$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8fb941ab-3a3d-3365-828a-a3e1a0209b40.roa File: 8fb941ab-3a3d-3365-828a-a3e1a0209b40.roa (raw, json) Hash identifier: 7FJThbdNynHuFHOa7+vEVA0EnvdN4Xx4binZgtFiTAE= Subject key identifier: 9E:8B:62:ED:64:AD:17:BC:EB:9F:BB:3C:04:8F:ED:2E:E8:7D:B0:0F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849F1800A44303A206EA43F0518 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8fb941ab-3a3d-3365-828a-a3e1a0209b40.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 701 IP address blocks: 199.202.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:80:0a:44:30:3a:20:6e:a4:3f:05:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=52a042f1-063f-4251-9d50-fb9c3d344dc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3e:0a:82:5a:ec:0c:3b:e3:49:58:95:2e:82: cc:64:61:d5:36:78:f8:20:4b:f9:4f:dc:06:60:f5: a6:07:bd:91:a3:ac:3f:e0:06:44:54:0c:03:3a:f4: 4d:72:fb:df:ed:e6:63:4b:ce:24:6b:cd:ff:7f:54: f5:cc:0b:29:22:fb:dc:e3:cd:0c:80:c1:dd:c4:68: 4f:f5:e6:d4:ee:36:88:da:ab:8f:ce:0c:cd:02:7a: 68:f6:f2:65:7f:bc:4b:8f:3a:3d:00:e8:c2:40:22: c0:b7:c4:01:d8:f0:2b:81:66:f8:03:5e:21:bb:24: 8f:78:9e:48:03:8e:0d:10:e8:55:ce:12:a6:06:ce: 86:e8:0a:ff:4a:47:59:32:8c:c9:e2:56:9d:5b:d0: 9d:ea:d1:26:41:2d:a8:e0:e1:29:56:bb:e1:24:6f: 97:a0:1f:f4:33:24:74:1b:81:3c:d2:a0:44:73:86: be:06:63:e3:61:e5:47:24:ef:a4:04:58:46:ed:fd: 1c:60:e1:bf:88:75:8c:28:a8:53:6e:4f:9f:5d:63: d6:ac:dc:06:ad:06:82:a1:5b:04:c2:2c:ee:44:81: c3:77:5a:12:0e:54:a6:06:e8:2c:70:04:17:77:20: 2d:fe:2b:70:a1:90:e7:8f:30:62:b1:dd:84:f3:63: 90:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:8B:62:ED:64:AD:17:BC:EB:9F:BB:3C:04:8F:ED:2E:E8:7D:B0:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8fb941ab-3a3d-3365-828a-a3e1a0209b40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.202.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:e2:9f:45:46:b6:f2:cb:92:ac:35:4d:97:e1:b7:5c:27:ef: 08:62:c0:dc:22:a1:f1:91:da:86:1b:92:65:2b:f6:39:e6:14: 09:aa:59:ce:04:58:9d:72:35:ff:f0:0a:21:c9:b9:a6:6a:f3: f3:6c:df:42:53:39:cf:50:db:d5:f5:b8:b0:55:17:ad:ea:33: e0:bf:9c:a7:14:14:7d:4d:8c:14:1d:a2:ac:b1:64:86:fd:d4: 5c:14:ef:24:30:cc:cd:09:1a:7a:86:ae:17:62:96:22:8c:02: 39:38:ac:62:df:23:3f:87:21:e9:20:cf:49:1e:a5:f5:cd:16: 5b:7e:a6:ce:99:ee:55:61:52:bf:8a:7b:b2:69:68:d3:99:db: 4e:bb:f5:9c:44:ac:47:c7:fd:2e:d7:df:31:66:86:71:94:77: 7d:24:d3:f1:db:4e:eb:b4:55:ee:f0:55:4b:91:c5:a3:0d:11: 55:9b:3d:5d:28:24:29:17:ed:f6:81:43:8d:8c:4f:6f:b8:d5: db:84:4e:79:f3:b1:9a:00:e7:0a:f0:b7:ae:68:15:56:fa:51: cc:e9:12:10:43:99:81:cb:d0:d0:52:21:26:18:bb:98:aa:bf: 9d:6f:31:9a:e6:86:aa:d8:69:2a:50:35:94:ab:39:c3:62:c9: b2:cd:f0:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxgApEMDogbqQ/BRgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk NTJhMDQyZjEtMDYzZi00MjUxLTlkNTAtZmI5YzNkMzQ0ZGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhz4KglrsDDvjSViVLoLMZGHVNnj4IEv5T9wG YPWmB72Ro6w/4AZEVAwDOvRNcvvf7eZjS84ka83/f1T1zAspIvvc480MgMHdxGhP 9ebU7jaI2quPzgzNAnpo9vJlf7xLjzo9AOjCQCLAt8QB2PArgWb4A14huySPeJ5I A44NEOhVzhKmBs6G6Ar/SkdZMozJ4ladW9Cd6tEmQS2o4OEpVrvhJG+XoB/0MyR0 G4E80qBEc4a+BmPjYeVHJO+kBFhG7f0cYOG/iHWMKKhTbk+fXWPWrNwGrQaCoVsE wizuRIHDd1oSDlSmBugscAQXdyAt/itwoZDnjzBisd2E82OQaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6LYu1krRe865+7PASP7S7ofbAPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGZiOTQxYWItM2EzZC0z MzY1LTgyOGEtYTNlMWEwMjA5YjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx8p4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILin0VGtvLLkqw1TZfht1wn7whiwNwiofGR2oYbkmUr9jnmFAmqWc4E WJ1yNf/wCiHJuaZq8/Ns30JTOc9Q29X1uLBVF63qM+C/nKcUFH1NjBQdoqyxZIb9 1FwU7yQwzM0JGnqGrhdiliKMAjk4rGLfIz+HIekgz0kepfXNFlt+ps6Z7lVhUr+K e7JpaNOZ20679ZxErEfH/S7X3zFmhnGUd30k0/HbTuu0Ve7wVUuRxaMNEVWbPV0o JCkX7faBQ42MT2+41duETnnzsZoA5wrwt65oFVb6UczpEhBDmYHL0NBSISYYu5iq v51vMZrmhqrYaSpQNZSrOcNiybLN8OQ= -----END CERTIFICATE-----Generated at Mon Jun 30 23:47:08 2025 by rpki-client