$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7aec2931-9b62-39b8-bfdb-e0442fb73808.roa File: 7aec2931-9b62-39b8-bfdb-e0442fb73808.roa (raw, json) Hash identifier: 1NgIKSiteWtV8tY5LuvY3fjuLhs0QrwMW5oYAqUcBmI= Subject key identifier: 9A:5D:0C:FE:24:79:D0:51:6B:49:67:E8:60:ED:D4:5E:F2:1B:87:31 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A9900CF37B0BE93946FA8D300 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7aec2931-9b62-39b8-bfdb-e0442fb73808.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 3855 IP address blocks: 199.172.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:cf:37:b0:be:93:94:6f:a8:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=2da8dd30-4195-4530-9bf7-ad91af9d0aa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:48:09:6d:03:65:b8:02:60:54:71:cd:6b:52: ec:57:e0:20:53:06:88:ca:50:f2:8e:92:81:b6:68: 36:20:82:db:e0:f7:7a:0e:b9:9e:b5:8e:af:7e:f8: 9e:24:e3:e5:06:f9:b8:92:8e:62:de:12:d0:24:d2: c8:54:92:f8:34:e3:9e:35:15:e4:17:3a:02:5c:64: f6:6c:62:31:b2:3a:7a:f0:e8:85:83:4c:21:45:49: 96:44:67:f5:b6:7c:1e:34:c4:96:15:05:e9:e4:fd: 00:a6:48:0d:5f:b5:1f:b1:cc:67:96:3a:2b:10:04: ca:5d:8b:6b:75:37:b7:14:4e:9d:13:fe:88:d3:cd: 88:52:9d:fc:db:c9:da:ea:ac:c3:c6:50:77:87:7d: d5:32:94:50:eb:1c:a0:ba:bb:b2:c0:89:f4:36:5b: c2:be:8c:99:04:22:18:3a:85:48:a2:ff:da:fb:fd: 8b:e2:58:af:a3:93:c5:bf:6f:3f:2b:97:dd:d6:99: dd:dd:ca:9a:2a:0a:60:e7:e4:11:a8:9c:d1:73:e0: 1a:10:84:1c:b0:07:12:d6:1f:ad:ec:2f:67:ae:20: 1e:9d:4c:84:39:b6:74:c8:59:e5:ac:17:7b:44:87: 86:7b:34:a1:a1:40:3d:46:0f:b8:0e:64:b9:ce:e0: 8b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5D:0C:FE:24:79:D0:51:6B:49:67:E8:60:ED:D4:5E:F2:1B:87:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7aec2931-9b62-39b8-bfdb-e0442fb73808.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.172.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:86:26:03:cd:df:12:2b:df:e1:a9:47:ef:03:86:21:0e:1a: 9c:86:6e:74:ce:44:eb:4c:06:af:cf:6c:48:d2:96:32:18:9b: 41:14:78:c7:64:d0:b4:ac:a9:c1:d2:f1:cd:9a:20:36:f7:7f: 4c:0b:29:83:a3:5b:89:e9:3f:40:13:ca:e9:8e:5e:85:46:75: 97:5c:44:99:fb:66:2d:be:9f:ad:17:94:99:bc:e9:b6:bd:0f: cf:cc:df:7e:5c:5a:38:b0:8c:dd:33:5e:d1:33:f0:cb:70:71: 0c:bd:f1:8f:ef:b8:6a:6d:dd:b4:49:70:83:fd:5d:d8:2a:52: 54:e4:f7:81:55:99:4b:3f:4b:72:4b:ef:3d:78:cc:e2:6c:03: 48:c1:41:b9:da:fd:a3:c7:9f:58:2f:69:e1:ff:da:ef:d7:4f: 40:a4:43:63:5f:6f:d6:03:70:6f:42:07:32:07:72:48:63:d5: de:60:5f:5f:ab:86:20:ec:51:45:7b:a4:76:5c:38:fa:52:a2: 37:f1:3d:7c:1a:3a:60:50:9b:cb:f4:0f:28:3b:7c:11:f7:b1: 05:f6:ff:71:e4:e5:22:4e:46:14:a2:33:6e:de:85:1f:88:32: 71:2e:0b:7a:5e:21:7b:d0:f1:02:0f:79:91:16:a8:57:86:ed: 97:a7:67:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAM83sL6TlG+o0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk MmRhOGRkMzAtNDE5NS00NTMwLTliZjctYWQ5MWFmOWQwYWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kgJbQNluAJgVHHNa1LsV+AgUwaIylDyjpKB tmg2IILb4Pd6DrmetY6vfvieJOPlBvm4ko5i3hLQJNLIVJL4NOOeNRXkFzoCXGT2 bGIxsjp68OiFg0whRUmWRGf1tnweNMSWFQXp5P0ApkgNX7UfscxnljorEATKXYtr dTe3FE6dE/6I082IUp3828na6qzDxlB3h33VMpRQ6xyguruywIn0NlvCvoyZBCIY OoVIov/a+/2L4livo5PFv28/K5fd1pnd3cqaKgpg5+QRqJzRc+AaEIQcsAcS1h+t 7C9nriAenUyEObZ0yFnlrBd7RIeGezShoUA9Rg+4DmS5zuCLzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpdDP4kedBRa0ln6GDt1F7yG4cxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvN2FlYzI5MzEtOWI2Mi0z OWI4LWJmZGItZTA0NDJmYjczODA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSGJgPN3xIr3+GpR+8DhiEOGpyGbnTOROtMBq/PbEjSljIYm0EUeMdk 0LSsqcHS8c2aIDb3f0wLKYOjW4npP0ATyumOXoVGdZdcRJn7Zi2+n60XlJm86ba9 D8/M335cWjiwjN0zXtEz8MtwcQy98Y/vuGpt3bRJcIP9XdgqUlTk94FVmUs/S3JL 7z14zOJsA0jBQbna/aPHn1gvaeH/2u/XT0CkQ2Nfb9YDcG9CBzIHckhj1d5gX1+r hiDsUUV7pHZcOPpSojfxPXwaOmBQm8v0Dyg7fBH3sQX2/3Hk5SJORhSiM27ehR+I MnEuC3peIXvQ8QIPeZEWqFeG7ZenZ9A= -----END CERTIFICATE-----Generated at Thu Aug 7 04:42:40 2025 by rpki-client