$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/889e1dc3-7376-38e7-8389-5e83a3a0926e.roa File: 889e1dc3-7376-38e7-8389-5e83a3a0926e.roa (raw, json) Hash identifier: L0m2tamvwI2q1SQ/yCjPIbnK2kjK6KQAG1Pt0+305MQ= Subject key identifier: 9B:D7:19:29:DC:8E:0B:44:0A:02:5D:F3:F0:02:FE:59:43:AF:D3:54 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A698B1843605A27F155A25100 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/889e1dc3-7376-38e7-8389-5e83a3a0926e.roa Signing time: Sat 05 Jul 2025 01:00:50 +0000 ROA not before: Sat 05 Jul 2025 01:00:50 +0000 ROA not after: Fri 03 Oct 2025 01:00:50 +0000 asID: 0 IP address blocks: 208.198.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:69:8b:18:43:60:5a:27:f1:55:a2:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 5 01:00:50 2025 GMT Not After : Oct 3 01:00:50 2025 GMT Subject: CN=72e7d247-a1b6-400b-9b8e-74b208fd6c47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c4:b9:71:ea:d0:be:d5:63:f0:b4:12:be:51: 63:34:bb:c1:a8:fc:e6:ad:15:28:f2:06:68:a9:46: d3:09:2d:fa:94:80:32:3c:51:ba:ee:bf:2a:cd:1b: 65:fa:1f:5c:11:95:d0:86:9f:34:7b:8f:9d:61:17: 01:e0:59:4f:63:c4:bb:59:ce:f2:f7:a6:52:a2:33: 42:5e:d6:6b:36:ad:b7:ea:92:22:16:c3:b0:b2:19: ce:23:7d:c3:f0:aa:cb:74:1f:fb:a5:3e:a0:bd:10: b7:ec:87:76:f1:99:9c:b5:a9:a2:16:68:0e:d1:7b: 07:ed:1c:8e:d8:8c:59:4d:4a:75:a8:97:fd:31:ce: da:91:ae:82:fe:f5:e0:5c:ae:65:10:07:52:01:d3: 3b:8a:70:00:02:74:eb:ca:ee:90:bd:74:f2:ce:87: 34:9c:f6:7d:c9:dd:0c:3e:e7:90:52:3e:86:08:bf: e0:fd:5f:83:18:d0:a1:81:26:59:90:11:f8:a4:ee: 27:64:89:34:94:d2:ab:ff:9c:aa:ca:a1:14:b2:7d: 7f:39:b4:f3:aa:57:21:c3:56:0a:3b:b9:06:62:45: c2:ce:8b:f8:c9:4b:15:77:e4:fe:1a:2f:7f:16:4d: c5:f1:0a:e7:eb:a2:44:89:d5:76:8e:87:21:c2:56: 8c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D7:19:29:DC:8E:0B:44:0A:02:5D:F3:F0:02:FE:59:43:AF:D3:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/889e1dc3-7376-38e7-8389-5e83a3a0926e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.198.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:f1:2b:b1:99:b9:a1:ad:b4:dd:58:f2:ae:7c:1f:15:47:37: c1:08:a2:d6:45:be:52:88:69:a8:c1:d3:ab:68:c7:2c:20:d8: 31:0a:4e:29:c7:61:22:04:5e:27:93:03:62:f8:9b:79:d5:b1: 65:2f:cc:91:7f:29:e9:f0:a2:70:0d:3d:e3:f9:a4:0d:df:e3: 3f:28:ea:e2:fa:ee:84:2b:28:8e:f1:88:96:c0:65:a0:aa:92: 04:ff:30:b7:64:d1:83:b5:de:be:cb:14:f1:e1:2f:7a:61:1f: 85:87:76:7d:fb:38:89:3c:4d:aa:da:ec:b3:62:d9:62:65:16: b8:d7:90:73:25:b0:3a:09:24:c8:2a:9d:cc:a3:dd:a5:e2:f7: ea:ef:b5:90:59:84:17:01:c4:71:73:5c:6a:8a:48:1b:e2:a2: 69:92:4c:3a:c4:52:dc:3c:0f:51:3a:4b:b9:67:da:ae:50:7f: 55:bd:f8:80:c5:fb:e4:f9:af:7f:86:56:29:45:16:08:1d:fd: 4d:11:85:28:a9:fb:e5:5b:ed:f5:d0:89:bd:a1:4f:c2:75:fa: ae:4a:31:c4:b1:58:7f:92:f6:91:4b:bc:e8:2f:b3:dc:1e:c4: ca:4d:91:cc:e1:56:20:23:19:b6:fd:bc:45:74:d9:60:52:d7: 1e:3c:e2:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppixhDYFon8VWiUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk NzJlN2QyNDctYTFiNi00MDBiLTliOGUtNzRiMjA4ZmQ2YzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cS5cerQvtVj8LQSvlFjNLvBqPzmrRUo8gZo qUbTCS36lIAyPFG67r8qzRtl+h9cEZXQhp80e4+dYRcB4FlPY8S7Wc7y96ZSojNC XtZrNq236pIiFsOwshnOI33D8KrLdB/7pT6gvRC37Id28ZmctamiFmgO0XsH7RyO 2IxZTUp1qJf9Mc7aka6C/vXgXK5lEAdSAdM7inAAAnTryu6QvXTyzoc0nPZ9yd0M PueQUj6GCL/g/V+DGNChgSZZkBH4pO4nZIk0lNKr/5yqyqEUsn1/ObTzqlchw1YK O7kGYkXCzov4yUsVd+T+Gi9/Fk3F8Qrn66JEidV2jochwlaM+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvXGSncjgtECgJd8/AC/llDr9NUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODg5ZTFkYzMtNzM3Ni0z OGU3LTgzODktNWU4M2EzYTA5MjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0MaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfxK7GZuaGttN1Y8q58HxVHN8EIotZFvlKIaajB06toxywg2DEKTinH YSIEXieTA2L4m3nVsWUvzJF/KenwonANPeP5pA3f4z8o6uL67oQrKI7xiJbAZaCq kgT/MLdk0YO13r7LFPHhL3phH4WHdn37OIk8Tara7LNi2WJlFrjXkHMlsDoJJMgq ncyj3aXi9+rvtZBZhBcBxHFzXGqKSBviommSTDrEUtw8D1E6S7ln2q5Qf1W9+IDF ++T5r3+GVilFFggd/U0RhSip++Vb7fXQib2hT8J1+q5KMcSxWH+S9pFLvOgvs9we xMpNkczhViAjGbb9vEV02WBS1x484rw= -----END CERTIFICATE-----Generated at Wed Jul 9 21:54:59 2025 by rpki-client