$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6222f88e-8b12-38ef-9e6a-6217e3f3bdc7.roa File: 6222f88e-8b12-38ef-9e6a-6217e3f3bdc7.roa (raw, json) Hash identifier: Bwj8d25KdCn+kAOurLzUnW3dyic1BPfy1W3xg4vSWWY= Subject key identifier: 17:D6:F8:71:E6:09:47:AD:F6:F6:E8:72:BE:28:0E:81:98:8E:C9:89 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AF256A6FDAEDFFD8834E5CD00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6222f88e-8b12-38ef-9e6a-6217e3f3bdc7.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 3855 IP address blocks: 199.172.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:a6:fd:ae:df:fd:88:34:e5:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=e3dd68b3-4c02-4334-9b32-ba19b3fdd501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:33:85:58:98:de:41:21:69:08:ac:2c:2d:49: 3d:5d:89:87:01:c0:dc:03:68:e0:1b:4a:b3:db:1c: fd:cd:57:35:b8:c3:cc:34:a3:27:f4:b6:83:85:4a: 24:ec:a3:63:02:56:73:39:78:27:32:ac:7a:a3:86: 75:92:b5:3e:d0:9e:c1:12:5f:0c:6f:ae:64:49:2a: ef:e0:cf:02:b2:ab:f3:61:91:1b:96:3d:46:a9:06: 88:89:32:a6:56:4f:99:c0:8e:0a:ca:2c:3e:d2:41: aa:1e:23:34:c8:3e:cd:d0:06:3c:41:05:7c:ad:f1: 28:ed:a9:d9:50:31:f8:86:c6:69:12:4a:8e:25:67: 9a:c7:8a:33:c9:69:07:28:73:df:7c:1a:84:10:ce: 3d:f0:18:00:10:79:1d:36:11:3b:20:5c:43:fe:d9: 91:a5:cd:ab:ca:f0:bf:cc:0c:f5:2e:5f:74:42:24: fc:06:d9:d8:4c:e6:c0:c2:76:68:c3:de:fc:6a:cb: 54:59:6f:a6:ed:1b:09:63:f5:af:6a:3c:d0:53:2c: 61:23:85:f6:9d:27:8b:b2:74:38:0b:82:dc:01:57: c8:7b:69:51:c3:97:14:ea:ff:7e:9f:5a:7b:71:a7: 07:33:ae:cc:91:2d:fc:fc:53:c8:1e:b0:18:bd:56: 38:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D6:F8:71:E6:09:47:AD:F6:F6:E8:72:BE:28:0E:81:98:8E:C9:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6222f88e-8b12-38ef-9e6a-6217e3f3bdc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:b3:d4:4a:85:2a:86:48:fa:47:a1:47:86:85:1a:b9:c8:e2: 84:a1:54:65:41:c8:4c:df:ab:29:b4:62:72:d2:6b:65:e9:a5: 72:7c:1a:b6:3d:09:29:26:04:7c:02:7f:b6:de:d4:e6:4b:f6: 3e:14:57:d0:d6:1c:f9:34:82:19:2a:40:3b:a0:83:09:d3:ee: 6c:2d:8e:90:70:95:6c:c1:8d:c9:18:e0:14:aa:73:37:85:f7: b4:4d:2b:d9:71:70:ad:ab:09:79:6f:0a:b8:d2:7d:9b:90:d9: 31:11:87:92:70:54:f8:ef:a7:de:ab:56:e9:d3:0c:78:c4:19: 4d:42:bc:be:4d:3d:c8:b5:fe:dc:ea:fa:44:25:64:46:24:49: 45:08:45:da:00:ba:18:e7:52:9a:31:bc:65:a0:35:21:c2:26: d0:fa:c4:14:3c:76:0e:b3:cf:3b:a6:56:ff:8e:52:5d:af:ff: 6e:62:9e:b8:e3:f4:a0:04:70:a1:2b:70:25:29:50:3b:2d:37: 8d:73:a1:06:87:47:71:bb:24:f3:65:b2:ab:e2:ff:a6:b2:27: e0:00:43:d9:6f:7a:ae:06:6f:1f:65:27:8f:ff:bd:43:3c:2e: 15:68:e1:96:97:d4:0c:b6:f4:41:e6:16:e1:c2:7b:5a:f1:09: 76:e4:13:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVqb9rt/9iDTlzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk ZTNkZDY4YjMtNGMwMi00MzM0LTliMzItYmExOWIzZmRkNTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjOFWJjeQSFpCKwsLUk9XYmHAcDcA2jgG0qz 2xz9zVc1uMPMNKMn9LaDhUok7KNjAlZzOXgnMqx6o4Z1krU+0J7BEl8Mb65kSSrv 4M8CsqvzYZEblj1GqQaIiTKmVk+ZwI4Kyiw+0kGqHiM0yD7N0AY8QQV8rfEo7anZ UDH4hsZpEkqOJWeax4ozyWkHKHPffBqEEM498BgAEHkdNhE7IFxD/tmRpc2ryvC/ zAz1Ll90QiT8BtnYTObAwnZow978astUWW+m7RsJY/WvajzQUyxhI4X2nSeLsnQ4 C4LcAVfIe2lRw5cU6v9+n1p7cacHM67MkS38/FPIHrAYvVY4EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfW+HHmCUet9vbocr4oDoGYjsmJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjIyMmY4OGUtOGIxMi0z OGVmLTllNmEtNjIxN2UzZjNiZGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6z3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqz1EqFKoZI+kehR4aFGrnI4oShVGVByEzfqym0YnLSa2XppXJ8GrY9 CSkmBHwCf7be1OZL9j4UV9DWHPk0ghkqQDuggwnT7mwtjpBwlWzBjckY4BSqczeF 97RNK9lxcK2rCXlvCrjSfZuQ2TERh5JwVPjvp96rVunTDHjEGU1CvL5NPci1/tzq +kQlZEYkSUUIRdoAuhjnUpoxvGWgNSHCJtD6xBQ8dg6zzzumVv+OUl2v/25inrjj 9KAEcKErcCUpUDstN41zoQaHR3G7JPNlsqvi/6ayJ+AAQ9lveq4Gbx9lJ4//vUM8 LhVo4ZaX1Ay29EHmFuHCe1rxCXbkExw= -----END CERTIFICATE-----Generated at Sat Aug 23 16:45:59 2025 by rpki-client