$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf557a1b-b35f-3730-86da-add464e3d46c.roa File: cf557a1b-b35f-3730-86da-add464e3d46c.roa (raw, json) Hash identifier: HhPpgAjfmFZfaR3QkdJny4dYQZOWRedm4Z+BsFxdgN0= Subject key identifier: 4D:4D:05:0D:E5:83:CD:7B:CB:46:CF:6B:1F:8B:16:E2:2F:60:2B:BB Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A3B7B06FA7282EA3A53D59000 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf557a1b-b35f-3730-86da-add464e3d46c.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 14717 IP address blocks: 208.231.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7b:06:fa:72:82:ea:3a:53:d5:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=69b3788e-54a0-4907-8ba7-482f04beccdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f3:c5:79:22:7a:de:98:7a:d6:7a:f1:83:e3: c4:49:0f:78:fa:b2:2f:7e:80:24:f4:5c:2b:8e:a6: b3:b1:71:29:61:ea:1f:c8:1b:fd:b1:f0:a1:03:15: 89:fd:fc:82:c8:fa:f8:b0:3f:4e:8b:36:eb:24:fe: 99:fb:4c:18:0d:57:44:75:f0:5a:98:fa:18:2f:09: 9a:84:3c:35:39:d8:5b:ac:1a:54:8a:78:e9:47:df: 51:de:da:48:40:35:68:0e:b8:4f:d3:c5:dc:b8:d7: b1:78:19:50:ff:d0:b0:83:c5:97:2f:6e:96:bd:25: 92:91:8d:5f:9a:c5:cd:da:65:74:3a:f2:3b:93:58: a7:30:0f:b0:37:d2:48:ae:6d:17:9e:c4:ce:69:c3: 14:41:e6:b8:54:1a:35:40:d7:e9:fd:6b:c1:3d:53: 34:f6:c4:34:64:af:d7:8e:bc:b6:a0:57:0b:9a:d1: 31:49:a0:19:8e:93:69:72:33:41:11:7c:a2:f8:ae: 5b:47:df:66:ac:4e:52:b8:de:87:78:8c:b0:7a:6b: cd:8a:52:f7:57:54:40:6a:94:c6:cc:a7:74:dc:21: 52:ac:da:42:72:74:b4:b9:af:1c:d8:39:cd:6d:b9: dc:24:9c:87:61:cf:00:f3:5c:44:a5:c6:46:57:ea: 95:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:4D:05:0D:E5:83:CD:7B:CB:46:CF:6B:1F:8B:16:E2:2F:60:2B:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf557a1b-b35f-3730-86da-add464e3d46c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.231.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:99:77:11:68:fe:dd:25:bb:e5:24:4c:bc:1d:74:2e:25:89: d9:8b:30:f1:6c:89:35:1e:f0:b0:c3:7f:32:da:21:66:1f:81: a2:62:8a:d1:b8:06:dc:e9:c1:be:67:00:fb:62:fe:c0:e6:d3: d9:97:c4:e2:5b:1d:bf:87:62:5d:fd:ee:d6:8b:27:07:29:7d: 84:e6:61:2a:8b:c7:68:54:5d:04:e3:de:e9:29:97:21:1a:ed: 4e:78:14:b9:25:85:5b:6f:ee:fd:e5:3a:16:24:f0:df:52:61: 4d:58:7c:03:0b:9c:5e:df:88:e0:e1:27:e9:e7:95:04:79:c0: c8:a9:56:3e:83:c5:45:b8:fd:2f:d3:cc:11:32:18:5a:cd:4c: 4f:12:14:86:a7:8a:81:56:4e:e1:f5:f1:a3:ce:f4:16:35:f6: b6:82:b9:b3:b3:fc:49:d2:1c:51:8f:e3:3f:e2:80:b0:b3:31: 04:4c:a2:2e:25:e7:14:17:7a:f6:1e:1e:61:b6:df:9b:f6:bc: 69:ea:eb:2e:a3:d6:b6:fe:55:44:bc:6f:c2:f6:96:b4:68:59: ad:25:58:27:c1:b8:9b:44:07:82:53:43:9c:46:b9:47:4f:a8: ea:14:ed:a3:7c:f4:a3:96:ba:b5:43:65:0f:88:44:11:93:35: 6e:c7:81:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ewb6coLqOlPVkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk NjliMzc4OGUtNTRhMC00OTA3LThiYTctNDgyZjA0YmVjY2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfPFeSJ63ph61nrxg+PESQ94+rIvfoAk9Fwr jqazsXEpYeofyBv9sfChAxWJ/fyCyPr4sD9OizbrJP6Z+0wYDVdEdfBamPoYLwma hDw1OdhbrBpUinjpR99R3tpIQDVoDrhP08XcuNexeBlQ/9Cwg8WXL26WvSWSkY1f msXN2mV0OvI7k1inMA+wN9JIrm0XnsTOacMUQea4VBo1QNfp/WvBPVM09sQ0ZK/X jry2oFcLmtExSaAZjpNpcjNBEXyi+K5bR99mrE5SuN6HeIywemvNilL3V1RAapTG zKd03CFSrNpCcnS0ua8c2DnNbbncJJyHYc8A81xEpcZGV+qV1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1NBQ3lg817y0bPax+LFuIvYCu7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2Y1NTdhMWItYjM1Zi0z NzMwLTg2ZGEtYWRkNDY0ZTNkNDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0OfoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqZdxFo/t0lu+UkTLwddC4lidmLMPFsiTUe8LDDfzLaIWYfgaJiitG4 Btzpwb5nAPti/sDm09mXxOJbHb+HYl397taLJwcpfYTmYSqLx2hUXQTj3ukplyEa 7U54FLklhVtv7v3lOhYk8N9SYU1YfAMLnF7fiODhJ+nnlQR5wMipVj6DxUW4/S/T zBEyGFrNTE8SFIanioFWTuH18aPO9BY19raCubOz/EnSHFGP4z/igLCzMQRMoi4l 5xQXevYeHmG235v2vGnq6y6j1rb+VUS8b8L2lrRoWa0lWCfBuJtEB4JTQ5xGuUdP qOoU7aN89KOWurVDZQ+IRBGTNW7HgVg= -----END CERTIFICATE-----Generated at Mon Jun 30 09:47:50 2025 by rpki-client