$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fbbdff3e-e635-3be3-8634-8643c3307d51.roa File: fbbdff3e-e635-3be3-8634-8643c3307d51.roa (raw, json) Hash identifier: +6vdskI8gne+jQcShPPDYnGVA8VTWs/QBD5hFUzyf3M= Subject key identifier: F1:6D:EE:28:91:A7:A4:72:C6:36:5B:7A:BF:A8:C7:A9:C7:DB:CC:FF Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AF256A5B1E9A088432D75F400 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fbbdff3e-e635-3be3-8634-8643c3307d51.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 3855 IP address blocks: 199.172.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:a5:b1:e9:a0:88:43:2d:75:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=63d11fc2-a171-4223-9d04-d23ca8a7c0e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3f:35:01:81:3c:62:35:43:17:00:30:1f:ca: 98:f0:c6:62:96:fc:58:ab:c7:ea:04:5c:86:ef:74: 67:cf:27:33:fa:db:47:2a:5d:e0:1b:7d:4e:4b:52: 08:1c:b2:57:b0:c4:26:81:4b:3f:1b:5b:48:52:55: 41:b3:92:8e:0f:3c:01:20:76:19:a2:3c:4d:91:30: 20:6c:ec:f5:a0:ea:2f:de:4e:22:77:63:d1:91:90: c6:75:e2:43:97:5c:1d:03:79:6e:30:d8:9a:77:84: bf:1a:18:60:fa:ad:41:b8:a9:2a:e0:c6:a2:df:7d: e2:bf:b9:4d:79:83:40:6a:f8:10:fc:9c:c7:6a:cf: 11:ff:8f:48:d0:7d:d0:54:75:72:1f:14:00:a7:2b: 1a:27:0f:d5:c4:4d:61:0c:87:d1:67:1a:ae:49:73: 9a:b0:f6:aa:43:8f:99:6c:64:7e:83:2b:80:1b:79: 24:98:17:70:93:8f:2b:66:41:92:dd:e2:33:58:b4: 00:74:a7:7c:27:a1:a3:5d:38:68:90:42:c2:94:2a: 76:3d:0a:cd:b4:d0:2a:42:38:2e:44:5e:8d:4b:6b: af:33:56:11:56:f5:72:f0:87:7c:e0:e6:c2:d6:ff: 44:50:75:b5:e9:36:43:c7:89:1b:2f:2f:2d:6a:44: fb:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:6D:EE:28:91:A7:A4:72:C6:36:5B:7A:BF:A8:C7:A9:C7:DB:CC:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fbbdff3e-e635-3be3-8634-8643c3307d51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:7f:4a:be:c9:4d:79:2f:ad:c1:29:8f:b9:29:71:16:46:38: f8:e1:85:6c:bf:d6:ae:44:62:fc:42:1b:3e:91:69:c3:9b:86: d1:4a:2d:25:46:4e:e9:b2:26:24:20:f8:3f:7b:76:f2:1a:d2: 41:f1:d6:ba:28:47:db:84:4b:f5:bc:af:a3:bd:22:7c:21:44: 87:28:34:65:b5:7e:11:7f:76:e0:5f:8c:f9:51:07:1e:53:4a: 91:b6:aa:3a:f0:2a:7c:f0:3c:7d:a9:c6:c0:05:e7:1a:0a:d2: 06:96:85:e5:4b:8b:56:26:31:7d:56:97:1d:e7:5e:fb:12:e7: a7:24:ee:26:b5:8c:e5:23:79:ad:8f:9c:73:07:db:f6:b9:35: d7:fa:af:a0:82:e9:bc:e3:49:c7:e3:0d:ae:17:cc:6e:c9:ec: 6d:d1:c0:da:84:53:f9:aa:09:db:ad:54:a0:5a:fa:5f:fa:b6: e7:1c:85:4e:83:c5:37:2a:0b:dd:93:e8:52:9c:f1:f3:3a:77: d1:22:af:17:45:cf:dc:a4:a4:c9:58:21:be:eb:d2:b7:4f:cc: d0:c0:77:ad:da:ad:18:f7:b1:51:d5:41:e2:bd:f2:5a:21:6a: d5:c3:9b:64:c6:7b:16:b5:06:b9:02:32:66:d0:8f:94:1c:d1: cf:26:4b:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVqWx6aCIQy119AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk NjNkMTFmYzItYTE3MS00MjIzLTlkMDQtZDIzY2E4YTdjMGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmj81AYE8YjVDFwAwH8qY8MZilvxYq8fqBFyG 73Rnzycz+ttHKl3gG31OS1IIHLJXsMQmgUs/G1tIUlVBs5KODzwBIHYZojxNkTAg bOz1oOov3k4id2PRkZDGdeJDl1wdA3luMNiad4S/Ghhg+q1BuKkq4Mai333iv7lN eYNAavgQ/JzHas8R/49I0H3QVHVyHxQApysaJw/VxE1hDIfRZxquSXOasPaqQ4+Z bGR+gyuAG3kkmBdwk48rZkGS3eIzWLQAdKd8J6GjXThokELClCp2PQrNtNAqQjgu RF6NS2uvM1YRVvVy8Id84ObC1v9EUHW16TZDx4kbLy8takT7vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFt7iiRp6RyxjZber+ox6nH28z/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmJiZGZmM2UtZTYzNS0z YmUzLTg2MzQtODY0M2MzMzA3ZDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAh/Sr7JTXkvrcEpj7kpcRZGOPjhhWy/1q5EYvxCGz6RacObhtFKLSVG TumyJiQg+D97dvIa0kHx1rooR9uES/W8r6O9InwhRIcoNGW1fhF/duBfjPlRBx5T SpG2qjrwKnzwPH2pxsAF5xoK0gaWheVLi1YmMX1Wlx3nXvsS56ck7ia1jOUjea2P nHMH2/a5Ndf6r6CC6bzjScfjDa4XzG7J7G3RwNqEU/mqCdutVKBa+l/6tucchU6D xTcqC92T6FKc8fM6d9EirxdFz9ykpMlYIb7r0rdPzNDAd63arRj3sVHVQeK98loh atXDm2TGexa1BrkCMmbQj5Qc0c8mS7Y= -----END CERTIFICATE-----Generated at Sat Aug 23 16:28:35 2025 by rpki-client