$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5721743a-a34d-3f19-9ea4-b329594c3704.roa File: 5721743a-a34d-3f19-9ea4-b329594c3704.roa (raw, json) Hash identifier: 5Drvt0rHiKwH0/r/5Crja9iGeQWAZmgPpnuCSDN6Qmo= Subject key identifier: 64:EA:85:B2:0C:B2:E4:4C:2D:3C:01:05:60:99:86:A0:2E:D5:53:07 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849E225435386FC401CC568A680 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5721743a-a34d-3f19-9ea4-b329594c3704.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 701 IP address blocks: 151.200.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:43:53:86:fc:40:1c:c5:68:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=0fb3e773-42f1-49c1-a162-fa3074044eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c7:ab:3d:92:18:c6:6b:0e:0f:49:6d:03:6e: fa:10:9c:c0:3e:a7:c3:52:5a:79:3c:87:d7:1b:47: 77:ec:0c:32:96:3c:2d:a5:ad:97:81:bf:aa:05:03: 67:4b:01:57:19:3a:29:fc:9b:f9:e9:66:f1:c5:98: d5:b8:12:21:b9:66:79:9b:2d:45:5e:a4:1e:f7:75: 8f:f6:d0:3c:2d:8a:e9:de:f7:83:e4:82:49:40:a1: 11:77:5d:aa:0f:29:bc:5f:3f:83:bb:6b:42:0b:a7: 8f:2f:aa:f9:93:72:11:e6:91:d5:4a:c9:2f:56:c5: e4:84:b6:a8:14:90:b1:89:2e:e5:87:ea:93:c2:02: 89:9c:c1:d6:8a:41:41:9a:a9:20:84:a0:49:f8:bc: 80:07:46:c5:d7:28:f4:3a:69:2d:9b:3f:b2:b6:2b: eb:67:73:d6:93:fd:e0:b4:00:dd:99:43:27:c6:ef: 27:eb:9d:a1:6a:76:e6:93:3f:9b:28:69:af:e5:9b: 60:6f:97:36:4a:0a:ad:0b:25:e9:e3:b3:b6:4f:39: 51:bf:ff:10:ff:28:e8:90:52:8f:1f:4d:7f:12:2d: 1d:58:57:14:02:31:55:49:c0:ed:c7:fb:bf:77:7f: 4c:e9:87:dc:7e:f1:2a:40:9b:83:dc:8e:46:6d:70: 57:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:EA:85:B2:0C:B2:E4:4C:2D:3C:01:05:60:99:86:A0:2E:D5:53:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5721743a-a34d-3f19-9ea4-b329594c3704.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 151.200.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:b0:5f:46:f5:44:e6:c2:78:38:90:2c:29:19:15:15:b3:b4: c6:21:06:12:17:12:40:e2:63:1c:93:94:53:52:a0:2e:42:66: 00:a4:9d:25:7e:cc:d7:0e:f7:54:1c:2b:20:0c:3d:86:61:7f: 6e:b9:bb:33:28:5a:83:21:91:b9:33:ae:eb:3d:1e:20:fa:47: 05:e8:dc:c7:23:fb:81:80:54:ac:b9:6a:b8:b6:da:d3:36:7c: 18:16:f2:db:59:ed:e1:d5:28:58:26:01:32:dd:62:46:b2:3a: 93:1e:45:02:18:90:92:fb:d4:95:2c:66:10:0f:da:b1:90:ba: 46:96:ea:65:9a:51:0c:3d:d8:41:aa:83:ec:d0:44:ee:95:bc: 60:0a:71:44:75:fb:41:1b:d1:2f:fe:81:7d:4f:a3:1c:72:bc: 38:96:52:0a:b6:40:e6:ca:c1:06:d2:2d:81:9a:95:fd:80:14: 49:d0:c3:d3:ca:a8:7d:c6:c9:4a:b9:f3:5f:56:6f:60:c7:18: 5f:82:49:e0:f3:cc:31:b0:04:39:5b:f9:27:51:45:c1:fa:9b: e1:6a:04:f6:a5:b6:c7:9a:b8:dc:01:be:dc:c9:27:31:2b:da: 21:c3:4d:5f:e7:7d:76:63:f0:f8:ed:3c:16:6e:fd:20:43:dd: b2:1f:ae:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJUNThvxAHMVopoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk MGZiM2U3NzMtNDJmMS00OWMxLWExNjItZmEzMDc0MDQ0ZWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqserPZIYxmsOD0ltA276EJzAPqfDUlp5PIfX G0d37Awyljwtpa2Xgb+qBQNnSwFXGTop/Jv56WbxxZjVuBIhuWZ5my1FXqQe93WP 9tA8LYrp3veD5IJJQKERd12qDym8Xz+Du2tCC6ePL6r5k3IR5pHVSskvVsXkhLao FJCxiS7lh+qTwgKJnMHWikFBmqkghKBJ+LyAB0bF1yj0Omktmz+ytivrZ3PWk/3g tADdmUMnxu8n652hanbmkz+bKGmv5Ztgb5c2SgqtCyXp47O2TzlRv/8Q/yjokFKP H01/Ei0dWFcUAjFVScDtx/u/d39M6YfcfvEqQJuD3I5GbXBXvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTqhbIMsuRMLTwBBWCZhqAu1VMHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTcyMTc0M2EtYTM0ZC0z ZjE5LTllYTQtYjMyOTU5NGMzNzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl8jHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiwX0b1RObCeDiQLCkZFRWztMYhBhIXEkDiYxyTlFNSoC5CZgCknSV+ zNcO91QcKyAMPYZhf265uzMoWoMhkbkzrus9HiD6RwXo3Mcj+4GAVKy5ari22tM2 fBgW8ttZ7eHVKFgmATLdYkayOpMeRQIYkJL71JUsZhAP2rGQukaW6mWaUQw92EGq g+zQRO6VvGAKcUR1+0Eb0S/+gX1PoxxyvDiWUgq2QObKwQbSLYGalf2AFEnQw9PK qH3GyUq5819Wb2DHGF+CSeDzzDGwBDlb+SdRRcH6m+FqBPaltseauNwBvtzJJzEr 2iHDTV/nfXZj8PjtPBZu/SBD3bIfrkY= -----END CERTIFICATE-----Generated at Mon Jun 16 16:48:10 2025 by rpki-client