$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db594c0b-1972-3064-abcb-2c71cbf21550.roa File: db594c0b-1972-3064-abcb-2c71cbf21550.roa (raw, json) Hash identifier: YjVcA3ESojyt64FeWFd5Hr/ppAEOL4fgB82FdZvjfGQ= Subject key identifier: E1:8F:5C:8F:00:20:59:3F:99:F6:C6:96:2E:DF:11:F5:0C:00:CD:BD Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AF256A67487FA79EF0BE60B80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db594c0b-1972-3064-abcb-2c71cbf21550.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 3855 IP address blocks: 199.172.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:a6:74:87:fa:79:ef:0b:e6:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=c71434b3-3ddf-40ca-86e6-1ded0596c2c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6e:f8:b5:98:48:67:4d:1d:44:d1:60:b6:3b: 0b:03:75:5e:66:58:7e:60:12:44:b2:14:c4:3c:03: 2d:38:7c:9d:fb:8d:df:b8:69:09:bc:d2:12:94:42: 86:95:fa:aa:c6:26:65:63:dd:dd:ef:88:19:73:81: f7:6e:f8:24:5e:8c:01:ba:06:49:fd:07:d6:47:ba: f0:99:07:31:cc:c8:15:84:39:e1:19:d5:e2:61:c3: bd:a7:7f:74:9d:07:84:90:2b:7c:7e:79:93:c1:ba: 2c:bb:11:01:e9:34:65:79:5a:0a:ba:42:93:0d:c7: 35:7a:0b:7f:f1:e9:eb:2a:bc:05:fb:d4:a7:b1:96: 89:92:62:06:16:12:7a:d2:4a:6f:62:c8:c7:64:c3: 53:6f:f2:63:e4:1f:73:ff:f2:4d:bd:28:97:89:18: 51:c6:b5:2d:9d:53:83:1d:d6:0e:0a:c3:b8:9a:5b: d2:90:25:7c:b3:1c:c3:b9:c1:94:8d:18:41:72:eb: ac:f3:00:90:50:05:fd:e9:42:79:a6:af:67:a8:e6: ee:0a:47:df:8a:fd:3d:a6:ae:39:d0:de:a1:08:2e: 4e:5b:4f:14:06:de:ca:31:e3:a1:af:30:56:80:c8: d7:dc:14:20:8c:8c:d4:bd:7f:fc:1c:7c:57:b4:14: 12:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:8F:5C:8F:00:20:59:3F:99:F6:C6:96:2E:DF:11:F5:0C:00:CD:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db594c0b-1972-3064-abcb-2c71cbf21550.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:62:0d:33:09:e9:ff:c6:2a:d3:25:2c:86:ea:de:e1:cf:47: fb:00:7f:9a:29:2f:c9:a6:17:b8:5f:4e:4c:38:c0:3e:93:df: 58:b3:52:dd:b5:5a:34:53:7a:bc:5f:39:66:40:28:ba:27:ea: d9:2f:52:09:bf:9f:9b:52:60:32:ff:14:c0:74:06:70:5a:a5: 37:cd:52:43:0a:d8:33:86:30:0a:04:81:21:65:83:cd:37:ea: f7:d3:68:4f:13:d6:30:69:70:c7:32:57:54:aa:b9:aa:63:1c: 99:38:73:36:16:7c:2d:6d:24:76:0e:03:95:b4:58:6e:fa:c3: 64:fe:ef:6b:55:72:ed:a0:fc:bb:a3:05:5f:aa:b7:0a:5e:21: 9c:41:23:bc:80:93:0d:5f:76:f4:61:32:28:3a:d9:ff:22:d7: 26:05:ca:ad:27:51:b3:13:20:be:c7:52:89:75:b6:1c:3f:73: 77:5e:22:b8:21:24:49:0b:c7:fc:b8:b2:f9:35:e7:a8:8d:d2: 14:7b:a2:bc:76:bc:c6:d7:e7:14:6d:18:e0:b7:0a:b3:1e:af: 5d:40:ae:d9:40:73:dc:4a:02:71:dc:8f:32:12:02:2c:ab:38: 7b:ed:69:16:75:dc:a0:f8:4a:d7:20:9c:1b:00:4e:f7:b2:9d: 0b:cb:93:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVqZ0h/p57wvmC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk YzcxNDM0YjMtM2RkZi00MGNhLTg2ZTYtMWRlZDA1OTZjMmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl274tZhIZ00dRNFgtjsLA3VeZlh+YBJEshTE PAMtOHyd+43fuGkJvNISlEKGlfqqxiZlY93d74gZc4H3bvgkXowBugZJ/QfWR7rw mQcxzMgVhDnhGdXiYcO9p390nQeEkCt8fnmTwbosuxEB6TRleVoKukKTDcc1egt/ 8enrKrwF+9SnsZaJkmIGFhJ60kpvYsjHZMNTb/Jj5B9z//JNvSiXiRhRxrUtnVOD HdYOCsO4mlvSkCV8sxzDucGUjRhBcuus8wCQUAX96UJ5pq9nqObuCkffiv09pq45 0N6hCC5OW08UBt7KMeOhrzBWgMjX3BQgjIzUvX/8HHxXtBQS0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGPXI8AIFk/mfbGli7fEfUMAM29MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGI1OTRjMGItMTk3Mi0z MDY0LWFiY2ItMmM3MWNiZjIxNTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxiDTMJ6f/GKtMlLIbq3uHPR/sAf5opL8mmF7hfTkw4wD6T31izUt21 WjRTerxfOWZAKLon6tkvUgm/n5tSYDL/FMB0BnBapTfNUkMK2DOGMAoEgSFlg803 6vfTaE8T1jBpcMcyV1SquapjHJk4czYWfC1tJHYOA5W0WG76w2T+72tVcu2g/Luj BV+qtwpeIZxBI7yAkw1fdvRhMig62f8i1yYFyq0nUbMTIL7HUol1thw/c3deIrgh JEkLx/y4svk156iN0hR7orx2vMbX5xRtGOC3CrMer11ArtlAc9xKAnHcjzISAiyr OHvtaRZ13KD4StcgnBsATveynQvLk10= -----END CERTIFICATE-----Generated at Sat Aug 23 17:08:46 2025 by rpki-client