$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b891d972-7e63-3c32-9ef3-8a8e625d7bcc.roa File: b891d972-7e63-3c32-9ef3-8a8e625d7bcc.roa (raw, json) Hash identifier: yKxA27gxkts0DjEkBTTlLZqsQ+IRk0598n6pPmObm6s= Subject key identifier: 92:45:56:D8:02:0E:C0:9C:FA:53:E9:AA:32:C9:B1:6D:86:4F:FC:4B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A00DAE363F2A49929021B9DC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b891d972-7e63-3c32-9ef3-8a8e625d7bcc.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 22394 IP address blocks: 199.74.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:e3:63:f2:a4:99:29:02:1b:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=4f7e927e-4251-4f78-ba0f-335ec1f615c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:78:48:af:0b:af:77:1b:14:d3:95:8f:75:ee: 99:cd:d3:ba:34:49:16:d3:90:0a:34:4d:e4:af:52: 2d:9c:9c:88:95:24:4a:7b:96:ef:51:92:3d:04:7f: 4a:5d:18:c8:b5:e6:9a:c7:b4:46:e8:15:f9:7b:83: 67:40:27:0c:0c:22:1e:98:39:36:c0:1a:bf:70:6e: ad:44:66:48:c6:0d:c0:7e:0a:4a:10:16:75:4e:6d: 53:4b:5e:55:9c:30:f3:c1:77:c1:6b:79:ba:8d:9e: 68:d5:fa:04:31:9c:34:1f:57:dc:c6:2a:90:8a:8f: a9:8e:c1:a6:f4:1a:88:32:21:e0:76:32:44:ce:de: 2d:8c:94:0f:e7:66:49:3a:49:9b:7d:a2:ef:dd:7f: 4c:62:99:7c:49:f7:91:23:d7:ca:ad:22:b8:74:93: 9b:16:e1:94:01:73:39:40:ef:24:3e:c8:d7:6b:54: 84:bc:a4:cf:0a:68:9e:3a:5b:df:b4:b1:48:90:67: 72:0d:07:b2:ec:d0:49:db:f2:76:ec:59:e1:09:d5: 98:2c:28:ab:02:90:9e:38:88:b5:c6:cc:c9:10:fd: c4:de:17:19:22:59:7b:df:9f:99:f4:3a:9a:7e:46: d4:f3:c3:17:ca:2e:56:b0:ba:6f:2e:f3:3c:08:4a: a7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:45:56:D8:02:0E:C0:9C:FA:53:E9:AA:32:C9:B1:6D:86:4F:FC:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b891d972-7e63-3c32-9ef3-8a8e625d7bcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.74.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:c8:65:85:91:49:26:b6:fc:a6:d1:d8:34:87:38:ad:c8:85: bb:a4:33:e5:f9:5e:6f:e4:7c:79:4e:e7:49:50:e7:2a:3b:aa: eb:ae:dd:92:7c:50:97:f7:03:0a:3a:85:ea:d4:18:0a:98:77: 8e:60:b6:cb:82:ef:8e:41:a9:d0:80:fc:74:da:05:85:93:98: 95:a1:8a:86:61:c8:c1:18:c1:22:5d:5e:29:e0:14:e5:9e:4e: 94:01:02:8a:5c:1f:ff:9d:3d:f3:93:0d:28:f5:14:84:90:c5: d1:60:59:e6:90:18:39:88:35:cd:2e:eb:ec:8e:28:54:3b:52: c6:f3:51:9d:d8:24:28:22:e7:39:b7:9c:a4:33:93:48:36:f3: 8f:51:fc:0f:10:73:09:4e:54:60:97:c4:f2:34:15:7c:36:d2: f8:16:a8:cc:47:44:9c:47:52:b7:40:09:e7:00:4c:0e:ee:cd: 5f:92:c7:7b:c3:7f:7d:bc:7d:2e:f7:bb:01:a7:86:d8:d8:69: 91:2b:c3:cc:b4:e3:e2:6a:4a:fe:88:59:f3:d4:62:a9:b8:1c: e5:ab:7f:c8:ff:78:93:42:32:47:57:be:8d:ed:12:27:5f:ad: c4:47:ad:7b:ab:6d:b9:92:e6:c8:1c:89:8d:be:12:52:f8:22: 8b:77:9b:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2uNj8qSZKQIbncAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk NGY3ZTkyN2UtNDI1MS00Zjc4LWJhMGYtMzM1ZWMxZjYxNWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHhIrwuvdxsU05WPde6ZzdO6NEkW05AKNE3k r1ItnJyIlSRKe5bvUZI9BH9KXRjIteaax7RG6BX5e4NnQCcMDCIemDk2wBq/cG6t RGZIxg3AfgpKEBZ1Tm1TS15VnDDzwXfBa3m6jZ5o1foEMZw0H1fcxiqQio+pjsGm 9BqIMiHgdjJEzt4tjJQP52ZJOkmbfaLv3X9MYpl8SfeRI9fKrSK4dJObFuGUAXM5 QO8kPsjXa1SEvKTPCmieOlvftLFIkGdyDQey7NBJ2/J27FnhCdWYLCirApCeOIi1 xszJEP3E3hcZIll735+Z9DqafkbU88MXyi5WsLpvLvM8CEqnPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJFVtgCDsCc+lPpqjLJsW2GT/xLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjg5MWQ5NzItN2U2My0z YzMyLTllZjMtOGE4ZTYyNWQ3YmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx0qcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbIZYWRSSa2/KbR2DSHOK3IhbukM+X5Xm/kfHlO50lQ5yo7quuu3ZJ8 UJf3Awo6herUGAqYd45gtsuC745BqdCA/HTaBYWTmJWhioZhyMEYwSJdXingFOWe TpQBAopcH/+dPfOTDSj1FISQxdFgWeaQGDmINc0u6+yOKFQ7UsbzUZ3YJCgi5zm3 nKQzk0g2849R/A8QcwlOVGCXxPI0FXw20vgWqMxHRJxHUrdACecATA7uzV+Sx3vD f328fS73uwGnhtjYaZErw8y04+JqSv6IWfPUYqm4HOWrf8j/eJNCMkdXvo3tEidf rcRHrXurbbmS5sgciY2+ElL4Iot3m/s= -----END CERTIFICATE-----Generated at Sun Jun 1 07:35:15 2025 by rpki-client