$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/e06c3740-5674-3b27-b98c-7cbd73aa1d68.roa File: e06c3740-5674-3b27-b98c-7cbd73aa1d68.roa (raw, json) Hash identifier: gjJNTbHZY73P3vA3muD/LuY9vqN96FhE+/9kdNSQugc= Subject key identifier: 45:7B:CA:6E:FD:96:8C:E3:86:D9:40:EC:E6:1F:59:A7:94:81:6B:6C Certificate issuer: /CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Certificate serial: 010D0C9F4328584B2331811051FD7349B84FDA40 Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/e06c3740-5674-3b27-b98c-7cbd73aa1d68.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 32764 IP address blocks: 199.66.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:81:10:51:fd:73:49:b8:4f:da:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=2a43b4f7-aadf-4518-998b-448b63e3a515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:57:62:a8:ba:b8:04:38:19:16:95:35:d6:6b: b0:ac:d8:4d:de:11:23:18:b1:b3:7f:d1:d9:e4:10: 99:b5:1c:06:be:b3:ea:15:e6:6d:b0:73:12:10:d3: ff:a6:79:12:5a:2d:ea:10:35:c2:ce:a0:95:08:4b: ab:f5:65:6c:b2:8c:64:94:ef:a2:46:1c:33:d5:a8: 7c:f1:63:90:da:5e:46:96:a9:41:16:0e:7e:54:68: 1f:8c:ae:06:2d:a4:44:98:ba:5a:9c:a5:1e:12:8e: c4:67:a9:cd:60:98:6d:95:a2:2a:57:77:fc:1c:d6: 89:d6:ec:71:eb:d7:ef:bf:d0:66:40:45:81:97:2c: eb:7c:7a:f8:85:68:a0:a1:a5:5e:19:7e:4e:5d:ef: 0d:bf:b1:44:3f:d9:42:85:0c:c4:8d:b0:f4:bc:1f: 3c:ea:b2:81:43:be:72:44:ed:13:7a:b7:17:36:d3: bd:aa:c8:e0:b0:58:8b:c2:0d:d3:32:f5:78:aa:11: dd:f7:4c:24:fb:ae:0f:fd:ba:01:ed:eb:03:ff:ff: 6c:42:4a:d6:c0:89:75:c7:64:3f:85:f8:93:c3:19: fb:fd:28:aa:99:5e:9b:86:ee:15:3c:7a:2b:8a:53: 0b:bb:1b:32:3e:93:a3:f8:66:13:e1:6f:4e:99:d1: 3c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7B:CA:6E:FD:96:8C:E3:86:D9:40:EC:E6:1F:59:A7:94:81:6B:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/e06c3740-5674-3b27-b98c-7cbd73aa1d68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl X509v3 Authority Key Identifier: keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer sbgp-ipAddrBlock: critical IPv4: 199.66.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:69:59:80:41:b4:ba:d2:70:7d:71:d2:fe:ee:cd:96:95:46: ad:64:58:53:8f:7b:43:38:07:f0:53:49:62:a3:21:90:c4:56: e9:83:67:81:2f:35:d4:14:77:2e:2a:0d:f4:1a:07:29:3a:29: db:70:01:ef:7e:4e:f1:45:96:49:cd:6b:8c:1f:6a:a3:ca:13: 7e:9a:f7:b6:ee:5d:8b:a6:8b:50:21:0b:bc:09:02:7f:e1:5b: b3:5f:bb:46:c0:d8:f8:7a:27:73:01:8e:38:06:cb:92:52:b6: 35:a1:69:db:0d:f1:8e:8c:e8:80:81:f9:9d:7a:8e:4e:96:bd: 03:c7:c7:74:b4:9b:7a:35:b3:07:a1:0e:b4:8d:f6:e0:b4:32: b1:9a:72:6e:bf:c9:2a:93:76:7e:01:93:f1:25:42:bb:24:18: 57:56:83:2c:bd:73:95:01:e1:be:d5:74:a9:d3:7a:c6:a8:a9: f4:87:28:30:a6:8f:4d:89:bf:43:52:52:bb:95:0f:9f:58:41: ba:34:2e:c0:72:55:17:be:7a:b7:4f:c2:c6:79:0d:b2:74:e2: d3:b9:38:fb:04:c2:42:d1:25:b7:bf:40:af:c6:e7:5a:f6:6f: c0:64:69:34:6d:2f:89:f7:45:7a:4e:61:d6:7b:90:40:79:13: 5f:01:1b:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMYEQUf1zSbhP2kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjOGFhN2ItZmFjNy00NDM1LTk1ZGYtZjAxMjAwZGE0 N2Q5MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk MmE0M2I0ZjctYWFkZi00NTE4LTk5OGItNDQ4YjYzZTNhNTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVdiqLq4BDgZFpU11muwrNhN3hEjGLGzf9HZ 5BCZtRwGvrPqFeZtsHMSENP/pnkSWi3qEDXCzqCVCEur9WVssoxklO+iRhwz1ah8 8WOQ2l5GlqlBFg5+VGgfjK4GLaREmLpanKUeEo7EZ6nNYJhtlaIqV3f8HNaJ1uxx 69fvv9BmQEWBlyzrfHr4hWigoaVeGX5OXe8Nv7FEP9lChQzEjbD0vB886rKBQ75y RO0TercXNtO9qsjgsFiLwg3TMvV4qhHd90wk+64P/boB7esD//9sQkrWwIl1x2Q/ hfiTwxn7/SiqmV6bhu4VPHorilMLuxsyPpOj+GYT4W9OmdE8HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEV7ym79lozjhtlA7OYfWaeUgWtsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83M2M4 YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEyMDBkYTQ3ZDkvZTA2YzM3NDAtNTY3NC0z YjI3LWI5OGMtN2NiZDczYWExZDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzNjOGFhN2ItZmFjNy00NDM1LTk1 ZGYtZjAxMjAwZGE0N2Q5LzczYzhhYTdiLWZhYzctNDQzNS05NWRmLWYwMTIwMGRh NDdkOS5jcmwwHwYDVR0jBBgwFoAU479wIdxEWa9cY/l4RGY3xgpdsxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83M2M4YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEy MDBkYTQ3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0K/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVpWYBBtLrScH1x0v7uzZaVRq1kWFOPe0M4B/BTSWKjIZDEVumDZ4Ev NdQUdy4qDfQaByk6KdtwAe9+TvFFlknNa4wfaqPKE36a97buXYumi1AhC7wJAn/h W7Nfu0bA2Ph6J3MBjjgGy5JStjWhadsN8Y6M6ICB+Z16jk6WvQPHx3S0m3o1sweh DrSN9uC0MrGacm6/ySqTdn4Bk/ElQrskGFdWgyy9c5UB4b7VdKnTesaoqfSHKDCm j02Jv0NSUruVD59YQbo0LsByVRe+erdPwsZ5DbJ04tO5OPsEwkLRJbe/QK/G51r2 b8BkaTRtL4n3RXpOYdZ7kEB5E18BG5A= -----END CERTIFICATE-----Generated at Wed Oct 8 23:36:58 2025 by rpki-client