$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fcbecf9-9ce0-3e83-9e3e-e077753c9105.roa File: 3fcbecf9-9ce0-3e83-9e3e-e077753c9105.roa (raw, json) Hash identifier: BmW6Gjz4bn7QXbZN/TAhWRrA4jy3D/43aDpI47A2b98= Subject key identifier: 70:14:90:BA:D2:57:AE:6F:AD:CC:09:6C:AE:63:98:25:CF:3D:E6:B3 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AF256A5ED050ECA568ED82100 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fcbecf9-9ce0-3e83-9e3e-e077753c9105.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 3855 IP address blocks: 199.172.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:a5:ed:05:0e:ca:56:8e:d8:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=59e84921-a64f-4139-8f45-5ac749c731ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4a:91:02:a4:f9:85:66:ca:b4:95:39:e9:ed: f0:77:06:02:32:ae:8c:d7:b2:9d:57:91:39:ae:0d: 7b:09:8f:83:84:28:72:55:05:e4:57:ea:bc:54:e4: 41:32:23:93:23:b1:9d:25:08:7c:35:5c:7a:ee:16: 0c:3e:63:76:72:33:5a:a5:d0:b6:6a:73:3c:33:96: 53:99:07:fa:3a:78:a6:aa:ef:ff:3d:7a:58:b1:2c: 3c:6d:1f:c1:0d:c3:b8:29:28:78:e2:fa:15:f6:34: e6:cc:af:e8:b6:77:8c:dc:e0:a9:16:28:8c:a7:c7: 31:6e:20:01:cc:bd:d1:6f:f4:c2:04:95:9e:cd:19: 06:9d:0f:8f:dd:eb:e0:59:da:8f:07:e4:ff:d7:f8: 11:d4:2c:b3:32:28:8c:a4:0d:e2:03:93:db:2b:41: 25:d6:a6:02:e7:a5:ca:c6:b9:cb:b6:5a:3c:10:04: 7e:a0:45:94:53:f1:a5:af:f4:92:9d:c6:de:ae:05: 28:0d:09:6a:8f:f4:94:0f:75:5e:8c:bb:8a:fc:ec: a7:d1:9d:38:31:21:db:31:ac:d0:b2:1e:71:57:fa: b3:f7:76:cc:e0:25:14:d0:e1:aa:fa:93:0d:97:f2: f3:b2:e2:b7:cb:28:7a:5c:ed:cc:f7:9e:a6:ca:15: 4c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:14:90:BA:D2:57:AE:6F:AD:CC:09:6C:AE:63:98:25:CF:3D:E6:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fcbecf9-9ce0-3e83-9e3e-e077753c9105.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:ad:67:96:c4:04:b3:eb:c9:23:98:30:9f:cc:e0:dd:ef:6a: bc:07:45:7f:25:67:fe:e5:85:3b:b9:90:1d:eb:99:b4:b5:ca: 2e:03:11:1f:84:53:3a:c7:76:a3:6c:f2:f8:4f:ec:f7:44:c6: 13:05:66:db:d4:ac:3f:d6:31:eb:09:31:86:51:16:31:90:d4: 9b:8d:97:80:0c:2c:99:12:4f:92:a5:c1:ab:80:07:8a:d8:32: 11:7d:0d:cc:92:b8:de:57:e5:c8:e0:bc:ff:8c:ac:84:f8:de: ff:fa:19:82:5c:66:f3:e2:d2:78:9c:8a:be:c9:93:3c:ed:c2: b9:9e:e0:f1:a1:7f:6f:10:ab:84:c7:9a:48:95:5d:44:1b:c8: 4b:8a:d1:7b:3c:92:76:3d:3f:90:fd:48:4e:c5:81:05:ab:40: f4:65:ee:f6:a5:cb:16:a7:39:2c:7d:b6:fb:48:61:98:45:54: c0:a4:d4:8e:9f:02:8b:2c:cf:43:89:63:9e:4c:2a:56:de:07: a7:6e:7e:27:31:1e:65:0a:25:67:d7:9b:b5:0a:3f:47:3a:1b: 8f:e9:7d:bc:0a:bf:7e:8d:38:a4:c7:61:63:e3:25:3a:ce:34: 88:2a:eb:ba:70:19:86:34:aa:ad:16:18:c7:39:0c:c0:db:8c: 34:51:fd:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVqXtBQ7KVo7YIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk NTllODQ5MjEtYTY0Zi00MTM5LThmNDUtNWFjNzQ5YzczMWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kqRAqT5hWbKtJU56e3wdwYCMq6M17KdV5E5 rg17CY+DhChyVQXkV+q8VORBMiOTI7GdJQh8NVx67hYMPmN2cjNapdC2anM8M5ZT mQf6Onimqu//PXpYsSw8bR/BDcO4KSh44voV9jTmzK/otneM3OCpFiiMp8cxbiAB zL3Rb/TCBJWezRkGnQ+P3evgWdqPB+T/1/gR1CyzMiiMpA3iA5PbK0El1qYC56XK xrnLtlo8EAR+oEWUU/Glr/SSncbergUoDQlqj/SUD3VejLuK/Oyn0Z04MSHbMazQ sh5xV/qz93bM4CUU0OGq+pMNl/LzsuK3yyh6XO3M956myhVMlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAUkLrSV65vrcwJbK5jmCXPPeazMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2ZjYmVjZjktOWNlMC0z ZTgzLTllM2UtZTA3Nzc1M2M5MTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABStZ5bEBLPrySOYMJ/M4N3varwHRX8lZ/7lhTu5kB3rmbS1yi4DER+E UzrHdqNs8vhP7PdExhMFZtvUrD/WMesJMYZRFjGQ1JuNl4AMLJkST5KlwauAB4rY MhF9DcySuN5X5cjgvP+MrIT43v/6GYJcZvPi0nicir7Jkzztwrme4PGhf28Qq4TH mkiVXUQbyEuK0Xs8knY9P5D9SE7FgQWrQPRl7valyxanOSx9tvtIYZhFVMCk1I6f Aossz0OJY55MKlbeB6duficxHmUKJWfXm7UKP0c6G4/pfbwKv36NOKTHYWPjJTrO NIgq67pwGYY0qq0WGMc5DMDbjDRR/QU= -----END CERTIFICATE-----Generated at Wed Nov 5 03:52:47 2025 by rpki-client