$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7442de68-9be2-37ef-8966-84a9221808e1.roa File: 7442de68-9be2-37ef-8966-84a9221808e1.roa (raw, json) Hash identifier: FyM7WcEzhAlmOssQfuyVhCmquHI8tJXMdZcloVVH9xo= Subject key identifier: AA:D8:35:3E:34:46:58:3C:17:E2:E9:5C:63:C4:E4:EA:B8:DE:53:66 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AF256A5316D2A64B37516FDC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7442de68-9be2-37ef-8966-84a9221808e1.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 3855 IP address blocks: 199.172.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:a5:31:6d:2a:64:b3:75:16:fd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=7027b3a6-5e57-4edc-87d3-5d7068473f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a2:30:a5:0c:78:5f:de:4c:e7:cf:65:8c:da: 00:42:f8:e7:11:a2:c3:0f:16:ca:77:91:12:b1:78: c2:77:94:a4:97:46:c7:79:16:af:5a:e3:cb:dd:3e: ea:52:b2:11:f1:28:3a:cb:b0:d7:84:8b:56:d5:fc: e0:d3:f0:1e:f3:9a:d8:e8:67:8b:16:cf:79:29:4b: 3d:aa:ec:cf:f4:aa:4f:a1:22:78:b8:f0:97:3c:cb: 4c:26:f8:85:d3:5c:2e:11:e4:6a:6d:d3:e1:9d:06: c4:85:85:29:63:de:bb:53:ba:cd:62:a8:4a:21:1c: bd:34:46:2b:74:fd:8f:44:5a:0c:21:19:71:1a:de: ae:f3:1e:3a:90:91:d3:12:e5:e7:cc:23:02:7d:28: 9b:da:e3:c7:d6:90:fa:75:e5:9f:f0:5a:ff:77:33: f4:5b:db:17:4d:4e:0f:87:ab:28:ac:b1:46:2d:b5: da:66:11:ef:44:63:fb:67:9c:2f:f8:1e:a6:0b:ee: c1:49:38:db:5b:4e:a2:a6:7f:64:c1:3c:3b:a1:e2: ed:ff:f8:92:4b:a5:0f:3e:f1:2d:f8:5b:3d:50:d1: d4:50:34:7f:ea:99:08:1a:32:d8:5c:5d:86:d0:f9: 88:c8:16:f2:4e:ae:0e:fa:c6:b2:b8:bb:42:f5:a1: 35:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D8:35:3E:34:46:58:3C:17:E2:E9:5C:63:C4:E4:EA:B8:DE:53:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7442de68-9be2-37ef-8966-84a9221808e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:39:c4:5d:96:be:2d:fe:8d:04:73:35:55:9f:a2:49:d1:28: ad:14:fe:17:d6:d4:01:39:99:fe:1c:3e:26:84:b0:70:66:6a: 22:48:e1:70:bd:05:85:83:03:57:8e:fb:e7:ab:6d:9d:21:e3: db:18:06:db:02:aa:30:d6:01:14:e1:f9:94:3f:3d:5f:b4:72: 0f:f1:cd:1e:e9:65:ba:c2:1d:49:00:8c:37:37:10:a3:5d:4b: d2:37:5b:5a:41:21:ad:43:55:98:7a:aa:a1:fa:8e:6a:da:85: eb:76:0d:cd:bb:b5:55:c4:a7:e0:c0:4c:c0:0d:bb:d1:bf:bf: 73:5e:b9:c2:1e:05:ca:f6:21:c8:7c:8f:92:c3:12:f3:25:3f: 61:ae:6e:a8:d9:22:58:e8:76:d6:02:98:1a:bb:68:d0:c8:9b: 40:f8:47:e3:bd:38:51:10:eb:ca:97:21:c2:e2:49:20:a8:67: 8d:ab:b3:e3:9c:86:b8:c0:4c:e9:41:22:8f:24:81:29:a8:87: cb:20:5a:a6:05:b8:9b:f1:8c:72:4a:04:75:67:2e:7d:cd:7e: 47:f9:07:0b:ac:b2:63:87:4d:c5:e8:fc:c4:2a:e7:c1:b2:31: 03:66:79:91:90:4d:a3:d2:2a:cd:52:22:60:78:a3:05:47:e2: d8:d2:bc:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVqUxbSpks3UW/cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk NzAyN2IzYTYtNWU1Ny00ZWRjLTg3ZDMtNWQ3MDY4NDczZjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6IwpQx4X95M589ljNoAQvjnEaLDDxbKd5ES sXjCd5Skl0bHeRavWuPL3T7qUrIR8Sg6y7DXhItW1fzg0/Ae85rY6GeLFs95KUs9 quzP9KpPoSJ4uPCXPMtMJviF01wuEeRqbdPhnQbEhYUpY967U7rNYqhKIRy9NEYr dP2PRFoMIRlxGt6u8x46kJHTEuXnzCMCfSib2uPH1pD6deWf8Fr/dzP0W9sXTU4P h6sorLFGLbXaZhHvRGP7Z5wv+B6mC+7BSTjbW06ipn9kwTw7oeLt//iSS6UPPvEt +Fs9UNHUUDR/6pkIGjLYXF2G0PmIyBbyTq4O+sayuLtC9aE15QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrYNT40Rlg8F+LpXGPE5Oq43lNmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzQ0MmRlNjgtOWJlMi0z N2VmLTg5NjYtODRhOTIyMTgwOGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAII5xF2Wvi3+jQRzNVWfoknRKK0U/hfW1AE5mf4cPiaEsHBmaiJI4XC9 BYWDA1eO++erbZ0h49sYBtsCqjDWARTh+ZQ/PV+0cg/xzR7pZbrCHUkAjDc3EKNd S9I3W1pBIa1DVZh6qqH6jmrahet2Dc27tVXEp+DATMANu9G/v3NeucIeBcr2Ich8 j5LDEvMlP2GubqjZIljodtYCmBq7aNDIm0D4R+O9OFEQ68qXIcLiSSCoZ42rs+Oc hrjATOlBIo8kgSmoh8sgWqYFuJvxjHJKBHVnLn3Nfkf5BwussmOHTcXo/MQq58Gy MQNmeZGQTaPSKs1SImB4owVH4tjSvJE= -----END CERTIFICATE-----Generated at Sun Aug 24 00:01:51 2025 by rpki-client