$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/337099e7-4ae6-3200-84db-2441bbde1298.roa File: 337099e7-4ae6-3200-84db-2441bbde1298.roa (raw, json) Hash identifier: tnTKc2Sf1huAyyGllvOQ1Hy+nXVkKefsr4Xj2cmmnNI= Subject key identifier: 2F:6B:DB:34:DB:61:7F:0D:7E:EC:BE:90:06:55:6A:DB:6D:76:8C:EE Certificate issuer: /CN=161143c9-c030-4270-91a4-41e54bbb2357 Certificate serial: 010D0C9F4328584AADF0FD35F6A724BA3C973F80 Authority key identifier: 3F:1F:91:EE:51:47:94:04:0E:68:02:55:C7:6B:C2:2A:74:D9:CE:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/337099e7-4ae6-3200-84db-2441bbde1298.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 14630 IP address blocks: 199.230.0.0/21 maxlen: 24 199.230.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/161143c9-c030-4270-91a4-41e54bbb2357.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/161143c9-c030-4270-91a4-41e54bbb2357.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f0:fd:35:f6:a7:24:ba:3c:97:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=161143c9-c030-4270-91a4-41e54bbb2357 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=cb35ddba-be3d-4876-b714-e6521af90c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:23:a4:12:a7:d9:7d:6a:6c:50:28:90:dc:fa: ce:9a:ee:25:43:95:92:3b:e9:b8:ff:15:bc:6c:17: b9:20:a5:fd:1f:08:69:ab:1e:51:68:03:d4:f8:c2: 43:78:8e:29:53:4f:96:2e:8d:da:a6:9a:46:36:41: 00:54:62:9e:39:29:67:0b:21:7f:cb:ee:da:8b:06: f5:8a:7e:d6:20:de:ac:13:99:d4:da:4d:e5:ce:6f: 0b:fa:43:81:44:98:4e:72:40:2a:8e:f8:28:f5:2b: 1f:1f:29:f5:3a:18:5b:10:98:13:21:bc:39:74:6e: 0d:33:47:8e:58:75:0a:ba:c3:cd:10:6d:f6:0d:4f: a6:20:84:da:91:3d:e8:72:83:b4:36:84:1f:38:ef: dd:01:a9:24:56:36:f5:58:17:b2:0e:06:61:23:63: 0d:11:cb:bc:80:0d:9f:68:d3:38:b7:56:38:fb:5d: 55:41:b1:4b:95:86:91:d5:93:69:c1:fd:ce:f6:86: 56:90:44:01:50:d1:f3:61:ba:ed:6b:1d:d7:d1:61: 80:49:8b:b6:20:bd:b9:9e:2a:12:c5:c0:34:15:2b: 31:61:2f:fe:40:6c:81:72:2c:c6:3d:e1:6e:8c:00: 13:f1:80:a6:8e:85:71:74:f3:2a:d9:d6:2d:64:8a: 89:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:6B:DB:34:DB:61:7F:0D:7E:EC:BE:90:06:55:6A:DB:6D:76:8C:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/337099e7-4ae6-3200-84db-2441bbde1298.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/161143c9-c030-4270-91a4-41e54bbb2357.crl X509v3 Authority Key Identifier: keyid:3F:1F:91:EE:51:47:94:04:0E:68:02:55:C7:6B:C2:2A:74:D9:CE:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357.cer sbgp-ipAddrBlock: critical IPv4: 199.230.0.0-199.230.9.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:68:6c:a3:3c:f6:8d:02:3a:e3:74:77:61:4f:81:a1:5d:b7: b8:99:cb:6f:0d:9b:ba:b8:7e:65:d7:5d:08:b9:f4:a0:16:89: 5f:08:66:49:be:50:ac:c9:fd:cb:a9:ec:35:7e:93:5c:38:e4: 82:29:6b:76:93:5e:09:28:72:2b:ee:95:4d:e7:bd:60:51:f9: 39:13:c1:a6:bb:a4:89:85:08:5d:3f:f2:e4:2e:44:5f:85:91: 06:fe:98:14:65:e9:e7:f9:e1:28:65:39:62:b2:2e:37:f8:4d: fc:31:49:a3:8f:60:02:e7:98:31:e6:6c:6c:90:4f:6d:94:29: 7e:e8:52:1b:04:0a:c0:12:0f:c9:15:04:5f:ee:cb:9a:9b:bc: 3f:10:40:20:57:5f:15:4c:18:54:c8:82:d3:bd:2c:f4:b0:ca: 71:5b:c9:2b:f3:fe:fd:1a:99:07:5c:9e:68:96:34:e6:87:bd: 50:28:dc:f2:4d:3c:19:29:64:48:f5:14:2d:ab:9c:8b:54:09: 68:33:e3:b1:56:1f:f8:dd:71:d4:c0:e4:8c:f6:11:01:3d:e2: 7b:8c:ef:cc:25:8d:ad:17:df:0f:3d:39:5d:83:e5:ec:9c:5b: 6b:63:5a:29:bf:46:bb:0c:04:3d:a2:ad:db:42:bf:69:1d:e4: 07:58:ac:61 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWEqt8P019qckujyXP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTYxMTQzYzktYzAzMC00MjcwLTkxYTQtNDFlNTRiYmIy MzU3MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk Y2IzNWRkYmEtYmUzZC00ODc2LWI3MTQtZTY1MjFhZjkwYzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiOkEqfZfWpsUCiQ3PrOmu4lQ5WSO+m4/xW8 bBe5IKX9Hwhpqx5RaAPU+MJDeI4pU0+WLo3apppGNkEAVGKeOSlnCyF/y+7aiwb1 in7WIN6sE5nU2k3lzm8L+kOBRJhOckAqjvgo9SsfHyn1OhhbEJgTIbw5dG4NM0eO WHUKusPNEG32DU+mIITakT3ocoO0NoQfOO/dAakkVjb1WBeyDgZhI2MNEcu8gA2f aNM4t1Y4+11VQbFLlYaR1ZNpwf3O9oZWkEQBUNHzYbrtax3X0WGASYu2IL25nioS xcA0FSsxYS/+QGyBcizGPeFujAAT8YCmjoVxdPMq2dYtZIqJXwIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFC9r2zTbYX8Nfuy+kAZVatttdozuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNjEx NDNjOS1jMDMwLTQyNzAtOTFhNC00MWU1NGJiYjIzNTcvMzM3MDk5ZTctNGFlNi0z MjAwLTg0ZGItMjQ0MWJiZGUxMjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTYxMTQzYzktYzAzMC00MjcwLTkx YTQtNDFlNTRiYmIyMzU3LzE2MTE0M2M5LWMwMzAtNDI3MC05MWE0LTQxZTU0YmJi MjM1Ny5jcmwwHwYDVR0jBBgwFoAUPx+R7lFHlAQOaAJVx2vCKnTZzmwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNjExNDNjOS1jMDMwLTQyNzAtOTFhNC00MWU1 NGJiYjIzNTcuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwHH5gME AcfmCDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQBmaGyjPPaNAjrjdHdhT4GhXbe4mctvDZu6uH5l110IufSg FolfCGZJvlCsyf3Lqew1fpNcOOSCKWt2k14JKHIr7pVN571gUfk5E8Gmu6SJhQhd P/LkLkRfhZEG/pgUZenn+eEoZTlisi43+E38MUmjj2AC55gx5mxskE9tlCl+6FIb BArAEg/JFQRf7suam7w/EEAgV18VTBhUyILTvSz0sMpxW8kr8/79GpkHXJ5oljTm h71QKNzyTTwZKWRI9RQtq5yLVAloM+OxVh/43XHUwOSM9hEBPeJ7jO/MJY2tF98P PTldg+XsnFtrY1opv0a7DAQ9oq3bQr9pHeQHWKxh -----END CERTIFICATE-----Generated at Tue Aug 5 20:17:39 2025 by rpki-client