$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/60fc1c20-f11c-3c0f-be32-0c59e4705579.roa File: 60fc1c20-f11c-3c0f-be32-0c59e4705579.roa (raw, json) Hash identifier: 0OIwLjloAUBsHLSGtxQVXOnrp4oNUZ8zTvj/OCFJC/s= Subject key identifier: 09:FE:9A:6D:F2:40:AB:C8:B4:46:64:2D:46:BE:2A:CB:F8:53:12:18 Certificate issuer: /CN=34b715b9-211f-4bf7-ace9-03b3446775ab Certificate serial: 010D0C9F4328584A82AB4B621D63648909B9CCE0 Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/60fc1c20-f11c-3c0f-be32-0c59e4705579.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 213867 IP address blocks: 199.79.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:4b:62:1d:63:64:89:09:b9:cc:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=98db6da8-abff-4b5c-a18d-c0c4a008aa22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1a:9d:b7:96:a1:7d:c7:d5:1b:d8:2b:15:96: eb:44:00:5b:22:38:b5:62:c3:a1:19:38:74:50:11: 6d:01:d4:3e:38:d6:d8:00:f3:30:3c:fd:4f:09:b8: 11:df:a0:f9:74:48:4c:78:b8:51:e1:71:4a:d7:64: b2:c7:7a:47:bf:8d:76:9e:0d:39:e8:a8:74:ce:81: 8c:7b:6b:e1:e4:f4:49:60:bc:e0:b2:16:4c:f8:4b: 9a:16:4e:85:25:58:b9:50:0d:a2:d6:d7:e6:52:04: cb:08:d2:14:96:99:35:9c:e7:71:46:68:7c:b2:db: 98:bc:cd:70:43:f9:43:4c:df:72:be:0a:26:11:c4: 7d:01:25:15:37:d3:de:e4:c5:fa:8d:59:9b:f2:ff: dc:19:d7:f6:4f:fe:6c:e6:ea:0a:a5:6e:c9:9b:f4: 54:5b:17:8c:e7:8a:94:db:dc:6a:09:8a:55:29:bc: d2:50:14:71:36:c1:49:55:55:ec:1d:c7:80:1b:79: db:9b:60:26:a6:b3:24:99:3e:6b:a3:97:91:ab:26: 52:b0:5a:6e:59:c6:ec:4b:9e:e6:bb:7c:c1:26:e4: 54:16:9d:7b:2d:ed:8d:0f:6e:b7:ae:4d:53:40:ab: 80:d3:1e:9a:37:c5:f4:07:ae:0a:d9:40:61:bc:92: 78:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:FE:9A:6D:F2:40:AB:C8:B4:46:64:2D:46:BE:2A:CB:F8:53:12:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/60fc1c20-f11c-3c0f-be32-0c59e4705579.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl X509v3 Authority Key Identifier: keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer sbgp-ipAddrBlock: critical IPv4: 199.79.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:21:be:03:f7:12:e6:a9:45:87:e8:17:ab:b3:20:fb:1f:04: 49:fb:19:5b:52:db:d9:18:7a:87:0b:a2:b4:c4:e5:75:9d:4a: 97:f4:5e:49:c6:33:b8:88:c2:35:2f:4b:c8:6a:74:b0:cd:1f: b9:54:87:40:1d:32:8f:3b:1c:3a:b9:8e:9b:84:16:cf:50:2a: eb:5a:c9:34:16:47:d3:fc:a0:b2:3b:e6:1e:ea:ab:2e:f9:80: 1a:5d:e3:16:c4:ad:ab:fc:34:78:82:11:99:01:fb:b2:be:32: 5d:1b:93:8a:ec:a2:1e:10:e6:ab:ea:52:ac:eb:23:df:10:92: cf:21:aa:21:2b:a9:a3:83:90:34:e4:4f:01:18:f9:14:96:61: 6d:49:66:0d:fc:0f:c7:bd:5d:b8:1f:62:16:99:88:3e:66:c0: 90:99:c6:8d:b2:37:42:1d:e2:5e:59:a5:bf:01:ba:00:28:52: 27:34:4b:ff:45:04:49:34:36:48:0f:f5:03:2a:2b:a8:4d:a4: 92:72:d0:d7:f2:5a:b1:8d:a2:ae:2d:80:15:e8:ae:42:32:14: 88:dd:f5:39:9b:47:d5:b8:3e:31:ce:9d:d8:6f:81:be:79:22: 42:94:de:1e:71:18:14:4d:96:40:7a:2e:f2:9c:84:99:db:1c: c7:39:94:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqCq0tiHWNkiQm5zOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiNzE1YjktMjExZi00YmY3LWFjZTktMDNiMzQ0Njc3 NWFiMB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk OThkYjZkYTgtYWJmZi00YjVjLWExOGQtYzBjNGEwMDhhYTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphqdt5ahfcfVG9grFZbrRABbIji1YsOhGTh0 UBFtAdQ+ONbYAPMwPP1PCbgR36D5dEhMeLhR4XFK12Syx3pHv412ng056Kh0zoGM e2vh5PRJYLzgshZM+EuaFk6FJVi5UA2i1tfmUgTLCNIUlpk1nOdxRmh8stuYvM1w Q/lDTN9yvgomEcR9ASUVN9Pe5MX6jVmb8v/cGdf2T/5s5uoKpW7Jm/RUWxeM54qU 29xqCYpVKbzSUBRxNsFJVVXsHceAG3nbm2AmprMkmT5ro5eRqyZSsFpuWcbsS57m u3zBJuRUFp17Le2ND263rk1TQKuA0x6aN8X0B64K2UBhvJJ4KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAn+mm3yQKvItEZkLUa+Ksv4UxIYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3 MTViOS0yMTFmLTRiZjctYWNlOS0wM2IzNDQ2Nzc1YWIvNjBmYzFjMjAtZjExYy0z YzBmLWJlMzItMGM1OWU0NzA1NTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzRiNzE1YjktMjExZi00YmY3LWFj ZTktMDNiMzQ0Njc3NWFiLzM0YjcxNWI5LTIxMWYtNGJmNy1hY2U5LTAzYjM0NDY3 NzVhYi5jcmwwHwYDVR0jBBgwFoAUogYtjI8Exo63AC0EODp3n4zrZ6wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3MTViOS0yMTFmLTRiZjctYWNlOS0wM2Iz NDQ2Nzc1YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0/3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKIhvgP3EuapRYfoF6uzIPsfBEn7GVtS29kYeocLorTE5XWdSpf0XknG M7iIwjUvS8hqdLDNH7lUh0AdMo87HDq5jpuEFs9QKutayTQWR9P8oLI75h7qqy75 gBpd4xbErav8NHiCEZkB+7K+Ml0bk4rsoh4Q5qvqUqzrI98Qks8hqiErqaODkDTk TwEY+RSWYW1JZg38D8e9XbgfYhaZiD5mwJCZxo2yN0Id4l5Zpb8BugAoUic0S/9F BEk0NkgP9QMqK6hNpJJy0NfyWrGNoq4tgBXorkIyFIjd9TmbR9W4PjHOndhvgb55 IkKU3h5xGBRNlkB6LvKchJnbHMc5lLg= -----END CERTIFICATE-----Generated at Fri Jul 25 23:39:26 2025 by rpki-client