$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa7db4d2-b023-3264-824d-5a3201d8657d.roa File: aa7db4d2-b023-3264-824d-5a3201d8657d.roa (raw, json) Hash identifier: jQng/OgTFEmxmP3MftVa/B4CKUL0qFLyz6eVxeYbmLc= Subject key identifier: 03:23:4D:EF:C2:E5:30:6F:82:82:5F:4E:0E:86:69:8A:AC:C0:2F:E5 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A698B19470378C9F2A319D080 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa7db4d2-b023-3264-824d-5a3201d8657d.roa Signing time: Sat 05 Jul 2025 01:00:50 +0000 ROA not before: Sat 05 Jul 2025 01:00:50 +0000 ROA not after: Fri 03 Oct 2025 01:00:50 +0000 asID: 17119 IP address blocks: 208.254.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:69:8b:19:47:03:78:c9:f2:a3:19:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 5 01:00:50 2025 GMT Not After : Oct 3 01:00:50 2025 GMT Subject: CN=0230c23c-2693-41a3-b1de-512dd03d422e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:48:f0:9d:67:0d:d7:63:05:4b:04:f1:5c:3d: e8:de:00:18:1b:7c:64:c7:cc:ae:9a:aa:c6:e8:4e: 62:79:73:10:29:49:78:c9:3e:05:b1:4e:cf:d4:4b: 77:c2:46:fe:e0:c7:df:0e:7a:34:2d:a5:2e:44:01: 57:8a:6b:50:2e:fa:91:d4:91:a9:53:d0:f5:42:ba: f4:f6:05:e2:6c:2d:c0:9c:47:a1:e4:0e:4b:d5:6f: c1:08:45:92:48:86:40:7e:52:4a:df:e8:b8:7d:1a: 8b:63:6a:7a:b4:65:53:1e:31:d5:90:a9:44:2e:f8: a4:9a:59:12:f4:c3:e2:34:87:75:28:12:d4:13:f4: a3:31:a0:b5:98:14:94:2a:c6:e6:d6:c9:da:b8:ad: f2:b2:1c:e4:2e:e1:a6:f8:b4:f1:a0:e1:b3:ac:1c: 17:b5:e0:82:40:54:a9:0d:5b:2c:4d:6d:ad:51:7d: 90:06:fe:76:80:01:51:90:a0:83:4f:c0:c8:0a:30: 95:df:10:d4:c1:50:50:e8:cb:d3:1a:77:b5:72:f5: a2:4f:75:f6:2f:8f:a8:37:e3:ff:f0:d6:ee:83:8f: f8:0e:2d:33:69:89:55:b3:76:80:88:97:94:7b:85: 86:28:b3:cf:8c:8e:ec:75:12:61:6c:00:8d:9d:91: af:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:23:4D:EF:C2:E5:30:6F:82:82:5F:4E:0E:86:69:8A:AC:C0:2F:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa7db4d2-b023-3264-824d-5a3201d8657d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.254.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:98:93:aa:ce:2e:89:ce:49:f5:e7:45:b9:1d:69:f2:23:b2: 8b:92:fc:10:f2:52:d2:a6:b2:21:48:66:84:c9:e9:3e:7c:51: c9:e7:b6:93:54:36:9d:65:23:f2:01:a2:60:fa:18:b9:f6:1a: 4d:a1:f1:61:2a:8b:9c:28:36:94:61:c8:15:9c:43:29:70:67: e5:3c:c1:7e:96:b7:ed:92:6b:db:ae:66:8c:48:18:c7:8f:7b: ab:9f:47:8a:43:a7:d4:ca:29:c8:10:31:c3:0b:f5:d3:e6:59: 9e:a6:6b:29:75:6c:ea:ed:b4:3e:14:9b:a2:f1:ff:3c:99:f8: b9:52:53:72:9e:1c:2d:6f:ac:33:31:de:54:15:96:b8:c3:3f: 6f:f3:6a:da:c1:0a:ff:12:cd:c1:ad:52:84:27:f4:41:16:bf: ee:72:ff:3b:1c:4f:52:84:1d:58:2e:9e:e3:92:1c:31:2e:33: d6:29:11:97:26:80:bc:e1:c6:60:be:13:14:0d:18:e4:e9:83: b8:4c:cb:f7:26:ed:5e:20:7d:26:9a:7b:c9:64:7f:cd:db:62: 65:87:0f:19:5e:a5:ec:4e:7e:3e:ab:3b:5b:db:55:1b:95:d8: 83:6b:29:59:38:b6:bb:45:88:85:02:49:2d:24:f1:e6:9b:06: 39:92:2e:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppixlHA3jJ8qMZ0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk MDIzMGMyM2MtMjY5My00MWEzLWIxZGUtNTEyZGQwM2Q0MjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0jwnWcN12MFSwTxXD3o3gAYG3xkx8yumqrG 6E5ieXMQKUl4yT4FsU7P1Et3wkb+4MffDno0LaUuRAFXimtQLvqR1JGpU9D1Qrr0 9gXibC3AnEeh5A5L1W/BCEWSSIZAflJK3+i4fRqLY2p6tGVTHjHVkKlELvikmlkS 9MPiNId1KBLUE/SjMaC1mBSUKsbm1snauK3yshzkLuGm+LTxoOGzrBwXteCCQFSp DVssTW2tUX2QBv52gAFRkKCDT8DICjCV3xDUwVBQ6MvTGne1cvWiT3X2L4+oN+P/ 8Nbug4/4Di0zaYlVs3aAiJeUe4WGKLPPjI7sdRJhbACNnZGvGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMjTe/C5TBvgoJfTg6GaYqswC/lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWE3ZGI0ZDItYjAyMy0z MjY0LTgyNGQtNWEzMjAxZDg2NTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0P7CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWYk6rOLonOSfXnRbkdafIjsouS/BDyUtKmsiFIZoTJ6T58UcnntpNU Np1lI/IBomD6GLn2Gk2h8WEqi5woNpRhyBWcQylwZ+U8wX6Wt+2Sa9uuZoxIGMeP e6ufR4pDp9TKKcgQMcML9dPmWZ6mayl1bOrttD4Um6Lx/zyZ+LlSU3KeHC1vrDMx 3lQVlrjDP2/zatrBCv8SzcGtUoQn9EEWv+5y/zscT1KEHVgunuOSHDEuM9YpEZcm gLzhxmC+ExQNGOTpg7hMy/cm7V4gfSaae8lkf83bYmWHDxlepexOfj6rO1vbVRuV 2INrKVk4trtFiIUCSS0k8eabBjmSLl4= -----END CERTIFICATE-----Generated at Wed Jul 9 21:58:52 2025 by rpki-client