$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f9f0eb3-d7a3-3052-bab8-f02af054da52.roa File: 0f9f0eb3-d7a3-3052-bab8-f02af054da52.roa (raw, json) Hash identifier: /QcV80JYu5PSm6vKgTjdvs+/6l9WWy8QBq9PX97XswU= Subject key identifier: EB:87:CC:89:BB:B1:85:80:87:6A:CA:5D:EF:4F:9A:F2:AE:AD:99:EB Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584ACB41205B2A93C1EAFE4D3540 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f9f0eb3-d7a3-3052-bab8-f02af054da52.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 6167 IP address blocks: 174.214.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:20:5b:2a:93:c1:ea:fe:4d:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=1d8a2b90-13f6-4669-8d7e-9fc7b3f91abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1f:23:2c:d1:87:67:e6:b0:0e:54:18:5e:14: 88:75:21:26:69:09:a2:5d:8a:fa:52:95:06:0f:0e: 17:24:e3:86:98:1d:dd:2a:18:9e:c1:db:3e:f5:ce: cd:03:d8:a0:1d:64:6a:9e:3f:ee:95:a8:7a:b6:d1: 42:a6:17:58:9e:90:85:c7:1e:e5:c0:03:e3:76:35: 1e:03:12:6f:a7:f2:10:0b:be:2c:51:0b:28:c6:1b: 31:f3:00:09:f0:f1:a5:11:76:c1:7b:40:d8:59:fe: c3:9c:1b:21:bd:7b:4e:25:f3:85:04:74:02:45:61: 27:0b:59:91:25:2c:43:72:69:d5:4b:c2:8b:b1:79: fa:93:71:5c:df:e0:8b:c2:b3:80:ac:c2:c1:07:2b: b6:7a:00:f2:a8:62:80:66:c6:2d:fe:f0:c9:62:60: 9d:fa:f2:6d:5f:80:be:01:a0:67:cf:11:d7:5c:c4: cd:3d:49:5e:05:1c:a0:d2:49:15:6d:54:f7:1c:73: 28:73:34:a4:3f:e4:06:2e:b4:41:2b:3c:dd:16:79: d3:a6:33:ac:08:53:46:ff:e8:a8:83:31:ee:d2:68: e6:d9:04:89:e3:a2:7c:f3:86:1c:f6:a7:1a:d7:2b: 44:07:ee:fa:a5:45:b2:c1:aa:6f:b2:37:1e:63:e0: 8c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:87:CC:89:BB:B1:85:80:87:6A:CA:5D:EF:4F:9A:F2:AE:AD:99:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f9f0eb3-d7a3-3052-bab8-f02af054da52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.214.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:42:67:da:2f:a9:fb:7f:43:07:c0:a5:0e:65:56:10:94:d9: ac:30:22:94:af:0e:fb:7c:f1:6b:57:19:81:af:40:e9:f2:1c: a0:a4:29:9a:69:0a:1a:db:cf:b2:ec:19:7d:7d:8c:ed:1a:51: 00:ce:b3:c1:99:3e:60:81:c7:75:b7:ff:aa:d9:81:ff:1b:78: 4b:bd:39:57:ab:60:ec:28:1e:80:f2:ce:ad:f2:98:6b:e6:c0: 9a:ed:31:71:98:ae:61:e5:b4:51:7f:e8:bb:a2:86:64:04:4c: d1:0a:20:6b:a8:a4:d9:0c:96:cc:16:1b:a2:71:ca:fa:e9:ca: 5b:01:73:f5:2b:da:4e:c0:f5:e2:d6:0e:08:2b:cb:ca:fd:a0: f6:71:49:9c:ec:db:f5:a0:d7:95:15:fe:5e:18:28:96:47:01: 36:b0:8f:e4:15:c0:97:34:d3:1d:69:53:5a:5d:14:6f:8c:15: 58:dc:69:4d:ac:a1:65:a6:aa:58:03:8c:f5:8a:49:dc:89:2b: 1e:64:e8:2a:6c:00:ac:96:b6:63:d1:da:51:26:31:2e:e4:02: 0c:56:99:9b:60:90:60:05:19:32:f8:b8:14:8e:bc:30:11:f8: 53:e6:06:4f:cf:57:d3:fa:16:8c:d8:c5:96:a5:53:0d:23:33: 3c:35:94:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQSBbKpPB6v5NNUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk MWQ4YTJiOTAtMTNmNi00NjY5LThkN2UtOWZjN2IzZjkxYWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh8jLNGHZ+awDlQYXhSIdSEmaQmiXYr6UpUG Dw4XJOOGmB3dKhiewds+9c7NA9igHWRqnj/ulah6ttFCphdYnpCFxx7lwAPjdjUe AxJvp/IQC74sUQsoxhsx8wAJ8PGlEXbBe0DYWf7DnBshvXtOJfOFBHQCRWEnC1mR JSxDcmnVS8KLsXn6k3Fc3+CLwrOArMLBByu2egDyqGKAZsYt/vDJYmCd+vJtX4C+ AaBnzxHXXMTNPUleBRyg0kkVbVT3HHMoczSkP+QGLrRBKzzdFnnTpjOsCFNG/+io gzHu0mjm2QSJ46J884Yc9qca1ytEB+76pUWywapvsjceY+CMuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOuHzIm7sYWAh2rKXe9PmvKurZnrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGY5ZjBlYjMtZDdhMy0z MDUyLWJhYjgtZjAyYWYwNTRkYTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALNCZ9ovqft/QwfApQ5lVhCU2awwIpSvDvt88WtXGYGvQOnyHKCkKZpp Chrbz7LsGX19jO0aUQDOs8GZPmCBx3W3/6rZgf8beEu9OVerYOwoHoDyzq3ymGvm wJrtMXGYrmHltFF/6LuihmQETNEKIGuopNkMlswWG6JxyvrpylsBc/Ur2k7A9eLW Dggry8r9oPZxSZzs2/Wg15UV/l4YKJZHATawj+QVwJc00x1pU1pdFG+MFVjcaU2s oWWmqlgDjPWKSdyJKx5k6CpsAKyWtmPR2lEmMS7kAgxWmZtgkGAFGTL4uBSOvDAR +FPmBk/PV9P6FozYxZalUw0jMzw1lJY= -----END CERTIFICATE-----Generated at Sat Aug 23 15:15:06 2025 by rpki-client