$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9b4e0f9b-00b5-3a89-8add-b5cd1a30099e.roa File: 9b4e0f9b-00b5-3a89-8add-b5cd1a30099e.roa (raw, json) Hash identifier: 10WqOkr7OjYf24KAz1WpdD9PMESXvLIkLPIVYKmZ9wE= Subject key identifier: DF:EC:C4:F3:F6:DC:24:5F:BD:25:BA:5F:50:7E:56:0C:B4:13:8C:8C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD23BE2D9DB656C2E38564040 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9b4e0f9b-00b5-3a89-8add-b5cd1a30099e.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 701 IP address blocks: 199.45.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:e2:d9:db:65:6c:2e:38:56:40:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=22f3e623-8e2a-445f-b6ef-2a015b64ca98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:af:2c:60:f7:1c:3b:c8:2c:1d:c1:a5:04:df: ef:da:3e:d8:eb:62:b4:c9:c1:6b:2c:1d:ee:a7:fa: a3:18:d0:ec:ff:a5:69:e1:6d:54:26:23:fa:d7:9f: 38:2b:bb:6e:a0:83:11:18:fc:b4:6b:10:e2:b8:2e: c2:ef:21:90:f3:08:7d:59:17:4e:2e:11:62:f1:a8: a6:02:f6:09:4c:d0:c1:14:76:ef:b7:b2:94:09:6a: 12:2b:cd:eb:f4:68:75:c2:49:cf:f5:1b:72:37:f7: 62:fa:d7:21:a4:3e:66:2d:e9:89:8d:e2:0a:cd:9e: 17:69:7e:f9:a1:20:ce:6b:75:c7:e1:76:41:62:b5: b5:a7:64:0e:07:99:77:28:1b:42:32:71:35:78:16: 6b:82:18:34:6b:0f:1b:56:66:49:bd:eb:2c:cf:a6: b2:e1:f5:25:0b:09:b4:ba:4a:cf:22:c2:00:f8:f1: ea:b2:3a:8f:fc:ca:9e:c8:93:03:5f:5e:de:44:02: c7:0b:69:36:65:8b:1b:dd:6a:0f:7c:36:cd:00:64: e5:cb:3b:04:58:0f:09:3c:29:b7:6d:86:21:92:ce: 4d:1b:0f:e8:10:c9:e4:06:98:30:34:29:c4:4a:b6: 19:ce:d6:24:d7:85:72:b2:13:3e:74:30:eb:ed:e3: 56:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:EC:C4:F3:F6:DC:24:5F:BD:25:BA:5F:50:7E:56:0C:B4:13:8C:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9b4e0f9b-00b5-3a89-8add-b5cd1a30099e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.45.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:81:2b:be:78:7a:53:79:47:42:5e:c2:83:61:02:13:4e:73: df:2e:85:2f:16:f6:4b:d7:a1:19:cb:d5:c7:8a:c1:ce:e3:71: 60:db:ba:55:fd:cb:a4:b5:0f:17:d3:90:18:11:b0:b9:25:61: e8:25:46:fa:ff:6f:27:df:3e:53:1b:f1:2d:0b:53:ec:33:0c: 21:46:fb:3f:67:db:dd:79:82:9e:84:b5:46:07:e8:7c:26:52: 87:ce:5f:18:2d:92:68:d5:b8:05:0e:83:81:4e:45:cf:8f:f3: bf:09:56:6d:d1:ed:92:55:c3:aa:10:26:4a:48:86:e3:2d:a1: 9c:f0:47:15:32:d7:3c:59:56:a2:ee:f5:3f:f4:b1:7d:05:48: 48:29:2c:20:d9:d8:17:3c:ef:8c:e1:55:0b:0f:b7:2f:84:34: 1f:22:40:f6:25:86:e2:e2:58:87:41:0e:1c:1a:f7:8a:07:21: eb:be:47:31:0d:a5:a1:d7:f2:85:63:18:b7:68:49:49:6e:5f: 91:05:c4:ab:3a:94:ea:4b:59:6b:5e:ae:1b:ff:c9:16:b7:bc: 54:21:1e:a9:7a:51:cc:50:5d:1e:f6:b5:ff:ba:63:3d:e0:a1: 0d:40:f4:e8:fb:4a:3c:78:90:12:75:60:a6:12:9e:82:5d:5e: 85:ca:21:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO+LZ22VsLjhWQEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MjJmM2U2MjMtOGUyYS00NDVmLWI2ZWYtMmEwMTViNjRjYTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2a8sYPccO8gsHcGlBN/v2j7Y62K0ycFrLB3u p/qjGNDs/6Vp4W1UJiP61584K7tuoIMRGPy0axDiuC7C7yGQ8wh9WRdOLhFi8aim AvYJTNDBFHbvt7KUCWoSK83r9Gh1wknP9RtyN/di+tchpD5mLemJjeIKzZ4XaX75 oSDOa3XH4XZBYrW1p2QOB5l3KBtCMnE1eBZrghg0aw8bVmZJvessz6ay4fUlCwm0 ukrPIsIA+PHqsjqP/MqeyJMDX17eRALHC2k2ZYsb3WoPfDbNAGTlyzsEWA8JPCm3 bYYhks5NGw/oEMnkBpgwNCnESrYZztYk14VyshM+dDDr7eNWmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/sxPP23CRfvSW6X1B+Vgy0E4yMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOWI0ZTBmOWItMDBiNS0z YTg5LThhZGQtYjVjZDFhMzAwOTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGxy1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKmBK754elN5R0JewoNhAhNOc98uhS8W9kvXoRnL1ceKwc7jcWDbulX9 y6S1DxfTkBgRsLklYeglRvr/byffPlMb8S0LU+wzDCFG+z9n2915gp6EtUYH6Hwm UofOXxgtkmjVuAUOg4FORc+P878JVm3R7ZJVw6oQJkpIhuMtoZzwRxUy1zxZVqLu 9T/0sX0FSEgpLCDZ2Bc874zhVQsPty+ENB8iQPYlhuLiWIdBDhwa94oHIeu+RzEN paHX8oVjGLdoSUluX5EFxKs6lOpLWWterhv/yRa3vFQhHql6UcxQXR72tf+6Yz3g oQ1A9Oj7Sjx4kBJ1YKYSnoJdXoXKIQE= -----END CERTIFICATE-----Generated at Sat Aug 23 16:00:42 2025 by rpki-client