$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08e7bbdc-48ad-30bc-a7fe-1d78a6097808.roa File: 08e7bbdc-48ad-30bc-a7fe-1d78a6097808.roa (raw, json) Hash identifier: dMqLJOtal3VOm5RBEWEv4V5lv9uZTzgnvQk7zeXW0y4= Subject key identifier: 3E:71:55:ED:1B:B4:13:C2:89:86:09:55:AA:F9:D1:E0:D6:D3:72:3F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A6086DC11AA0E99B28D334AC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08e7bbdc-48ad-30bc-a7fe-1d78a6097808.roa Signing time: Tue 01 Jul 2025 19:30:05 +0000 ROA not before: Tue 01 Jul 2025 19:30:05 +0000 ROA not after: Mon 29 Sep 2025 19:30:05 +0000 asID: 6167 IP address blocks: 174.255.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:60:86:dc:11:aa:0e:99:b2:8d:33:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 1 19:30:05 2025 GMT Not After : Sep 29 19:30:05 2025 GMT Subject: CN=0a2f98e1-04db-448e-8914-85fe675f069d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:00:24:b3:7f:5e:d6:bb:a1:9a:1b:60:68:20: 06:5b:19:e2:92:90:41:01:8b:7b:bb:95:f5:78:5e: 8a:83:17:39:b2:16:bf:9a:3e:1f:d2:99:f2:c6:cd: b4:55:2c:56:25:5c:89:c8:b5:f4:c0:61:b5:8c:97: 90:80:53:3b:d6:0c:ae:e1:37:42:72:36:d1:17:1b: 61:dc:6e:d8:35:4f:43:db:72:d5:33:2d:40:3a:0c: cd:6d:5a:cd:0a:c6:39:2f:fa:0e:f5:1b:a0:2c:ee: 98:2c:e6:4d:cf:7c:12:04:53:3b:37:c8:88:10:c6: 99:0d:c8:27:b6:8b:22:ad:68:9b:c9:43:8c:4b:fc: 83:a1:48:fd:73:5b:86:b8:5c:3b:a3:2b:81:5c:1b: 26:c6:5e:7b:da:e6:28:d5:0c:9b:d1:7c:85:46:22: ba:cd:12:80:83:ef:27:b7:fa:1b:34:3e:81:cd:dc: d4:05:e6:fb:9f:b4:b1:e5:d5:09:8e:ee:73:d9:59: a1:f6:f7:9c:88:fc:f1:7c:1a:8d:c4:20:6b:a1:b7: 80:57:f7:b9:45:82:32:b3:58:a7:2c:ce:06:16:bd: f1:8d:ae:b4:fa:8b:e9:16:ae:eb:dc:57:ec:83:36: 8c:0b:39:29:d4:c3:d7:07:33:58:d9:17:19:ca:45: d2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:71:55:ED:1B:B4:13:C2:89:86:09:55:AA:F9:D1:E0:D6:D3:72:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/08e7bbdc-48ad-30bc-a7fe-1d78a6097808.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.255.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:2d:7d:6a:e0:22:eb:7e:77:62:66:28:00:87:ab:e5:16:a2: 95:9e:f5:c7:d9:2b:5d:3b:4d:cb:56:d0:b1:ab:5c:47:16:33: 0e:60:d1:1d:6b:0f:c7:39:77:56:5e:c6:de:b0:f5:d2:84:3b: 8d:78:95:f0:1b:7d:d1:0e:35:d1:ab:ec:8e:86:c4:2e:a4:dd: ea:51:17:25:4c:ab:20:20:5e:93:81:b6:90:cc:4f:d3:5f:0b: 3a:0e:5a:e9:dc:1c:56:7a:32:46:e5:c6:bb:d4:86:3b:e6:fc: 6a:88:ce:97:1e:e9:69:3f:b5:49:79:ee:ab:26:f3:ae:01:0a: d9:62:16:13:63:b8:5a:45:d5:5f:8a:31:3b:43:90:86:ef:30: 48:bf:a4:0f:26:57:b6:4e:6b:0c:10:d8:b5:be:d1:49:66:38: 3d:02:c8:e0:ed:dd:6b:d4:15:d2:dd:fa:a4:1d:fd:88:c4:29: ad:ab:06:8e:16:15:24:0e:6d:22:d7:c4:fc:21:86:e7:4f:78: 7a:c7:29:10:df:a7:40:e0:60:18:11:06:9f:2d:78:f4:14:7a: ea:76:9f:d4:50:96:cc:1c:dc:99:56:28:06:fd:10:e6:db:1c: 9b:df:e2:67:76:8b:a9:55:a0:4e:12:58:fe:a9:c3:66:69:6a: 77:a0:b1:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpghtwRqg6Zso0zSsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcwMTE5MzAwNVoXDTI1MDkyOTE5MzAwNVowLzEtMCsGA1UEAxMk MGEyZjk4ZTEtMDRkYi00NDhlLTg5MTQtODVmZTY3NWYwNjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswAks39e1ruhmhtgaCAGWxnikpBBAYt7u5X1 eF6Kgxc5sha/mj4f0pnyxs20VSxWJVyJyLX0wGG1jJeQgFM71gyu4TdCcjbRFxth 3G7YNU9D23LVMy1AOgzNbVrNCsY5L/oO9RugLO6YLOZNz3wSBFM7N8iIEMaZDcgn tosirWibyUOMS/yDoUj9c1uGuFw7oyuBXBsmxl572uYo1Qyb0XyFRiK6zRKAg+8n t/obND6BzdzUBeb7n7Sx5dUJju5z2Vmh9veciPzxfBqNxCBrobeAV/e5RYIys1in LM4GFr3xja60+ovpFq7r3FfsgzaMCzkp1MPXBzNY2RcZykXSywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5xVe0btBPCiYYJVar50eDW03I/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDhlN2JiZGMtNDhhZC0z MGJjLWE3ZmUtMWQ3OGE2MDk3ODA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrv9wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgtfWrgIut+d2JmKACHq+UWopWe9cfZK107TctW0LGrXEcWMw5g0R1r D8c5d1Zext6w9dKEO414lfAbfdEONdGr7I6GxC6k3epRFyVMqyAgXpOBtpDMT9Nf CzoOWuncHFZ6MkblxrvUhjvm/GqIzpce6Wk/tUl57qsm864BCtliFhNjuFpF1V+K MTtDkIbvMEi/pA8mV7ZOawwQ2LW+0UlmOD0CyODt3WvUFdLd+qQd/YjEKa2rBo4W FSQObSLXxPwhhudPeHrHKRDfp0DgYBgRBp8tePQUeup2n9RQlswc3JlWKAb9EObb HJvf4md2i6lVoE4SWP6pw2Zpanegsfk= -----END CERTIFICATE-----Generated at Thu Jul 3 06:53:10 2025 by rpki-client