$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa8f5067-a802-31bb-91df-2ce743550c09.roa File: fa8f5067-a802-31bb-91df-2ce743550c09.roa (raw, json) Hash identifier: q6BW82xTM8nTwElVWPgxa9g9BnNBrURgr2MXfMAanAM= Subject key identifier: A7:C6:49:EB:93:88:E7:73:EC:CC:D3:A3:D5:F5:EA:74:13:98:F5:C0 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AF256A746DF18AF571EFB0A80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa8f5067-a802-31bb-91df-2ce743550c09.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 3855 IP address blocks: 199.172.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:a7:46:df:18:af:57:1e:fb:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=25366305-0dc7-4a5a-b9cf-b08b490e37d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8a:75:a6:04:5d:86:f6:0c:fe:dd:c0:66:eb: 08:97:f9:55:da:97:a1:c6:3a:b3:73:b7:1d:29:ac: 88:ed:c0:06:34:1d:8c:25:07:d2:40:ac:5b:10:d8: ef:39:87:89:21:07:14:4c:8a:59:42:98:a0:49:be: ad:93:31:78:85:d4:0c:ae:87:d5:67:79:e4:c0:fa: e5:28:bb:c6:b9:72:de:42:13:d0:e9:b3:19:df:6e: 6a:35:5f:26:e5:fe:2d:ea:d4:f4:d3:7b:74:75:cf: 69:3b:4d:44:03:e8:c8:49:14:5d:67:26:1c:2c:9e: e5:05:c2:ca:7d:8e:b7:e7:88:b3:26:78:f1:6c:48: 63:9f:8e:8c:aa:04:d9:2b:c5:91:38:5a:d4:3d:d3: b2:37:c8:68:d8:20:28:ed:33:79:e6:99:69:8a:37: f8:c2:6b:b8:fc:ab:ae:5e:cc:61:ba:49:ff:f0:3a: 4f:dc:fc:54:be:9f:21:27:9d:86:fd:94:b2:a2:50: df:c8:df:49:39:8b:24:26:ee:94:82:15:bb:a1:a4: b2:69:06:71:2c:3a:b4:cc:94:c0:77:5c:b5:b4:74: 49:f7:db:90:63:74:dc:5e:fe:46:70:8c:98:6b:1d: 6a:6c:6d:8c:25:5b:8b:4b:d3:07:ed:c8:43:c2:93: 21:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C6:49:EB:93:88:E7:73:EC:CC:D3:A3:D5:F5:EA:74:13:98:F5:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa8f5067-a802-31bb-91df-2ce743550c09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:36:e9:dd:4d:07:bd:6a:d2:62:1f:aa:e3:28:ab:2f:34:11: 01:3a:c6:3b:50:d8:c1:f5:f7:54:55:f9:3e:27:42:0d:f8:34: 4e:22:68:b2:2f:b3:aa:05:ec:86:21:cf:65:6a:9b:58:1f:7f: f3:3b:84:01:cb:f1:2b:af:11:da:30:41:cd:c7:55:09:5f:68: 09:e6:f5:19:17:28:62:b4:ac:83:92:6f:c8:98:68:53:72:2b: a8:16:c0:00:f9:e6:24:20:86:35:8e:0d:45:94:20:82:05:00: 0e:de:5b:68:b0:de:d6:3a:be:74:98:c8:4e:d4:0b:33:6e:07: 05:d2:04:f9:fb:bc:40:ec:28:d7:a2:8a:ad:6f:4f:d7:17:bd: 27:7e:75:5f:59:72:4b:db:02:24:7d:1c:28:aa:da:a6:23:5b: e4:67:e3:e0:0c:39:ce:03:ad:e2:1a:fb:5d:64:4f:ff:e4:35: 07:ce:af:da:0b:ad:07:a4:39:e1:e2:7b:d4:a1:7b:dc:c7:25: 10:c1:cd:a8:26:13:cf:67:b4:d1:d4:ae:22:0f:36:3e:02:f1: d8:b0:5f:68:41:64:b0:bc:46:1d:ba:08:5a:1a:81:98:85:f4: b1:50:b9:ac:f1:0e:f8:48:cb:f5:80:97:34:7b:be:cd:4b:12: 96:a8:a1:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVqdG3xivVx77CoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk MjUzNjYzMDUtMGRjNy00YTVhLWI5Y2YtYjA4YjQ5MGUzN2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4p1pgRdhvYM/t3AZusIl/lV2pehxjqzc7cd KayI7cAGNB2MJQfSQKxbENjvOYeJIQcUTIpZQpigSb6tkzF4hdQMrofVZ3nkwPrl KLvGuXLeQhPQ6bMZ325qNV8m5f4t6tT003t0dc9pO01EA+jISRRdZyYcLJ7lBcLK fY6354izJnjxbEhjn46MqgTZK8WROFrUPdOyN8ho2CAo7TN55plpijf4wmu4/Kuu Xsxhukn/8DpP3PxUvp8hJ52G/ZSyolDfyN9JOYskJu6UghW7oaSyaQZxLDq0zJTA d1y1tHRJ99uQY3TcXv5GcIyYax1qbG2MJVuLS9MH7chDwpMhRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfGSeuTiOdz7MzTo9X16nQTmPXAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmE4ZjUwNjctYTgwMi0z MWJiLTkxZGYtMmNlNzQzNTUwYzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6z8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF026d1NB71q0mIfquMoqy80EQE6xjtQ2MH191RV+T4nQg34NE4iaLIv s6oF7IYhz2Vqm1gff/M7hAHL8SuvEdowQc3HVQlfaAnm9RkXKGK0rIOSb8iYaFNy K6gWwAD55iQghjWODUWUIIIFAA7eW2iw3tY6vnSYyE7UCzNuBwXSBPn7vEDsKNei iq1vT9cXvSd+dV9ZckvbAiR9HCiq2qYjW+Rn4+AMOc4DreIa+11kT//kNQfOr9oL rQekOeHie9She9zHJRDBzagmE89ntNHUriIPNj4C8diwX2hBZLC8Rh26CFoagZiF 9LFQuazxDvhIy/WAlzR7vs1LEpaooUc= -----END CERTIFICATE-----Generated at Sat Aug 23 14:21:42 2025 by rpki-client