$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/d2517bc4-e992-3287-ac87-c5b15da1b10b.roa File: d2517bc4-e992-3287-ac87-c5b15da1b10b.roa (raw, json) Hash identifier: paxJW4vY0VlHDRrfoI0xzC00S4zmlL33e6g1SYJZt9E= Subject key identifier: F3:6D:C1:F9:26:A1:97:6B:5A:01:27:A0:BC:90:CA:4D:32:B5:F3:0C Certificate issuer: /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a Certificate serial: 010D0C9F4328584ABD4BA2658F193A8813C68200 Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/d2517bc4-e992-3287-ac87-c5b15da1b10b.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 2734 IP address blocks: 199.119.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:a2:65:8f:19:3a:88:13:c6:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=de30f394-0633-4b76-84bc-0989cf77a344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ea:3f:dd:3c:9e:62:35:4e:de:db:f8:1c:67: a2:a3:30:9a:77:5d:b9:47:a8:45:1f:7f:e5:33:1d: 1a:97:2e:bd:23:e2:5e:13:d2:9f:94:bd:c5:6b:c6: ff:49:88:9b:92:84:b0:0d:0b:59:40:50:e3:7d:e0: 65:ec:11:0c:da:21:00:4a:bd:0e:6f:a0:56:81:e4: 47:ab:34:f5:e1:c5:d0:78:34:bc:49:f8:5f:fe:c9: af:76:d0:10:b4:67:52:de:79:1f:c5:42:60:71:26: 4b:f1:fb:7c:b1:cb:93:a1:1f:09:fc:f5:d7:7f:f5: 23:45:73:ce:05:48:05:c0:1a:9f:72:be:67:a6:00: ae:57:e2:f2:05:29:54:c5:8d:cb:a4:91:4d:db:13: 31:bb:02:d7:ae:a5:a4:32:5f:df:6e:83:82:c8:37: 01:78:3b:16:88:a9:d7:d9:27:89:e8:13:fd:3f:78: 60:a7:2d:af:26:eb:55:43:13:30:b5:7c:46:72:08: b3:02:ae:8c:40:f0:73:63:75:1b:cf:61:43:98:71: c8:73:5e:e4:a4:de:56:86:98:45:0d:bc:f1:45:4c: 1b:f2:8e:5b:de:7b:ef:88:13:72:f7:7a:8b:0d:31: 89:0f:d6:9a:c1:b6:7a:9f:c1:6c:24:34:64:4c:35: 6f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:6D:C1:F9:26:A1:97:6B:5A:01:27:A0:BC:90:CA:4D:32:B5:F3:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/d2517bc4-e992-3287-ac87-c5b15da1b10b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl X509v3 Authority Key Identifier: keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer sbgp-ipAddrBlock: critical IPv4: 199.119.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:b7:66:91:5c:b9:e7:f6:d7:5f:92:88:65:48:0d:47:9c:b4: 15:69:11:b4:55:e5:88:7b:95:7f:3d:7f:b3:74:63:e5:bc:42: da:09:db:d5:10:ca:fc:39:49:ec:c6:c2:9d:70:d8:b0:11:6a: 94:ef:b4:3f:75:e9:93:36:a2:11:05:a6:2d:09:4c:1e:41:af: 4f:53:50:e9:6b:13:44:f9:03:75:0c:47:34:65:09:6e:68:64: be:71:d2:a4:4b:03:8b:11:28:f2:96:58:f3:a8:e8:83:cd:59: 85:60:90:6a:96:6a:eb:21:40:65:54:8e:9c:e7:28:15:43:4c: 1a:05:bf:0d:af:f8:63:94:fe:34:d9:69:cc:95:62:25:56:47: c9:48:e4:5d:12:7e:81:53:53:21:5d:f9:7c:2b:c4:e3:ac:4b: 3e:1a:39:9e:6b:b1:fe:e3:e5:76:3c:a0:0a:1e:bc:29:ac:de: 9f:20:c8:6b:ec:ae:b6:9b:39:69:a2:9f:46:d3:bb:21:9b:6c: cf:e2:b1:36:48:be:3e:e6:a3:4d:b0:ec:fe:eb:de:d1:69:0b: 95:22:58:6e:42:8f:a6:dd:d3:81:08:50:d8:19:28:21:3f:8a: 5a:01:8c:d5:7e:1b:c6:f3:34:9b:1b:b2:f2:17:42:4b:90:0b: 92:91:49:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S6Jljxk6iBPGggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjlmNWU0OTYtOGZmOC00MDFmLWFkMjctYTFiNjI0Zjkw MTRhMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk ZGUzMGYzOTQtMDYzMy00Yjc2LTg0YmMtMDk4OWNmNzdhMzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+o/3TyeYjVO3tv4HGeiozCad125R6hFH3/l Mx0aly69I+JeE9KflL3Fa8b/SYibkoSwDQtZQFDjfeBl7BEM2iEASr0Ob6BWgeRH qzT14cXQeDS8Sfhf/smvdtAQtGdS3nkfxUJgcSZL8ft8scuToR8J/PXXf/UjRXPO BUgFwBqfcr5npgCuV+LyBSlUxY3LpJFN2xMxuwLXrqWkMl/fboOCyDcBeDsWiKnX 2SeJ6BP9P3hgpy2vJutVQxMwtXxGcgizAq6MQPBzY3Ubz2FDmHHIc17kpN5WhphF DbzxRUwb8o5b3nvviBNy93qLDTGJD9aawbZ6n8FsJDRkTDVvuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNtwfkmoZdrWgEnoLyQyk0ytfMMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1 ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2MjRmOTAxNGEvZDI1MTdiYzQtZTk5Mi0z Mjg3LWFjODctYzViMTVkYTFiMTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjlmNWU0OTYtOGZmOC00MDFmLWFk MjctYTFiNjI0ZjkwMTRhLzI5ZjVlNDk2LThmZjgtNDAxZi1hZDI3LWExYjYyNGY5 MDE0YS5jcmwwHwYDVR0jBBgwFoAUsHS8ugFMyPdv9/jKlpR/Lims27EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2 MjRmOTAxNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx3e0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAES3ZpFcuef211+SiGVIDUectBVpEbRV5Yh7lX89f7N0Y+W8QtoJ29UQ yvw5SezGwp1w2LARapTvtD916ZM2ohEFpi0JTB5Br09TUOlrE0T5A3UMRzRlCW5o ZL5x0qRLA4sRKPKWWPOo6IPNWYVgkGqWaushQGVUjpznKBVDTBoFvw2v+GOU/jTZ acyVYiVWR8lI5F0SfoFTUyFd+XwrxOOsSz4aOZ5rsf7j5XY8oAoevCms3p8gyGvs rrabOWmin0bTuyGbbM/isTZIvj7mo02w7P7r3tFpC5UiWG5Cj6bd04EIUNgZKCE/ iloBjNV+G8bzNJsbsvIXQkuQC5KRSYI= -----END CERTIFICATE-----Generated at Mon Aug 4 14:14:50 2025 by rpki-client