$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/6f35d33f-3b25-3848-9287-a755ae18fa87.roa File: 6f35d33f-3b25-3848-9287-a755ae18fa87.roa (raw, json) Hash identifier: Iy6sBZzS0lgIj4PFJ9mV3JRGUxptikeU9d+kj2p3Jpc= Subject key identifier: 09:FF:B4:6B:A6:90:FC:8F:F4:24:43:47:9A:A4:F7:8A:06:26:AC:1E Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584AAB265A53D2EBF223FA8E2500 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/6f35d33f-3b25-3848-9287-a755ae18fa87.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 40627 IP address blocks: 199.255.120.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:5a:53:d2:eb:f2:23:fa:8e:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=2763af16-80e1-48f6-9628-51ac18854c1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:33:62:93:6f:c2:6c:6a:e3:3b:e6:1f:b8:d3: be:ea:fe:50:f6:b0:4e:d8:0d:61:9a:17:b1:01:52: 41:4b:35:87:61:f7:24:39:5f:8c:93:57:23:28:7c: 4a:cd:4c:6c:0d:06:5f:26:77:71:42:d0:b8:2f:b6: 61:1b:56:c2:f8:32:18:dd:3c:73:98:2e:f8:be:80: c5:9a:e8:bf:15:ba:f9:5a:8a:bd:33:8d:6e:e1:91: 79:55:37:6d:33:74:30:44:6f:4e:7c:db:3d:48:b6: 76:02:56:b3:28:e9:df:ce:57:fc:65:0b:46:fa:96: d0:e1:0a:c3:81:11:71:b0:fd:f3:53:98:11:30:e4: ff:5a:9b:24:0e:61:d3:09:c7:a7:7e:b7:12:f7:fe: a7:12:cd:7b:2c:6a:65:bb:6c:06:71:3d:cc:4b:92: 99:f9:0c:45:78:1b:22:6c:96:a9:b5:9f:94:77:a5: 39:32:f3:6a:45:11:fb:84:d8:5f:0d:50:51:ad:eb: e7:f3:d1:e0:96:4b:6f:2a:b4:12:b9:04:ef:94:1b: 96:3b:3a:1c:41:c0:46:41:78:bb:99:a2:25:92:5a: 64:85:a1:22:dd:07:41:11:17:de:9c:d3:3c:67:6a: 7c:bd:7d:64:65:d4:9d:ee:e3:36:48:de:7d:cc:d2: f2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:FF:B4:6B:A6:90:FC:8F:F4:24:43:47:9A:A4:F7:8A:06:26:AC:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/6f35d33f-3b25-3848-9287-a755ae18fa87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 199.255.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:1c:70:3f:bb:de:28:14:1e:e5:6b:0e:4e:42:48:06:a6:3f: e8:38:56:ae:60:f9:0a:b2:21:af:5b:ad:87:78:60:7e:60:83: a4:07:88:e9:08:f2:77:7c:4f:9b:7d:4a:28:76:d8:96:78:3f: 30:26:f8:0e:db:c6:25:96:07:41:a9:72:51:c7:f5:46:00:cd: 19:45:04:fb:2e:f5:f9:1f:74:1e:b5:ed:8a:8a:4d:c3:92:11: cc:52:4d:bb:5d:c0:1e:90:f0:d1:97:70:30:dc:72:c5:93:67: 24:15:d4:20:91:8c:79:7c:f1:0f:e6:8f:0c:93:0e:c0:44:61: 3b:6d:fe:cc:48:52:85:de:f8:39:2e:b6:57:ac:73:ff:6a:66: 90:d9:b7:ad:cf:c2:66:27:ec:bc:f2:8b:ce:c4:db:1c:99:c2: 70:9c:60:02:9c:33:77:d3:93:21:b3:a7:d2:e0:fd:6f:4b:76: 2e:53:91:67:39:f6:e7:5c:70:10:e5:31:c1:03:a3:5f:80:2d: e2:44:2e:46:f2:b1:bc:f4:08:a1:bb:12:6c:ea:a0:84:9c:05: 77:be:09:70:da:ad:0c:ae:a6:b7:1a:47:50:7e:7b:26:c2:d5: fb:d7:c5:4f:bb:a3:21:0a:26:80:61:ea:12:9c:46:05:fe:be: 48:35:ff:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJlpT0uvyI/qOJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk Mjc2M2FmMTYtODBlMS00OGY2LTk2MjgtNTFhYzE4ODU0YzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjNik2/CbGrjO+YfuNO+6v5Q9rBO2A1hmhex AVJBSzWHYfckOV+Mk1cjKHxKzUxsDQZfJndxQtC4L7ZhG1bC+DIY3TxzmC74voDF mui/Fbr5Woq9M41u4ZF5VTdtM3QwRG9OfNs9SLZ2AlazKOnfzlf8ZQtG+pbQ4QrD gRFxsP3zU5gRMOT/WpskDmHTCcenfrcS9/6nEs17LGplu2wGcT3MS5KZ+QxFeBsi bJaptZ+Ud6U5MvNqRRH7hNhfDVBRrevn89HglktvKrQSuQTvlBuWOzocQcBGQXi7 maIlklpkhaEi3QdBERfenNM8Z2p8vX1kZdSd7uM2SN59zNLyYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAn/tGumkPyP9CRDR5qk94oGJqweMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvNmYzNWQzM2YtM2IyNS0z ODQ4LTkyODctYTc1NWFlMThmYTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx/94MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQccD+73igUHuVrDk5CSAamP+g4Vq5g+QqyIa9brYd4YH5gg6QHiOkI 8nd8T5t9Sih22JZ4PzAm+A7bxiWWB0GpclHH9UYAzRlFBPsu9fkfdB617YqKTcOS EcxSTbtdwB6Q8NGXcDDccsWTZyQV1CCRjHl88Q/mjwyTDsBEYTtt/sxIUoXe+Dku tlesc/9qZpDZt63PwmYn7Lzyi87E2xyZwnCcYAKcM3fTkyGzp9Lg/W9Ldi5TkWc5 9udccBDlMcEDo1+ALeJELkbysbz0CKG7EmzqoIScBXe+CXDarQyuprcaR1B+eybC 1fvXxU+7oyEKJoBh6hKcRgX+vkg1/9o= -----END CERTIFICATE-----Generated at Mon Aug 4 16:04:26 2025 by rpki-client