$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/25e6f460-c894-32b1-ad14-f99116ad088e.roa File: 25e6f460-c894-32b1-ad14-f99116ad088e.roa (raw, json) Hash identifier: 6WQfaaBPnODrqZszGowOwmwgxF/Hw/EDc91/ED0wHlU= Subject key identifier: 7A:8E:AC:FF:32:DD:77:3C:65:2B:D5:DF:E1:2B:19:29:83:0B:D1:EF Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AF256A7205BDD0F5E9C7BD9C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/25e6f460-c894-32b1-ad14-f99116ad088e.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 3855 IP address blocks: 199.172.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:a7:20:5b:dd:0f:5e:9c:7b:d9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=650939e0-402f-4094-857f-0fc66285eeda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1a:29:d2:38:4c:d5:19:92:5a:5f:ea:05:71: 2e:d2:a7:47:be:34:8a:d5:1a:0b:93:a6:6f:6b:f8: 17:26:a7:01:42:bc:5f:8d:f5:77:e3:8c:0e:af:26: af:01:2d:97:7c:b7:1d:ae:12:f9:ae:b0:df:32:fb: 63:fa:33:54:f5:66:a1:bb:3f:70:b8:c1:9c:7c:d4: c9:33:58:e9:87:2a:c2:f1:c3:ac:8e:fe:0e:22:7e: 5f:6e:b7:cb:b3:59:5f:cd:12:38:c8:f3:b0:15:9d: df:a1:46:48:58:a2:dc:82:45:7a:a8:17:c3:0d:89: 34:76:86:4d:be:2f:e3:c3:85:08:86:c6:d6:b1:e0: 4b:72:85:3b:a0:d3:91:0e:3a:c6:f1:84:ef:1a:50: 51:5c:d9:d1:77:36:af:30:6e:a6:46:1a:01:db:3f: b5:d4:37:3d:f4:80:95:14:8f:95:ec:f4:b5:22:0f: b5:db:bf:c2:8a:56:3e:80:96:55:e3:3c:60:fa:48: ba:66:29:f5:73:34:4b:11:08:38:72:c6:25:3b:01: c9:a2:f4:cf:de:a7:46:91:e0:58:3d:0a:2f:d3:5a: 66:e3:41:94:77:6f:b3:74:70:c8:13:06:b6:67:1e: 77:53:7f:84:62:c6:8f:d2:fc:f3:ef:2f:1a:96:8c: 07:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:8E:AC:FF:32:DD:77:3C:65:2B:D5:DF:E1:2B:19:29:83:0B:D1:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/25e6f460-c894-32b1-ad14-f99116ad088e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:87:07:9a:3b:ed:02:c4:3f:b8:07:5b:aa:35:2e:c7:df:6d: 44:90:76:b3:0e:6b:51:3a:c9:69:a3:b1:49:27:c2:7c:26:67: 02:47:0e:51:78:21:ef:6a:f8:4a:8c:b7:c7:47:69:2b:ec:f0: c5:3f:eb:e2:28:7c:f7:ee:d5:50:dc:5c:fd:6f:e6:85:f3:95: ea:9f:56:38:b8:61:db:a1:4e:d9:9e:3c:3a:21:da:ce:d0:17: ab:39:07:f5:b9:dd:81:95:19:cb:ee:f8:04:7a:dc:ca:a3:f7: 1a:9b:bb:e5:5d:02:45:d2:b6:56:88:d3:b0:b1:6e:18:5c:4d: a8:e0:3f:a6:b5:bf:6d:07:1e:dd:46:af:80:8d:25:28:d1:e4: 6c:45:db:e8:65:a3:2b:cd:8a:74:5d:6b:1a:70:d3:83:5e:94: 24:50:f7:c0:66:65:76:22:29:09:86:cb:70:7b:2d:76:59:89: 4d:ea:32:4e:d1:2d:4f:62:4f:47:d7:a2:b9:a9:9a:e7:5f:d7: 60:35:98:cb:65:1c:c3:19:e9:5e:5e:b7:53:12:e1:2e:7c:6d: e8:09:c7:df:d3:4f:ae:ca:af:27:5b:0e:1d:7c:fe:74:80:6e: da:d8:05:ed:cf:cf:5b:e5:5c:62:4b:12:25:dd:3e:d8:0b:b8: 2d:4c:07:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVqcgW90PXpx72cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk NjUwOTM5ZTAtNDAyZi00MDk0LTg1N2YtMGZjNjYyODVlZWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxop0jhM1RmSWl/qBXEu0qdHvjSK1RoLk6Zv a/gXJqcBQrxfjfV344wOryavAS2XfLcdrhL5rrDfMvtj+jNU9Wahuz9wuMGcfNTJ M1jphyrC8cOsjv4OIn5fbrfLs1lfzRI4yPOwFZ3foUZIWKLcgkV6qBfDDYk0doZN vi/jw4UIhsbWseBLcoU7oNORDjrG8YTvGlBRXNnRdzavMG6mRhoB2z+11Dc99ICV FI+V7PS1Ig+127/CilY+gJZV4zxg+ki6Zin1czRLEQg4csYlOwHJovTP3qdGkeBY PQov01pm40GUd2+zdHDIEwa2Zx53U3+EYsaP0vzz7y8alowH3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqOrP8y3Xc8ZSvV3+ErGSmDC9HvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjVlNmY0NjAtYzg5NC0z MmIxLWFkMTQtZjk5MTE2YWQwODhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6z5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaHB5o77QLEP7gHW6o1LsffbUSQdrMOa1E6yWmjsUknwnwmZwJHDlF4 Ie9q+EqMt8dHaSvs8MU/6+IofPfu1VDcXP1v5oXzleqfVji4YduhTtmePDoh2s7Q F6s5B/W53YGVGcvu+AR63Mqj9xqbu+VdAkXStlaI07CxbhhcTajgP6a1v20HHt1G r4CNJSjR5GxF2+hloyvNinRdaxpw04NelCRQ98BmZXYiKQmGy3B7LXZZiU3qMk7R LU9iT0fXormpmudf12A1mMtlHMMZ6V5et1MS4S58begJx9/TT67KrydbDh18/nSA btrYBe3Pz1vlXGJLEiXdPtgLuC1MB7U= -----END CERTIFICATE-----Generated at Wed Nov 5 10:57:34 2025 by rpki-client