$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f9f0eb3-d7a3-3052-bab8-f02af054da52.roa File: 0f9f0eb3-d7a3-3052-bab8-f02af054da52.roa (raw, json) Hash identifier: 6t6JpvWAJ2uURELaV42aeTDRLxmjMrdl3837VgfbSxY= Subject key identifier: 14:8A:9A:F1:5B:5B:F7:31:DA:5E:4D:32:7D:AA:39:9C:31:7E:73:47 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285849EB4ACD1EEC595F60A8C98900 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f9f0eb3-d7a3-3052-bab8-f02af054da52.roa Signing time: Tue 20 May 2025 19:39:30 +0000 ROA not before: Tue 20 May 2025 19:39:30 +0000 ROA not after: Mon 18 Aug 2025 19:39:30 +0000 asID: 6167 IP address blocks: 174.214.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:4a:cd:1e:ec:59:5f:60:a8:c9:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: May 20 19:39:30 2025 GMT Not After : Aug 18 19:39:30 2025 GMT Subject: CN=54c7de90-33a0-4ddd-beb0-3f869c00f0ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d9:4c:62:aa:37:25:74:f4:03:80:e9:88:ea: ce:57:98:e4:54:af:cd:ec:e9:96:99:e8:f7:67:37: 78:d7:06:fb:b3:1b:01:54:00:fe:13:8d:44:6f:54: c7:e7:4b:bd:69:f8:be:7a:af:80:85:07:c0:5c:c5: 49:3d:01:9c:1e:4e:52:cb:18:a7:57:9d:19:fd:bd: 5d:f8:1e:63:57:60:40:d3:8b:82:aa:a7:88:6b:63: f1:07:21:c2:ed:50:f6:91:6f:ad:37:7f:05:e3:f1: 06:db:71:8e:0a:47:08:63:0d:87:19:eb:67:b5:81: f4:a9:4d:c6:c0:48:a6:80:bf:15:48:28:1a:c8:c9: fd:84:8a:66:d6:cf:76:92:2f:25:e4:6f:16:12:a6: 7a:7b:99:9b:cf:b6:ad:ed:d8:c7:6b:1f:7b:8d:8e: d1:74:78:ad:06:10:72:58:fd:b5:70:3b:70:d8:ae: 71:b5:6d:f5:75:c4:e4:0a:06:21:53:4b:30:22:06: 0d:43:ff:f9:1a:ec:88:94:2f:e6:ad:b4:4a:75:3d: 4d:5d:fb:60:2b:93:37:16:0a:59:5c:70:6c:9a:cd: c9:37:3f:d6:e6:d4:92:38:90:75:74:3e:34:44:65: c7:4d:aa:dd:f9:02:df:a4:6a:a8:28:b5:95:52:73: 1e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8A:9A:F1:5B:5B:F7:31:DA:5E:4D:32:7D:AA:39:9C:31:7E:73:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f9f0eb3-d7a3-3052-bab8-f02af054da52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.214.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:24:e8:ae:d1:2d:72:8f:74:af:29:16:f6:75:51:4b:2b:d5: 02:88:c1:1a:22:d1:d4:84:eb:59:72:4b:6e:85:da:6e:b7:bb: 57:1b:71:6c:8d:83:75:10:85:07:9a:fe:9f:e5:93:2d:16:f6: f5:a2:ea:5c:69:c4:7b:65:11:15:e7:49:70:f8:38:61:05:85: 64:23:ce:ee:8a:4f:68:fa:80:27:8c:b6:99:37:b9:c4:a1:d2: 67:0b:68:6d:56:9d:f6:2f:9d:2d:f7:6f:27:0f:c7:ec:dd:03: 7c:cd:54:e2:17:8a:b3:18:64:7d:30:74:fc:a7:ee:21:fa:1b: 2d:5f:46:a3:ae:39:2c:9f:76:8a:24:06:13:f7:5e:b2:ec:87: ef:55:d1:c7:cb:23:6d:9a:6c:fd:f1:e2:b5:a9:92:c6:1b:f0: 06:96:f1:ce:6d:95:16:98:96:9c:66:94:f5:2e:99:c0:51:a0: 8b:b3:86:a3:c6:fd:b0:4b:3f:51:6e:eb:e5:56:83:96:b5:68: 64:64:a8:2f:d1:05:79:79:71:f8:6d:ec:68:be:30:53:1f:32: 94:31:65:38:1e:d2:cf:e2:71:8f:2b:e1:50:6c:8d:c5:de:89: 68:d7:5c:16:2d:0e:30:ac:34:65:eb:5c:90:b0:32:43:30:e1: 87:0f:db:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnrSs0e7FlfYKjJiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDUyMDE5MzkzMFoXDTI1MDgxODE5MzkzMFowLzEtMCsGA1UEAxMk NTRjN2RlOTAtMzNhMC00ZGRkLWJlYjAtM2Y4NjljMDBmMGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNlMYqo3JXT0A4DpiOrOV5jkVK/N7OmWmej3 Zzd41wb7sxsBVAD+E41Eb1TH50u9afi+eq+AhQfAXMVJPQGcHk5SyxinV50Z/b1d +B5jV2BA04uCqqeIa2PxByHC7VD2kW+tN38F4/EG23GOCkcIYw2HGetntYH0qU3G wEimgL8VSCgayMn9hIpm1s92ki8l5G8WEqZ6e5mbz7at7djHax97jY7RdHitBhBy WP21cDtw2K5xtW31dcTkCgYhU0swIgYNQ//5GuyIlC/mrbRKdT1NXftgK5M3FgpZ XHBsms3JNz/W5tSSOJB1dD40RGXHTard+QLfpGqoKLWVUnMe7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSKmvFbW/cx2l5NMn2qOZwxfnNHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGY5ZjBlYjMtZDdhMy0z MDUyLWJhYjgtZjAyYWYwNTRkYTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8k6K7RLXKPdK8pFvZ1UUsr1QKIwRoi0dSE61lyS26F2m63u1cbcWyN g3UQhQea/p/lky0W9vWi6lxpxHtlERXnSXD4OGEFhWQjzu6KT2j6gCeMtpk3ucSh 0mcLaG1WnfYvnS33bycPx+zdA3zNVOIXirMYZH0wdPyn7iH6Gy1fRqOuOSyfdook BhP3XrLsh+9V0cfLI22abP3x4rWpksYb8AaW8c5tlRaYlpxmlPUumcBRoIuzhqPG /bBLP1Fu6+VWg5a1aGRkqC/RBXl5cfht7Gi+MFMfMpQxZTge0s/icY8r4VBsjcXe iWjXXBYtDjCsNGXrXJCwMkMw4YcP26s= -----END CERTIFICATE-----Generated at Tue Jul 1 21:19:42 2025 by rpki-client