$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/860520bc-0fc4-332f-8787-78503cad774b.roa File: 860520bc-0fc4-332f-8787-78503cad774b.roa (raw, json) Hash identifier: S6ydo/F9U4YhCGCU+48Yvk+/ahjJRqxoQEYgheCzBqU= Subject key identifier: F1:EF:01:CC:2A:27:8F:B9:92:35:80:73:D8:0F:59:6E:03:12:AF:15 Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Certificate serial: 010D0C9F4328584A90A0C45A92ACBA4AF1A86580 Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/860520bc-0fc4-332f-8787-78503cad774b.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 30133 IP address blocks: 199.6.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:c4:5a:92:ac:ba:4a:f1:a8:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=8d155161-c56a-405f-892a-a9bbb5ce09a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:30:80:ef:bb:dc:09:bb:ab:07:92:5d:e1:01: 86:ea:74:a9:1c:48:22:ca:2e:15:02:b4:60:c6:1c: 50:77:a7:78:9f:20:b0:19:3f:95:4f:e7:d5:06:96: 1c:71:7a:77:67:85:ae:ac:ec:47:4e:b0:23:ac:58: 6c:97:68:ee:b8:0f:8b:2f:65:9b:09:83:a0:c8:b7: 07:67:97:d2:12:b3:0f:fc:21:51:47:a0:a2:78:54: ab:01:c9:26:c7:45:b4:1f:20:6c:5c:72:82:93:38: f1:77:1d:c7:7c:24:1f:8b:10:a5:92:67:e9:82:96: d3:bc:5c:4f:2f:28:41:11:c7:ef:07:2a:50:bc:01: 63:bb:fd:0d:f4:84:63:8e:1a:50:b4:c0:32:ae:36: 1d:c6:e8:97:0f:21:f1:f7:5c:b5:00:5e:3e:95:26: 50:50:90:e9:78:bb:e2:97:49:a5:65:26:19:45:45: bc:5c:05:85:01:a4:ca:d9:b7:e5:3f:3b:c4:25:f9: d6:33:3c:f1:33:4b:79:ad:bf:46:db:93:85:2d:d0: c9:c4:56:17:5a:04:54:90:56:15:26:4f:81:92:16: e9:4c:ff:fa:45:63:7c:bd:48:32:19:be:a9:ef:67: ab:26:17:36:31:db:14:73:41:56:4b:b6:6c:43:3d: d2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:EF:01:CC:2A:27:8F:B9:92:35:80:73:D8:0F:59:6E:03:12:AF:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/860520bc-0fc4-332f-8787-78503cad774b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl X509v3 Authority Key Identifier: keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer sbgp-ipAddrBlock: critical IPv4: 199.6.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:72:22:b4:1d:9d:c6:49:ad:e2:ca:a8:f8:53:5c:4e:68:4e: 74:b9:7f:d2:92:2a:42:ca:75:3c:f0:4a:e8:ef:a8:ac:3a:89: 8f:8f:84:38:f8:64:b3:04:ac:f8:da:f9:ea:1a:fc:52:9e:66: 2f:ee:3a:18:d7:cb:d3:3c:ea:b6:c3:9b:96:80:f2:a5:14:3f: 50:53:7c:17:f3:b6:8e:8c:ac:91:6f:2f:5c:01:73:3f:29:d7: 88:21:37:13:9d:09:96:00:e4:3c:52:de:ba:8c:2e:20:c0:e6: ad:b1:23:d4:df:05:76:96:24:43:fc:f4:0c:df:81:54:91:dd: d8:73:dd:0e:97:26:5c:6b:ec:ed:81:d6:e7:17:a9:a6:77:33: 86:e3:69:15:34:d8:94:84:20:61:bc:f6:21:93:3a:97:e7:a3: e0:25:5e:15:86:fd:cd:0d:c0:c2:7e:5d:fe:5e:d6:1e:b4:1b: 6b:8b:34:01:d1:a1:2d:67:94:91:fd:0c:03:53:cc:b8:15:c4: 9d:b3:37:29:54:57:57:79:99:f2:ce:f8:c2:d1:13:e2:04:01: 90:f2:de:8f:d2:21:6b:bb:3f:55:5e:e2:ae:5f:97:f2:33:f4: ea:1e:e5:fa:02:6b:19:4c:ad:a6:e6:d0:95:7c:96:6c:7c:22: c1:1a:1d:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoMRakqy6SvGoZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk MTc3MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk OGQxNTUxNjEtYzU2YS00MDVmLTg5MmEtYTliYmI1Y2UwOWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjCA77vcCburB5Jd4QGG6nSpHEgiyi4VArRg xhxQd6d4nyCwGT+VT+fVBpYccXp3Z4WurOxHTrAjrFhsl2juuA+LL2WbCYOgyLcH Z5fSErMP/CFRR6CieFSrAckmx0W0HyBsXHKCkzjxdx3HfCQfixClkmfpgpbTvFxP LyhBEcfvBypQvAFju/0N9IRjjhpQtMAyrjYdxuiXDyHx91y1AF4+lSZQUJDpeLvi l0mlZSYZRUW8XAWFAaTK2bflPzvEJfnWMzzxM0t5rb9G25OFLdDJxFYXWgRUkFYV Jk+BkhbpTP/6RWN8vUgyGb6p72erJhc2MdsUc0FWS7ZsQz3S7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHvAcwqJ4+5kjWAc9gPWW4DEq8VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1 NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvODYwNTIwYmMtMGZjNC0z MzJmLTg3ODctNzg1MDNjYWQ3NzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4 ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5 MDQ4MGQxNzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwYCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJyIrQdncZJreLKqPhTXE5oTnS5f9KSKkLKdTzwSujvqKw6iY+PhDj4 ZLMErPja+eoa/FKeZi/uOhjXy9M86rbDm5aA8qUUP1BTfBfzto6MrJFvL1wBcz8p 14ghNxOdCZYA5DxS3rqMLiDA5q2xI9TfBXaWJEP89AzfgVSR3dhz3Q6XJlxr7O2B 1ucXqaZ3M4bjaRU02JSEIGG89iGTOpfno+AlXhWG/c0NwMJ+Xf5e1h60G2uLNAHR oS1nlJH9DANTzLgVxJ2zNylUV1d5mfLO+MLRE+IEAZDy3o/SIWu7P1Ve4q5fl/Iz 9Ooe5foCaxlMrabm0JV8lmx8IsEaHcQ= -----END CERTIFICATE-----Generated at Sun Jul 20 16:29:19 2025 by rpki-client