$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f89cec5-e89a-3548-9551-8e9c47d57b96.roa File: 4f89cec5-e89a-3548-9551-8e9c47d57b96.roa (raw, json) Hash identifier: r3rGD6gST+Xfqw82InjcJGOfwnPlKWjAStA43k16luA= Subject key identifier: 13:4B:A1:95:FB:F5:4C:EC:99:7A:CA:EB:47:09:8E:68:15:34:13:C8 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AC2E1168124A04F3A77F31EB8 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f89cec5-e89a-3548-9551-8e9c47d57b96.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 701 IP address blocks: 206.111.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:16:81:24:a0:4f:3a:77:f3:1e:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=d3f1070c-7c4d-43d9-bb42-61b2ed6b7ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cc:de:62:f8:f5:84:b7:36:8b:8b:11:c7:87: 78:ec:34:f6:4d:a9:69:f3:84:f2:d7:ec:47:03:32: 8f:66:0a:6f:7a:cf:13:5e:a2:c9:43:95:ab:af:53: 81:a5:50:0e:61:c8:ce:67:3b:19:f4:b3:9a:93:f8: a3:38:4a:b5:5f:51:62:28:b3:40:91:1d:63:74:89: 40:60:fb:a3:87:b5:b2:4e:1a:39:e9:19:84:ef:21: 4b:86:52:06:d1:f3:78:08:8d:f3:40:c2:af:35:fb: f3:7a:fb:b2:93:d7:ae:0a:57:f7:a9:fd:7a:ab:67: 28:73:59:e4:3f:67:74:7f:2f:56:f8:72:92:7f:f1: 6e:ab:ce:3b:d9:11:77:9f:a3:48:3d:69:44:a3:28: e0:1d:fb:bd:e7:34:e9:b8:b1:b4:d3:2c:06:80:df: 50:01:91:88:33:e4:93:2b:c4:d1:cc:f2:74:f1:2c: 23:a1:3e:6b:02:53:49:e4:51:ac:ea:34:07:6e:c5: 7a:14:be:02:5c:27:46:dc:fe:fe:c5:86:7b:fb:78: ed:a5:37:dd:f0:a0:53:99:ee:08:a3:4a:cf:f0:fb: 09:e3:f7:06:4a:e3:32:48:ba:04:51:7c:ab:aa:b8: ac:4e:6a:81:9d:64:5e:22:96:0e:e7:ba:f1:bf:51: c0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:4B:A1:95:FB:F5:4C:EC:99:7A:CA:EB:47:09:8E:68:15:34:13:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f89cec5-e89a-3548-9551-8e9c47d57b96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 206.111.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:35:5d:67:56:5a:4f:3f:10:b9:51:22:b3:49:97:02:ff:99: 56:35:cb:58:6d:2a:b2:75:59:aa:0e:24:11:40:16:25:9c:c5: 47:43:3d:57:89:e0:b4:8d:9d:84:84:92:76:7b:a7:37:be:f0: 0a:80:07:83:81:0f:60:5c:43:ba:73:a3:fa:ba:54:54:88:48: 1f:a7:b3:3e:90:3b:47:ae:78:f8:02:99:e0:c4:9b:fc:5b:33: 4c:15:a4:a0:32:b0:c6:1e:ec:0e:b5:69:1e:db:cf:5d:65:1e: ec:d9:3f:91:b3:eb:75:38:51:48:17:36:bc:07:d5:74:c0:2d: d9:c6:40:71:25:f8:94:cd:5e:7c:c5:bb:c1:ab:d3:4a:56:14: 5e:dd:fa:c5:14:74:8d:2f:35:81:9e:12:4e:fb:8c:f0:80:09: 8c:d3:5c:b2:c2:80:17:ad:cf:80:1e:f6:79:a4:62:06:5c:20: 61:ab:29:95:a4:03:d8:14:07:70:92:6e:d5:01:2b:7e:18:9e: d6:8b:0d:86:e2:d2:f0:e4:48:f9:df:db:8d:0b:9b:f3:6f:b5: b3:e9:92:53:5c:b1:26:df:f7:c3:53:a1:49:0c:5a:c7:f9:6e: 1a:1f:03:e7:9e:bd:7f:bf:60:43:0f:e2:04:89:28:01:6f:92: 22:90:37:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4RaBJKBPOnfzHrgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZDNmMTA3MGMtN2M0ZC00M2Q5LWJiNDItNjFiMmVkNmI3ZWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjczeYvj1hLc2i4sRx4d47DT2Talp84Ty1+xH AzKPZgpves8TXqLJQ5Wrr1OBpVAOYcjOZzsZ9LOak/ijOEq1X1FiKLNAkR1jdIlA YPujh7WyTho56RmE7yFLhlIG0fN4CI3zQMKvNfvzevuyk9euClf3qf16q2coc1nk P2d0fy9W+HKSf/Fuq8472RF3n6NIPWlEoyjgHfu95zTpuLG00ywGgN9QAZGIM+ST K8TRzPJ08SwjoT5rAlNJ5FGs6jQHbsV6FL4CXCdG3P7+xYZ7+3jtpTfd8KBTme4I o0rP8PsJ4/cGSuMySLoEUXyrqrisTmqBnWReIpYO57rxv1HAUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNLoZX79UzsmXrK60cJjmgVNBPIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGY4OWNlYzUtZTg5YS0z NTQ4LTk1NTEtOGU5YzQ3ZDU3Yjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzm8xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKM1XWdWWk8/ELlRIrNJlwL/mVY1y1htKrJ1WaoOJBFAFiWcxUdDPVeJ 4LSNnYSEknZ7pze+8AqAB4OBD2BcQ7pzo/q6VFSISB+nsz6QO0euePgCmeDEm/xb M0wVpKAysMYe7A61aR7bz11lHuzZP5Gz63U4UUgXNrwH1XTALdnGQHEl+JTNXnzF u8Gr00pWFF7d+sUUdI0vNYGeEk77jPCACYzTXLLCgBetz4Ae9nmkYgZcIGGrKZWk A9gUB3CSbtUBK34YntaLDYbi0vDkSPnf240Lm/NvtbPpklNcsSbf98NToUkMWsf5 bhofA+eevX+/YEMP4gSJKAFvkiKQN3Y= -----END CERTIFICATE-----Generated at Sat Aug 9 22:40:34 2025 by rpki-client