$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/60ca95e7-2975-3b09-b8ee-ceb3d1df912f.roa File: 60ca95e7-2975-3b09-b8ee-ceb3d1df912f.roa (raw, json) Hash identifier: 8DuX0ML8OzX3pKKwIKdLbugEPq31WlHz9FgZRZurJGY= Subject key identifier: 42:3F:13:22:24:4E:4E:C0:C6:84:98:9D:E5:8F:B5:E4:2A:33:D8:E4 Certificate issuer: /CN=2f4dd615-5a9e-4057-98d2-c069dd16f4f7 Certificate serial: 010D0C9F4328584A9A6631864AE5135F5C701CC0 Authority key identifier: 91:19:AF:EC:80:9F:5F:21:48:94:A1:B7:8D:E6:61:E5:8B:78:C1:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/60ca95e7-2975-3b09-b8ee-ceb3d1df912f.roa Signing time: Tue 22 Jul 2025 13:01:03 +0000 ROA not before: Tue 22 Jul 2025 13:01:03 +0000 ROA not after: Mon 20 Oct 2025 13:01:03 +0000 asID: 14618 IP address blocks: 172.99.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/2f4dd615-5a9e-4057-98d2-c069dd16f4f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/2f4dd615-5a9e-4057-98d2-c069dd16f4f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:66:31:86:4a:e5:13:5f:5c:70:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f4dd615-5a9e-4057-98d2-c069dd16f4f7 Validity Not Before: Jul 22 13:01:03 2025 GMT Not After : Oct 20 13:01:03 2025 GMT Subject: CN=44867c06-cc63-4cff-b73a-d3949f42aa41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6f:c7:59:6f:65:52:f4:a4:2f:52:ea:ff:3a: 96:78:5d:d9:66:08:7b:69:0f:bd:70:a6:4a:ac:33: 31:11:c6:c7:79:b2:a2:37:34:11:36:3d:81:52:45: a8:48:fd:8e:aa:ae:31:c6:64:01:29:fc:48:b8:ca: 04:c5:f5:e7:97:f1:56:02:17:e0:01:0d:4e:48:a0: d2:a9:af:55:b8:9d:36:94:ed:df:ed:08:5b:ca:d4: 32:1f:17:04:d2:39:78:55:dd:a2:3b:38:bd:2f:d9: 65:e8:c6:c4:92:b5:d3:67:4c:d7:cc:3b:a0:55:30: ce:ab:e8:98:1d:bb:ac:c4:ec:64:48:c6:70:a7:fd: dd:41:ce:ff:12:03:f1:e7:73:17:ea:e8:da:40:cf: 95:91:4a:8c:f7:e0:9b:91:73:b0:eb:9f:19:d1:52: 13:7c:3d:14:f6:6e:00:20:fc:b3:d8:19:d4:38:4e: d8:e6:1f:57:8f:82:fa:0b:ee:2e:0c:dc:04:22:e0: 52:aa:f6:2d:36:5e:cd:f8:07:4d:de:e3:d0:38:a2: 91:42:84:2b:5a:a6:19:a1:ea:d4:82:a5:91:ca:40: b4:82:3f:35:4c:f4:d0:f5:1e:73:40:e6:00:5e:fa: 11:0e:14:e4:5e:7a:53:06:d2:08:e7:3d:ea:68:86: 35:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3F:13:22:24:4E:4E:C0:C6:84:98:9D:E5:8F:B5:E4:2A:33:D8:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/60ca95e7-2975-3b09-b8ee-ceb3d1df912f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/2f4dd615-5a9e-4057-98d2-c069dd16f4f7.crl X509v3 Authority Key Identifier: keyid:91:19:AF:EC:80:9F:5F:21:48:94:A1:B7:8D:E6:61:E5:8B:78:C1:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7.cer sbgp-ipAddrBlock: critical IPv4: 172.99.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:f2:2b:7b:90:65:a3:01:9c:8a:62:f0:06:6c:34:a9:e7:99: 70:28:e5:d0:a0:83:90:22:d8:44:30:ca:b2:9d:1b:cf:9a:bf: 16:e2:95:2f:8c:48:c3:ec:ca:8c:57:74:87:72:9e:c6:e6:d1: bc:88:8c:0a:19:e2:71:be:49:2f:e7:5e:70:09:32:d7:b4:be: 54:a9:f7:08:dc:51:c6:5d:4a:e8:4f:4e:db:d4:62:e7:2e:62: 17:21:77:fb:af:d9:c3:b7:f2:26:6d:22:c5:3a:bf:87:28:81: 39:60:40:6b:72:17:98:30:05:8a:01:3d:91:9f:2a:70:6e:c9: b6:6d:1c:82:aa:94:98:3d:e5:07:47:ff:a3:df:54:9b:22:27: 0c:d1:e3:ae:b4:da:4a:d0:8f:56:ef:94:50:6a:a1:2f:d0:67: 2c:59:cd:41:4a:19:e9:0e:98:fe:da:73:d3:a8:f6:fb:b8:34: 6a:72:f3:67:63:75:e7:55:d3:c3:9b:0d:f8:39:92:67:ce:39: 42:e9:29:46:9b:d5:5a:f9:7d:dc:29:07:df:4d:23:6c:03:0f: b0:b5:ed:80:9a:c8:01:98:a6:9c:03:61:b4:97:fb:59:73:48: 10:a0:c4:db:44:9c:45:e6:17:5a:91:ed:1e:66:a1:a8:5e:d3: 61:4c:d9:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqaZjGGSuUTX1xwHMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmY0ZGQ2MTUtNWE5ZS00MDU3LTk4ZDItYzA2OWRkMTZm NGY3MB4XDTI1MDcyMjEzMDEwM1oXDTI1MTAyMDEzMDEwM1owLzEtMCsGA1UEAxMk NDQ4NjdjMDYtY2M2My00Y2ZmLWI3M2EtZDM5NDlmNDJhYTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2/HWW9lUvSkL1Lq/zqWeF3ZZgh7aQ+9cKZK rDMxEcbHebKiNzQRNj2BUkWoSP2Oqq4xxmQBKfxIuMoExfXnl/FWAhfgAQ1OSKDS qa9VuJ02lO3f7QhbytQyHxcE0jl4Vd2iOzi9L9ll6MbEkrXTZ0zXzDugVTDOq+iY HbusxOxkSMZwp/3dQc7/EgPx53MX6ujaQM+VkUqM9+CbkXOw658Z0VITfD0U9m4A IPyz2BnUOE7Y5h9Xj4L6C+4uDNwEIuBSqvYtNl7N+AdN3uPQOKKRQoQrWqYZoerU gqWRykC0gj81TPTQ9R5zQOYAXvoRDhTkXnpTBtII5z3qaIY1LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEI/EyIkTk7AxoSYneWPteQqM9jkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yZjRk ZDYxNS01YTllLTQwNTctOThkMi1jMDY5ZGQxNmY0ZjcvNjBjYTk1ZTctMjk3NS0z YjA5LWI4ZWUtY2ViM2QxZGY5MTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmY0ZGQ2MTUtNWE5ZS00MDU3LTk4 ZDItYzA2OWRkMTZmNGY3LzJmNGRkNjE1LTVhOWUtNDA1Ny05OGQyLWMwNjlkZDE2 ZjRmNy5jcmwwHwYDVR0jBBgwFoAUkRmv7ICfXyFIlKG3jeZh5Yt4wdAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yZjRkZDYxNS01YTllLTQwNTctOThkMi1jMDY5 ZGQxNmY0ZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGP6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvyK3uQZaMBnIpi8AZsNKnnmXAo5dCgg5Ai2EQwyrKdG8+avxbilS+M SMPsyoxXdIdynsbm0byIjAoZ4nG+SS/nXnAJMte0vlSp9wjcUcZdSuhPTtvUYucu Yhchd/uv2cO38iZtIsU6v4cogTlgQGtyF5gwBYoBPZGfKnBuybZtHIKqlJg95QdH /6PfVJsiJwzR46602krQj1bvlFBqoS/QZyxZzUFKGekOmP7ac9Oo9vu4NGpy82dj dedV08ObDfg5kmfOOULpKUab1Vr5fdwpB99NI2wDD7C17YCayAGYppwDYbSX+1lz SBCgxNtEnEXmF1qR7R5moahe02FM2cQ= -----END CERTIFICATE-----Generated at Mon Aug 4 14:56:37 2025 by rpki-client