$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/714e3bd7-31de-32e4-aed1-ae9696b0ae52.roa File: 714e3bd7-31de-32e4-aed1-ae9696b0ae52.roa (raw, json) Hash identifier: JHwjvAmCbiipmS2LkzHNsPyaAPeF1Z00VM/b6rnPkeY= Subject key identifier: D0:D1:7B:2E:16:78:CC:AD:6B:17:06:92:A5:6D:71:40:9B:CC:D4:F7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A9900BD1EDCE7FDC0FA258160 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/714e3bd7-31de-32e4-aed1-ae9696b0ae52.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 3855 IP address blocks: 199.172.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:bd:1e:dc:e7:fd:c0:fa:25:81:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=eec2c6b4-2361-47bc-9cbc-47d1c490706f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:0f:3c:43:37:90:74:d9:6e:23:7c:9a:79:0c: 89:5c:e5:0d:71:f7:90:68:ea:84:ac:2b:5f:74:9b: 96:e7:72:f1:31:3b:aa:ad:ac:f4:26:7c:e9:f0:77: 2e:36:75:73:5a:65:7a:0f:39:5f:0e:72:02:00:bf: 78:78:f4:2b:1b:e9:5b:64:be:69:9a:04:ff:85:45: e2:a0:7d:71:e6:92:bb:bc:51:1f:78:1d:3d:3e:26: 22:0c:b8:51:bb:17:0c:57:78:c5:f2:2e:2e:42:26: a3:9d:21:6f:9e:a7:2e:49:00:b9:67:b6:25:2e:c7: 73:95:10:0b:19:1c:e3:9d:d3:8a:a5:ed:5a:e5:08: 17:ac:4e:5b:2e:9b:6d:5b:32:f8:c8:87:89:e2:fe: 53:9f:4e:3b:ea:36:7c:b7:cf:87:02:d2:d9:54:97: 46:e0:41:6a:68:ed:05:80:f6:5a:f6:2a:3e:9b:32: 55:fd:16:a2:bc:77:2d:f2:2b:e0:19:10:fa:e1:af: a2:b3:89:1e:91:1c:43:b6:ed:26:12:a9:f6:08:83: 81:f9:4c:19:a5:f3:d9:8f:67:1d:34:b1:48:6b:40: 7f:b3:69:04:b9:08:b3:b2:20:49:a5:40:28:08:d8: 09:16:cf:b6:f0:f9:76:4b:ef:d8:60:a2:10:3d:bf: 9a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D1:7B:2E:16:78:CC:AD:6B:17:06:92:A5:6D:71:40:9B:CC:D4:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/714e3bd7-31de-32e4-aed1-ae9696b0ae52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:d6:9d:db:90:ff:a6:1b:d1:12:08:37:9f:0e:6a:fe:a6:af: a2:ea:96:ba:ca:6f:e6:05:c4:e1:37:5c:c1:19:f9:56:4d:5d: 5e:18:a7:a4:91:37:b9:77:8a:af:a6:02:a5:dc:00:b0:b9:8e: 9c:14:c0:19:d3:5f:bf:43:9e:00:14:f7:9c:92:d6:82:78:b3: fa:c9:b1:16:f8:a9:4d:25:3e:27:9c:bc:c8:59:a9:26:e3:e7: 07:7f:9d:4c:cb:dc:18:3a:92:69:0c:f3:90:b1:50:e5:7f:ba: 2a:48:c3:fb:88:97:06:b1:e5:a5:fc:37:16:9f:46:a4:5c:2a: 9e:f8:2c:71:96:87:ca:f9:f8:44:2b:10:3e:8c:7e:49:0d:ca: c7:10:6d:27:1b:d2:8d:db:64:20:27:8c:b5:c7:b5:4b:98:eb: 93:6a:a9:ce:43:5c:45:29:de:39:f8:18:2d:15:32:be:96:36: 20:e4:ef:03:07:2a:43:d2:c8:4c:b0:94:eb:f2:6b:73:4f:c9: c6:6d:ec:cc:18:5f:cd:3b:71:56:d1:91:1f:ba:29:f9:33:29: 30:fa:6c:16:f2:81:91:51:87:36:94:bc:50:47:64:8c:cb:ac: 8e:91:c6:90:d1:06:96:92:9b:f6:aa:a3:fc:64:b9:e1:79:0f: fa:d9:01:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAL0e3Of9wPolgWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk ZWVjMmM2YjQtMjM2MS00N2JjLTljYmMtNDdkMWM0OTA3MDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7g88QzeQdNluI3yaeQyJXOUNcfeQaOqErCtf dJuW53LxMTuqraz0Jnzp8HcuNnVzWmV6DzlfDnICAL94ePQrG+lbZL5pmgT/hUXi oH1x5pK7vFEfeB09PiYiDLhRuxcMV3jF8i4uQiajnSFvnqcuSQC5Z7YlLsdzlRAL GRzjndOKpe1a5QgXrE5bLpttWzL4yIeJ4v5Tn0476jZ8t8+HAtLZVJdG4EFqaO0F gPZa9io+mzJV/RaivHct8ivgGRD64a+is4kekRxDtu0mEqn2CIOB+UwZpfPZj2cd NLFIa0B/s2kEuQizsiBJpUAoCNgJFs+28Pl2S+/YYKIQPb+aHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDRey4WeMytaxcGkqVtcUCbzNT3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzE0ZTNiZDctMzFkZS0z MmU0LWFlZDEtYWU5Njk2YjBhZTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzWnduQ/6Yb0RIIN58Oav6mr6LqlrrKb+YFxOE3XMEZ+VZNXV4Yp6SR N7l3iq+mAqXcALC5jpwUwBnTX79DngAU95yS1oJ4s/rJsRb4qU0lPiecvMhZqSbj 5wd/nUzL3Bg6kmkM85CxUOV/uipIw/uIlwax5aX8NxafRqRcKp74LHGWh8r5+EQr ED6MfkkNyscQbScb0o3bZCAnjLXHtUuY65Nqqc5DXEUp3jn4GC0VMr6WNiDk7wMH KkPSyEywlOvya3NPycZt7MwYX807cVbRkR+6KfkzKTD6bBbygZFRhzaUvFBHZIzL rI6RxpDRBpaSm/aqo/xkueF5D/rZAS4= -----END CERTIFICATE-----Generated at Thu Aug 7 04:34:27 2025 by rpki-client