$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1e886e88-9960-318b-bc80-9aa2ae40f879.roa File: 1e886e88-9960-318b-bc80-9aa2ae40f879.roa (raw, json) Hash identifier: 62PLrSgNgGywsNvbIU8920Sj+9CwhiCLQLRS4ib8h6Y= Subject key identifier: EB:C0:E8:8A:4E:F7:7C:4F:E5:82:38:71:BA:52:98:7B:52:7E:BC:04 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AA6F6369B8DA134BFA0F3CCC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1e886e88-9960-318b-bc80-9aa2ae40f879.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 6167 IP address blocks: 174.226.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:36:9b:8d:a1:34:bf:a0:f3:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=65ea541d-165a-4507-b504-cf3c5589a230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:14:1f:91:ce:4c:e5:ca:70:e9:79:07:ef:44: c5:aa:34:c0:87:21:e1:87:75:76:b9:ef:8d:dc:b8: 49:e4:04:33:aa:9c:95:7b:4d:34:f9:dd:e6:3c:b6: 98:d3:b7:eb:3d:42:12:35:08:dc:80:b1:ee:dd:ae: 9f:d6:c2:0f:91:bf:58:98:64:dc:b7:09:5c:35:03: fb:cf:93:43:d8:48:66:ff:db:03:86:f3:fa:ad:8e: 11:92:40:ae:b1:87:14:a6:93:d4:09:79:00:25:c1: dc:de:8d:fc:84:76:3b:11:96:7b:02:f5:47:ad:01: 1e:a2:21:91:90:c1:39:cb:59:c5:ae:66:82:c2:67: 8d:30:91:37:2b:63:f3:87:88:8a:19:4f:a5:59:bd: a1:ea:cc:d6:2a:9f:8f:17:4c:5e:34:99:f3:90:ad: a1:3c:3a:ba:8c:62:b3:ba:ee:e4:0f:22:26:49:0a: a2:12:4a:59:c2:c7:9c:4f:26:80:be:66:b0:5b:46: 0d:d7:d2:7f:d4:8d:92:26:31:8c:bc:31:e2:2e:87: 1a:f7:67:8a:cf:08:b8:22:b5:41:49:f8:5f:18:e5: 43:c0:63:71:26:29:2e:d2:da:e2:2e:fb:53:3d:67: 07:18:40:dc:7d:74:c9:f6:44:08:d0:7b:07:f1:17: 62:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C0:E8:8A:4E:F7:7C:4F:E5:82:38:71:BA:52:98:7B:52:7E:BC:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1e886e88-9960-318b-bc80-9aa2ae40f879.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.226.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:c4:39:54:15:f1:ae:5e:a6:f0:18:4b:2a:76:4b:bf:c9:ab: 2d:7e:23:da:09:57:f5:8a:e9:29:3d:93:50:b6:83:4e:7a:7f: b6:bb:fc:6a:a4:80:67:41:25:41:18:83:bb:87:2f:1b:18:5e: 75:6a:d8:4d:7c:48:04:a4:02:fe:6a:5e:9c:54:82:56:2e:ad: f5:66:f3:aa:3b:3e:70:96:51:d3:3f:26:8a:2f:1e:5c:3d:b0: d0:1a:98:22:74:c1:81:03:88:55:fb:17:f3:d0:74:48:ff:d6: 6f:ce:3d:be:47:09:2a:92:19:4c:43:37:ef:7b:12:47:e9:20: 70:b5:0b:98:1d:d2:15:a5:d1:c4:b5:45:79:ad:ce:c4:f0:e9: 7c:b6:2c:07:c7:54:06:73:c3:54:f5:69:3d:38:0e:d7:c1:12: 51:d2:b1:1c:53:8b:39:bc:9a:ab:f1:85:f8:f6:fe:e9:15:b4: b3:3f:25:01:c7:e6:92:64:bf:24:e9:8b:c8:29:61:fe:70:4d: 7e:bc:b3:85:9f:11:f8:6e:6f:ac:fb:ad:24:2f:fc:78:6b:a8: b0:73:53:24:be:2c:97:21:9d:ab:0b:67:cf:da:93:23:5d:64: ca:b9:d8:ed:45:00:54:4a:d9:ad:4b:27:9d:5f:8d:5c:3e:9e: 6d:65:6c:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9jabjaE0v6DzzMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk NjVlYTU0MWQtMTY1YS00NTA3LWI1MDQtY2YzYzU1ODlhMjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBQfkc5M5cpw6XkH70TFqjTAhyHhh3V2ue+N 3LhJ5AQzqpyVe000+d3mPLaY07frPUISNQjcgLHu3a6f1sIPkb9YmGTctwlcNQP7 z5ND2Ehm/9sDhvP6rY4RkkCusYcUppPUCXkAJcHc3o38hHY7EZZ7AvVHrQEeoiGR kME5y1nFrmaCwmeNMJE3K2Pzh4iKGU+lWb2h6szWKp+PF0xeNJnzkK2hPDq6jGKz uu7kDyImSQqiEkpZwsecTyaAvmawW0YN19J/1I2SJjGMvDHiLoca92eKzwi4IrVB SfhfGOVDwGNxJiku0triLvtTPWcHGEDcfXTJ9kQI0HsH8RditwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvA6IpO93xP5YI4cbpSmHtSfrwEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWU4ODZlODgtOTk2MC0z MThiLWJjODAtOWFhMmFlNDBmODc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnEOVQV8a5epvAYSyp2S7/Jqy1+I9oJV/WK6Sk9k1C2g056f7a7/Gqk gGdBJUEYg7uHLxsYXnVq2E18SASkAv5qXpxUglYurfVm86o7PnCWUdM/JoovHlw9 sNAamCJ0wYEDiFX7F/PQdEj/1m/OPb5HCSqSGUxDN+97EkfpIHC1C5gd0hWl0cS1 RXmtzsTw6Xy2LAfHVAZzw1T1aT04DtfBElHSsRxTizm8mqvxhfj2/ukVtLM/JQHH 5pJkvyTpi8gpYf5wTX68s4WfEfhub6z7rSQv/HhrqLBzUyS+LJchnasLZ8/akyNd ZMq52O1FAFRK2a1LJ51fjVw+nm1lbJE= -----END CERTIFICATE-----Generated at Sat Aug 23 15:18:15 2025 by rpki-client