$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d625d077-e359-3776-8ac5-1239a89451ce.roa File: d625d077-e359-3776-8ac5-1239a89451ce.roa (raw, json) Hash identifier: JWfYo344sFhSH+rAOB9VfIWnt/paeZ+fZ8Q9G4YLOMg= Subject key identifier: 89:A3:EA:87:81:73:11:F1:6C:96:1D:44:3D:7C:F6:67:90:CD:88:C2 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AF256A5786EE23C69251C9280 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d625d077-e359-3776-8ac5-1239a89451ce.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 3855 IP address blocks: 199.172.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:a5:78:6e:e2:3c:69:25:1c:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=dc3e0e98-846d-4d76-8e24-b623fd4983ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:26:6c:b5:09:ab:e9:2a:21:fb:44:ca:eb:24: 49:36:38:d6:21:4c:6a:4c:16:f8:be:51:4e:92:94: a5:41:7b:fd:05:61:ba:19:8c:99:3c:6c:7d:6b:61: 8f:d3:e0:be:33:3e:a5:06:21:4e:13:fd:78:d9:16: 4a:99:c2:35:45:c6:04:ba:04:a7:a3:9e:d9:44:c2: e7:be:ab:6e:08:fe:9c:d7:3f:38:b7:b0:f6:64:73: b0:c5:31:b6:0f:b6:d1:20:3a:a2:8c:25:c4:7b:d0: 7c:ff:01:25:0e:e2:a8:49:b5:84:3b:62:54:f9:92: 4e:65:e4:b0:c1:50:9f:51:6d:5b:dc:32:24:33:6f: 43:66:42:af:9d:4f:0f:4c:11:51:5f:59:d3:7e:04: 81:a6:8a:5f:e2:5f:57:ca:7c:66:63:c8:87:62:79: 7e:7e:06:e5:02:45:c6:f6:7b:10:1c:1b:de:63:09: d1:32:5a:c0:10:f8:5f:72:79:1d:8e:11:67:4d:c0: a4:3b:9c:14:6f:60:80:03:71:01:81:e8:cd:68:95: 8f:42:86:7b:ac:90:5d:52:05:6c:a3:ac:42:4b:ab: 2d:6f:58:4c:94:9a:09:fb:44:ed:7e:42:9f:0a:38: 57:15:7c:8d:01:60:df:89:94:64:61:69:86:07:33: 2d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A3:EA:87:81:73:11:F1:6C:96:1D:44:3D:7C:F6:67:90:CD:88:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d625d077-e359-3776-8ac5-1239a89451ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:52:d5:6b:ae:c6:ab:45:b6:a3:6d:59:d4:c3:9c:c1:e9:00: ef:ee:95:c7:df:97:d1:01:98:1f:93:68:c3:4f:f5:3b:34:fe: 18:92:9d:c7:d5:0e:db:6e:66:33:ba:ed:8d:bd:ba:0c:92:d6: 23:6e:5c:6f:ff:0b:dd:b2:16:e6:5f:52:c7:f3:27:74:de:66: 4a:f7:8f:6e:bb:70:28:92:e0:6b:53:30:4c:38:31:f9:20:d3: de:4c:24:d9:48:f3:85:76:be:89:90:08:b8:bd:c0:7e:56:49: 61:0b:0a:ba:49:94:9c:eb:d6:50:6b:0b:d3:8a:58:f5:a8:2e: 8c:83:9f:52:64:9c:55:74:0a:b6:74:60:fb:02:f1:20:fa:7d: 2e:81:04:fa:fc:44:0a:8c:2e:92:55:f0:ac:66:08:b5:9e:08: d4:d6:86:0f:5a:30:87:e6:2a:1a:15:79:cb:fc:d2:4a:96:7c: 8c:e3:fc:45:16:1c:a5:57:aa:19:8b:f4:aa:2a:ae:04:8c:49: 50:c1:6a:36:ee:99:54:af:a8:e3:78:4a:1a:62:5f:2e:c1:c1: e3:fe:83:6e:bd:d7:2a:88:45:5b:77:79:d0:4d:f9:8c:05:30: 64:cb:a0:0f:63:ab:42:63:de:4c:0e:97:fa:14:3f:82:0b:6f: f4:b7:3d:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVqV4buI8aSUckoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk ZGMzZTBlOTgtODQ2ZC00ZDc2LThlMjQtYjYyM2ZkNDk4M2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyZstQmr6Soh+0TK6yRJNjjWIUxqTBb4vlFO kpSlQXv9BWG6GYyZPGx9a2GP0+C+Mz6lBiFOE/142RZKmcI1RcYEugSno57ZRMLn vqtuCP6c1z84t7D2ZHOwxTG2D7bRIDqijCXEe9B8/wElDuKoSbWEO2JU+ZJOZeSw wVCfUW1b3DIkM29DZkKvnU8PTBFRX1nTfgSBpopf4l9XynxmY8iHYnl+fgblAkXG 9nsQHBveYwnRMlrAEPhfcnkdjhFnTcCkO5wUb2CAA3EBgejNaJWPQoZ7rJBdUgVs o6xCS6stb1hMlJoJ+0TtfkKfCjhXFXyNAWDfiZRkYWmGBzMt5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImj6oeBcxHxbJYdRD189meQzYjCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDYyNWQwNzctZTM1OS0z Nzc2LThhYzUtMTIzOWE4OTQ1MWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1S1WuuxqtFtqNtWdTDnMHpAO/ulcffl9EBmB+TaMNP9Ts0/hiSncfV DttuZjO67Y29ugyS1iNuXG//C92yFuZfUsfzJ3TeZkr3j267cCiS4GtTMEw4Mfkg 095MJNlI84V2vomQCLi9wH5WSWELCrpJlJzr1lBrC9OKWPWoLoyDn1JknFV0CrZ0 YPsC8SD6fS6BBPr8RAqMLpJV8KxmCLWeCNTWhg9aMIfmKhoVecv80kqWfIzj/EUW HKVXqhmL9KoqrgSMSVDBajbumVSvqON4ShpiXy7BweP+g2691yqIRVt3edBN+YwF MGTLoA9jq0Jj3kwOl/oUP4ILb/S3PQI= -----END CERTIFICATE-----Generated at Sat Aug 23 15:19:40 2025 by rpki-client