$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a528171-0fe3-3518-9fb2-5933dc9a5965.roa File: 3a528171-0fe3-3518-9fb2-5933dc9a5965.roa (raw, json) Hash identifier: LwPrVhU17tF8/Gq6pnymocwx2uj1J7uzTkksEr9PKJQ= Subject key identifier: 40:49:8C:B2:18:4D:CC:24:E6:96:08:52:7F:BB:14:60:99:0A:EF:AE Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A126D471416F984982E5D8500 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a528171-0fe3-3518-9fb2-5933dc9a5965.roa Signing time: Tue 03 Jun 2025 20:05:30 +0000 ROA not before: Tue 03 Jun 2025 20:05:30 +0000 ROA not after: Mon 01 Sep 2025 20:05:30 +0000 asID: 3855 IP address blocks: 199.172.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:12:6d:47:14:16:f9:84:98:2e:5d:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 3 20:05:30 2025 GMT Not After : Sep 1 20:05:30 2025 GMT Subject: CN=f5b96e2c-c871-4bd4-9a29-cf3e5e499ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:2a:0d:3d:73:fb:d0:b1:83:ac:87:09:1b:08: 44:9d:b4:e4:e8:ef:93:0d:b4:e9:71:c7:10:bc:6a: 7e:5a:84:27:3f:ff:d9:02:af:ff:52:01:5f:af:5d: 1d:0f:d0:03:d2:db:3f:57:df:5a:4d:17:d4:db:bc: 17:32:19:4a:ee:a5:db:23:95:3e:0b:a1:97:66:77: 63:08:f6:a1:ad:a1:fd:8f:57:1a:d5:42:42:d9:2e: 72:1b:39:a0:ce:bb:02:8f:77:fd:2b:a1:44:f3:eb: d8:f9:ba:87:71:e2:9b:d8:e8:96:9d:48:94:74:96: ee:38:e5:da:67:71:b5:67:3c:ef:55:6a:c6:72:6b: 52:7e:4e:de:9a:18:d5:bf:31:00:18:23:74:f1:c0: c2:69:48:b8:40:06:25:ce:59:50:6a:76:a0:93:7b: 2b:1f:19:82:56:2b:0a:26:8b:fa:55:7f:48:54:46: d1:5c:1b:9d:52:cb:97:c8:a8:aa:d5:b9:56:e0:09: 44:bb:a9:33:cf:07:06:df:18:a5:cf:25:d9:70:d8: 66:c6:1b:d0:73:07:54:cc:fc:cd:05:07:bb:90:06: 2e:4c:d0:0b:ed:7f:24:1d:8e:40:ab:67:c2:53:2b: ef:60:3c:65:46:46:74:0e:b1:c9:d4:06:68:cf:9c: 38:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:49:8C:B2:18:4D:CC:24:E6:96:08:52:7F:BB:14:60:99:0A:EF:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a528171-0fe3-3518-9fb2-5933dc9a5965.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:65:9a:7f:10:d8:6a:72:80:ae:89:84:d1:b5:c9:8d:16:38: 04:f4:9e:71:75:a7:43:e5:67:d1:ef:32:db:92:8f:47:15:aa: 6c:d0:03:12:09:e3:24:8d:3e:e1:cc:02:db:0d:f2:47:a5:d3: 6e:4c:4b:a5:35:4a:6d:f6:9e:ba:af:35:7d:65:2a:1d:66:d5: af:d0:f3:99:a4:26:00:d8:8a:48:af:03:ab:c4:49:93:df:a0: 84:b2:bd:f6:8a:39:7d:d9:43:47:25:20:62:fb:84:da:41:e2: 28:d4:c3:9d:07:42:4b:c1:90:0c:77:f3:06:34:9a:02:71:98: a4:8d:bb:59:15:15:d9:89:14:dd:10:00:be:2e:0b:8e:21:72: 3b:c8:a5:ed:a9:ac:b7:c7:af:10:9a:78:87:a5:c3:a9:cf:78: 2c:b9:ff:18:f5:d7:d8:9b:da:b9:ba:97:94:c1:6c:e4:e6:14: 84:c3:6f:b9:30:82:7a:96:49:59:59:7a:8b:08:81:d8:41:20: 0a:49:d2:de:d1:4a:44:d5:16:75:74:6a:ab:0c:49:88:fd:bf: 20:a7:4a:45:47:ab:eb:88:fd:eb:bd:b1:9e:06:66:1a:56:3f: e5:f9:9c:65:33:88:ec:a0:c3:a9:6d:da:66:3b:4f:b1:75:ac: 44:80:ae:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoSbUcUFvmEmC5dhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYwMzIwMDUzMFoXDTI1MDkwMTIwMDUzMFowLzEtMCsGA1UEAxMk ZjViOTZlMmMtYzg3MS00YmQ0LTlhMjktY2YzZTVlNDk5YmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yoNPXP70LGDrIcJGwhEnbTk6O+TDbTpcccQ vGp+WoQnP//ZAq//UgFfr10dD9AD0ts/V99aTRfU27wXMhlK7qXbI5U+C6GXZndj CPahraH9j1ca1UJC2S5yGzmgzrsCj3f9K6FE8+vY+bqHceKb2OiWnUiUdJbuOOXa Z3G1ZzzvVWrGcmtSfk7emhjVvzEAGCN08cDCaUi4QAYlzllQanagk3srHxmCVisK Jov6VX9IVEbRXBudUsuXyKiq1blW4AlEu6kzzwcG3xilzyXZcNhmxhvQcwdUzPzN BQe7kAYuTNAL7X8kHY5Aq2fCUyvvYDxlRkZ0DrHJ1AZoz5w4LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBJjLIYTcwk5pYIUn+7FGCZCu+uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2E1MjgxNzEtMGZlMy0z NTE4LTlmYjItNTkzM2RjOWE1OTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRlmn8Q2GpygK6JhNG1yY0WOAT0nnF1p0PlZ9HvMtuSj0cVqmzQAxIJ 4ySNPuHMAtsN8kel025MS6U1Sm32nrqvNX1lKh1m1a/Q85mkJgDYikivA6vESZPf oISyvfaKOX3ZQ0clIGL7hNpB4ijUw50HQkvBkAx38wY0mgJxmKSNu1kVFdmJFN0Q AL4uC44hcjvIpe2prLfHrxCaeIelw6nPeCy5/xj119ib2rm6l5TBbOTmFITDb7kw gnqWSVlZeosIgdhBIApJ0t7RSkTVFnV0aqsMSYj9vyCnSkVHq+uI/eu9sZ4GZhpW P+X5nGUziOygw6lt2mY7T7F1rESArs8= -----END CERTIFICATE-----Generated at Tue Jun 17 22:04:04 2025 by rpki-client