD:E2:D8:1C:CF:37:34:5F:60:38:E1:7A:5F:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d07a051-76a7-37e3-b818-0a725c5f03cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:d3:ac:c7:1c:b6:ed:63:ee:96:a9:f0:0b:d1:56:5a:bf:4d: 38:43:cf:32:1e:32:fe:ef:17:a4:6c:77:a3:c4:a7:0e:30:29: e7:d0:93:f9:01:67:c0:18:d5:25:bf:18:10:c9:ee:fb:81:64: 01:69:e5:8e:67:9b:c2:98:7e:1f:80:88:a6:2d:85:d5:60:a0: cd:1b:a1:cd:78:2b:2f:31:06:3b:68:32:3e:e3:28:fa:5a:da: c5:52:c9:e0:67:37:ad:1c:83:bc:7f:85:38:f5:5c:32:17:6a: 3c:bc:4c:0c:6e:1e:a0:b6:3d:38:fc:a3:75:66:c5:3d:e4:0a: c0:fa:28:cd:ab:aa:98:92:48:50:83:33:38:b0:1d:4b:63:e0: 53:86:7b:35:2a:2d:8e:91:0e:d6:38:2b:8d:17:76:a7:aa:f4: a4:30:e5:01:f2:52:98:1d:8f:a8:cf:2a:88:34:62:ea:29:c9: e0:4d:e7:06:6c:c7:af:6f:1b:7e:b2:db:9b:94:6e:e3:f6:c4: a0:23:f5:a5:c7:a6:39:e4:27:a5:15:a2:7c:7a:d9:7f:65:8b: ce:2e:72:82:0d:52:81:4b:f1:08:74:8e:d7:57:f5:81:94:cd: 33:01:b2:d4:b9:00:5d:dc:4d:f9:a4:4d:d4:b5:2a:33:ed:31: cf:0c:8b:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVqTHuz6YXmOoMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk NDJiMGE3YWEtNjUxZS00YjE2LTg2ZWQtMDcyYzI5M2U2MDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9z8bIE+BBWDLr2JB203/kMRN2xn1QTgBNlA lX5nJsqnskQiezftiGEFNDz4EXXkKSHBzTvb0f+dRWSVxT2Jai5BeKr9YgYqFNL0 9vsO/pKHh3KWRE+WovCr8CKN3O3R+quvmINxTq5ekJ/x50CI24tXmInIJOBcZn6g 4Fa8/7v4daDa7Xo1cBay2IwWaBCzVHm5o9jyfhKgSsTT5sJWXi1Yi4V2DffjCakU xCXfgvyaAfu1l6Ve5a3JG8+0DnOwoQIoY18jxKqis+Cq/RtnF+mglIR/YkC+le7z wc4noo5dFBVkELCwx0dH4QUrWUE9TxH3c5VWvGqPdcQuvR9F+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHioItAPEc3i2BzPNzRfYDjhel/fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGQwN2EwNTEtNzZhNy0z N2UzLWI4MTgtMGE3MjVjNWYwM2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvTrMcctu1j7pap8AvRVlq/TThDzzIeMv7vF6Rsd6PEpw4wKefQk/kB Z8AY1SW/GBDJ7vuBZAFp5Y5nm8KYfh+AiKYthdVgoM0boc14Ky8xBjtoMj7jKPpa 2sVSyeBnN60cg7x/hTj1XDIXajy8TAxuHqC2PTj8o3VmxT3kCsD6KM2rqpiSSFCD MziwHUtj4FOGezUqLY6RDtY4K40Xdqeq9KQw5QHyUpgdj6jPKog0YuopyeBN5wZs x69vG36y25uUbuP2xKAj9aXHpjnkJ6UVonx62X9li84ucoINUoFL8Qh0jtdX9YGU zTMBstS5AF3cTfmkTdS1KjPtMc8MizM= -----END CERTIFICATE-----Generated at Mon Oct 20 20:22:03 2025 by rpki-client