$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6d8378a6-7850-3b7d-8e57-654352e2ba53.roa File: 6d8378a6-7850-3b7d-8e57-654352e2ba53.roa (raw, json) Hash identifier: xcOi2qwx1MKjVvNVmEE2x+sXjuUVmaECBxsSJo2seD0= Subject key identifier: C6:CB:3C:93:14:7D:E2:2F:C8:9D:7D:7F:81:A5:3F:14:59:68:56:B2 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A126D46B05BE44B4C53D8E300 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6d8378a6-7850-3b7d-8e57-654352e2ba53.roa Signing time: Tue 03 Jun 2025 20:05:29 +0000 ROA not before: Tue 03 Jun 2025 20:05:29 +0000 ROA not after: Mon 01 Sep 2025 20:05:29 +0000 asID: 3855 IP address blocks: 199.172.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:12:6d:46:b0:5b:e4:4b:4c:53:d8:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 3 20:05:29 2025 GMT Not After : Sep 1 20:05:29 2025 GMT Subject: CN=cc910ce2-6d09-4546-a920-317360b6b350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:13:29:91:cd:c1:1f:50:33:2b:8d:2c:bd:88: 5d:1b:9c:96:90:9f:5b:87:f2:99:a6:e0:67:4f:f3: d2:4d:b9:6b:1e:22:93:08:d2:81:34:43:44:81:5f: 96:d7:05:e8:14:91:07:ab:2b:94:9a:9e:12:c2:71: 01:7b:02:ea:09:04:9c:0b:ea:cd:a0:57:40:ed:74: a2:38:19:f8:7c:69:7d:8d:13:8a:55:e8:52:4c:c0: 27:b2:91:01:12:d7:2e:1f:ba:ff:c8:02:cc:60:cc: 34:f0:cc:4d:98:d4:fd:be:82:d6:0b:61:9b:35:de: af:59:a7:b1:b1:25:29:01:4f:63:d4:d3:ac:b5:59: f9:68:64:75:74:10:00:08:c8:6e:89:da:9f:4b:d5: 90:b7:ba:36:88:49:cb:33:50:73:c9:73:3b:f5:13: 18:a1:fa:af:32:fb:60:c4:4b:6c:aa:09:5e:0e:e3: e5:d5:16:0e:1f:f1:44:61:83:8a:ea:95:d3:a2:51: 01:6e:a8:52:9d:86:54:16:34:0f:ed:72:92:5c:e9: 2d:df:5d:a2:4b:d1:8a:7a:80:8e:ed:86:43:2d:21: 8b:a2:59:bc:b2:f4:b3:9a:fc:41:b1:1c:eb:75:d2: 22:29:79:1a:6b:9c:63:2a:24:55:9b:42:1b:f3:7d: 10:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:CB:3C:93:14:7D:E2:2F:C8:9D:7D:7F:81:A5:3F:14:59:68:56:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6d8378a6-7850-3b7d-8e57-654352e2ba53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:76:03:57:f0:23:d1:cb:59:a5:36:6c:bd:6e:6e:ba:fe:2d: de:bb:7d:c3:24:51:e1:12:db:99:b3:df:a5:05:83:62:29:00: 1b:43:43:04:e9:89:05:89:52:1b:8a:73:80:cd:4c:50:b5:4b: 30:eb:57:a0:c3:77:4e:f2:12:56:ba:9f:e6:9a:17:bd:8d:14: a6:b6:ee:19:e1:54:46:bd:43:75:25:1a:a1:a6:8f:7b:0d:89: 2a:e0:25:5c:7f:20:a8:c1:4d:65:50:9b:a4:24:d6:05:54:01: e5:69:a5:95:a7:f0:af:f7:c2:f7:f2:68:e2:30:67:9b:7d:83: be:87:da:cc:d8:60:b7:1c:d1:15:80:c4:16:49:43:af:ae:b3: 83:c7:9c:aa:cb:6d:10:2f:bd:4e:e6:bb:0e:f8:e3:d4:e5:5b: 6f:65:9f:0c:fb:13:85:62:d3:9a:4b:7f:a2:29:b3:5f:4b:e9: 9c:5e:62:94:d3:8c:e6:b7:0b:2d:af:79:97:2e:36:87:8e:a3: 05:7f:0b:90:d1:39:1a:c6:50:13:6b:6b:4c:80:f2:d0:72:26: 04:e6:4d:a0:87:23:68:0a:d9:64:bc:45:3b:06:a9:5b:88:b5: 81:9c:0d:ac:35:95:4b:0e:76:32:e3:8f:9c:62:03:e5:35:05: 24:51:6c:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoSbUawW+RLTFPY4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYwMzIwMDUyOVoXDTI1MDkwMTIwMDUyOVowLzEtMCsGA1UEAxMk Y2M5MTBjZTItNmQwOS00NTQ2LWE5MjAtMzE3MzYwYjZiMzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRMpkc3BH1AzK40svYhdG5yWkJ9bh/KZpuBn T/PSTblrHiKTCNKBNENEgV+W1wXoFJEHqyuUmp4SwnEBewLqCQScC+rNoFdA7XSi OBn4fGl9jROKVehSTMAnspEBEtcuH7r/yALMYMw08MxNmNT9voLWC2GbNd6vWaex sSUpAU9j1NOstVn5aGR1dBAACMhuidqfS9WQt7o2iEnLM1BzyXM79RMYofqvMvtg xEtsqgleDuPl1RYOH/FEYYOK6pXTolEBbqhSnYZUFjQP7XKSXOkt312iS9GKeoCO 7YZDLSGLolm8svSzmvxBsRzrddIiKXkaa5xjKiRVm0Ib830QywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbLPJMUfeIvyJ19f4GlPxRZaFayMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNmQ4Mzc4YTYtNzg1MC0z YjdkLThlNTctNjU0MzUyZTJiYTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADp2A1fwI9HLWaU2bL1ubrr+Ld67fcMkUeES25mz36UFg2IpABtDQwTp iQWJUhuKc4DNTFC1SzDrV6DDd07yEla6n+aaF72NFKa27hnhVEa9Q3UlGqGmj3sN iSrgJVx/IKjBTWVQm6Qk1gVUAeVppZWn8K/3wvfyaOIwZ5t9g76H2szYYLcc0RWA xBZJQ6+us4PHnKrLbRAvvU7muw7449TlW29lnwz7E4Vi05pLf6Ips19L6ZxeYpTT jOa3Cy2veZcuNoeOowV/C5DRORrGUBNra0yA8tByJgTmTaCHI2gK2WS8RTsGqVuI tYGcDaw1lUsOdjLjj5xiA+U1BSRRbGY= -----END CERTIFICATE-----Generated at Tue Jun 17 10:41:35 2025 by rpki-client