$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4bf20ecc-8502-3c28-88ab-5115085485ba.roa File: 4bf20ecc-8502-3c28-88ab-5115085485ba.roa (raw, json) Hash identifier: n4PIjDAGrn2+HGegojyxtdU6w/fTLMlwURw0CHuPkvs= Subject key identifier: CF:48:02:F6:32:47:4A:D4:93:0B:9B:88:12:B5:1A:4F:A4:12:8B:8F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A9900BC48312CE21E9E560FE0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4bf20ecc-8502-3c28-88ab-5115085485ba.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 3855 IP address blocks: 199.172.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:bc:48:31:2c:e2:1e:9e:56:0f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=608b742b-97f9-4241-8e9c-9258cb18d2a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ba:19:83:71:0f:a6:fe:d0:06:d2:cf:96:4f: a9:13:27:a3:a9:e6:a1:b7:54:eb:c6:d7:27:06:64: 8d:cf:bc:60:25:55:60:b1:b5:c8:b6:a1:2d:ac:5a: 39:54:a8:74:f0:16:75:90:ed:88:a0:38:7d:66:1d: 79:6e:e3:90:a9:35:82:93:67:20:31:82:02:4b:d0: c3:7e:ed:91:c7:cc:2c:ee:30:13:fc:d3:d1:f3:d1: d3:04:52:1b:de:61:87:a6:c8:05:a2:37:16:77:9d: c3:b9:07:82:af:a9:8c:b8:b3:99:40:8e:94:57:b3: eb:25:8c:27:ec:bb:fd:b2:ae:81:1b:3a:8a:a6:92: aa:3d:7d:b3:38:dc:c1:c7:40:1d:4d:d1:9f:7e:82: c3:3a:28:ce:d3:00:75:e5:4f:83:ef:4c:6a:66:0a: d8:e9:df:12:60:c3:65:67:0e:f5:88:d3:07:8c:20: eb:8c:91:54:85:75:ef:9c:a2:79:c8:96:d9:36:16: 90:98:78:46:06:8a:c8:e3:31:be:c1:7c:d7:f0:b8: d3:c6:b5:54:7f:a1:04:28:a9:29:34:7f:e5:d6:2b: 9e:41:46:2d:e8:9c:9d:cb:54:b9:3a:07:1b:2d:e4: 51:ed:fd:2a:c3:cd:df:a7:18:3a:e2:95:12:da:1c: bf:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:48:02:F6:32:47:4A:D4:93:0B:9B:88:12:B5:1A:4F:A4:12:8B:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4bf20ecc-8502-3c28-88ab-5115085485ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:02:52:e4:7f:71:f8:9e:3e:bb:94:0a:16:6f:e1:f5:90:77: 23:c9:2d:11:2b:b3:f1:8b:98:27:47:dc:45:d2:5f:03:66:5e: c2:11:e2:31:cd:63:1c:3a:df:08:98:e3:35:12:26:28:0e:05: 57:ff:e9:15:b9:51:fa:d2:39:ac:83:bb:ce:52:7b:95:18:ee: 03:c4:8f:78:99:98:63:f8:ac:e4:4c:fe:8f:3f:4a:2e:da:30: 50:8f:60:5f:92:e3:55:97:dd:8d:6a:61:84:ea:ab:2e:d9:1f: 2a:7b:5f:eb:e6:ca:d8:d7:dc:db:f4:c5:f9:96:5a:9a:ca:ee: e4:5a:8d:0c:13:29:47:cf:48:0c:2c:1a:6c:c9:60:1f:1e:68: 66:02:ad:5f:63:aa:32:72:b4:ec:0f:88:9c:2b:2b:04:57:c9: f3:c3:5d:32:86:d1:b2:48:3f:dd:d6:71:51:65:85:91:eb:69: f5:19:84:03:15:c5:ec:fd:a9:12:a4:03:d2:fb:4f:db:b5:18: 38:48:88:47:49:73:5e:aa:a8:4f:91:86:2b:08:3b:56:ae:10: c3:55:90:bb:e9:86:ae:92:66:52:bc:de:88:9e:0e:8e:d2:91: a6:87:5c:63:88:cb:b1:e7:cb:63:39:22:4f:75:ee:d4:09:47: be:5a:46:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZALxIMSziHp5WD+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk NjA4Yjc0MmItOTdmOS00MjQxLThlOWMtOTI1OGNiMThkMmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLoZg3EPpv7QBtLPlk+pEyejqeaht1Trxtcn BmSNz7xgJVVgsbXItqEtrFo5VKh08BZ1kO2IoDh9Zh15buOQqTWCk2cgMYICS9DD fu2Rx8ws7jAT/NPR89HTBFIb3mGHpsgFojcWd53DuQeCr6mMuLOZQI6UV7PrJYwn 7Lv9sq6BGzqKppKqPX2zONzBx0AdTdGffoLDOijO0wB15U+D70xqZgrY6d8SYMNl Zw71iNMHjCDrjJFUhXXvnKJ5yJbZNhaQmHhGBorI4zG+wXzX8LjTxrVUf6EEKKkp NH/l1iueQUYt6Jydy1S5OgcbLeRR7f0qw83fpxg64pUS2hy/KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9IAvYyR0rUkwubiBK1Gk+kEouPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGJmMjBlY2MtODUwMi0z YzI4LTg4YWItNTExNTA4NTQ4NWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgCUuR/cfiePruUChZv4fWQdyPJLRErs/GLmCdH3EXSXwNmXsIR4jHN Yxw63wiY4zUSJigOBVf/6RW5UfrSOayDu85Se5UY7gPEj3iZmGP4rORM/o8/Si7a MFCPYF+S41WX3Y1qYYTqqy7ZHyp7X+vmytjX3Nv0xfmWWprK7uRajQwTKUfPSAws GmzJYB8eaGYCrV9jqjJytOwPiJwrKwRXyfPDXTKG0bJIP93WcVFlhZHrafUZhAMV xez9qRKkA9L7T9u1GDhIiEdJc16qqE+RhisIO1auEMNVkLvphq6SZlK83oieDo7S kaaHXGOIy7Hny2M5Ik917tQJR75aRtY= -----END CERTIFICATE-----Generated at Sat Aug 9 01:05:12 2025 by rpki-client