$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/21d04f0f-5e15-3c83-8d3f-eb6accb5df35.roa File: 21d04f0f-5e15-3c83-8d3f-eb6accb5df35.roa (raw, json) Hash identifier: bYmoGgT15xV0VOkA28gJr45hZvU6ERymUQLMe8d/UmA= Subject key identifier: 34:0A:31:05:AD:22:FF:E1:3A:5C:23:B5:77:6B:60:B8:C5:2A:D6:8C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A42757EABF5222EE39D8B7680 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/21d04f0f-5e15-3c83-8d3f-eb6accb5df35.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 6167 IP address blocks: 174.221.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:7e:ab:f5:22:2e:e3:9d:8b:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=50bb1169-7720-4544-b653-6addf037995d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:78:c3:57:59:f8:d6:03:1f:0a:e7:43:3b:52: 79:d6:34:38:3d:0b:45:f7:65:37:63:43:71:f6:dc: b0:9a:e0:47:1e:6f:f4:d5:71:07:b6:a4:3e:ea:6b: c5:70:50:88:2d:59:05:f6:2b:f4:74:36:0b:af:4f: fb:36:f6:04:76:de:c5:d0:66:6c:62:76:83:e8:39: 1f:b7:d7:b4:38:fb:f7:25:4e:aa:f0:ec:0c:aa:f0: 7c:05:2e:7a:51:28:f7:8a:8b:63:83:de:45:06:82: ed:e4:00:35:9f:7e:58:5f:e2:85:c4:e7:1c:aa:16: c0:92:10:5f:e2:14:0a:d0:f5:d9:34:b0:7f:88:40: 66:70:af:00:7b:62:2a:ae:fe:46:9b:ab:92:39:8b: f6:f9:18:bc:13:b5:bc:4d:49:64:ae:21:81:41:59: 5e:d3:ca:84:1f:37:90:70:d3:bd:f5:5d:68:d4:df: 78:2a:a3:c3:b2:f7:17:a1:ef:68:73:42:a3:08:d6: 55:cf:36:10:5c:7d:70:54:a7:da:c1:91:4b:6e:72: be:d6:d4:a1:d7:42:2e:68:e7:8d:34:d5:a0:cb:d5: 04:fc:b6:73:9f:62:2f:1d:fc:df:9c:16:2e:d7:71: 5d:76:80:6c:7b:9c:38:e3:0a:d4:c5:6b:13:60:df: 46:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:0A:31:05:AD:22:FF:E1:3A:5C:23:B5:77:6B:60:B8:C5:2A:D6:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/21d04f0f-5e15-3c83-8d3f-eb6accb5df35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.221.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:77:93:76:8d:ec:b6:3c:3c:ce:5a:3f:23:e1:02:e4:11:ab: 53:f0:6a:f2:42:11:56:fb:29:a1:e8:df:3a:cf:ff:1b:92:64: a5:a9:e5:13:31:65:2a:3d:cb:a3:83:9b:af:96:db:f2:fd:3b: d0:12:a5:ec:54:d7:6f:48:38:51:1d:9d:aa:5b:58:44:99:27: 65:07:06:05:74:e2:16:ab:3a:d7:6e:65:c4:51:97:57:52:db: 59:4c:99:7d:2b:7a:7d:4d:9b:c7:0e:df:b8:40:8b:53:bb:40: 4c:01:39:b2:7f:9b:d2:f9:3e:aa:93:0c:2c:33:d1:00:05:23: 20:bd:38:96:f3:82:15:26:b5:e2:c0:5f:5f:c3:72:f2:1c:fe: ec:84:f3:d9:73:ca:7e:da:c1:48:5d:a2:5e:05:83:a9:8f:07: 2a:d0:8d:50:3c:50:ec:eb:27:33:28:fb:1f:32:a1:17:8c:9e: fe:cc:da:5a:6c:d0:9e:f4:97:1c:47:4b:9c:a5:e3:e3:2c:d3: e7:59:fc:00:a0:f9:4a:f6:e5:e3:55:c9:36:a7:c8:85:5f:62: fa:85:db:3a:24:85:56:e9:57:75:37:35:e1:10:a1:6e:2e:9d: 95:b8:54:7f:69:b7:ac:9b:70:b1:46:66:4d:5e:af:01:f5:f7: 22:a2:71:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdX6r9SIu452LdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk NTBiYjExNjktNzcyMC00NTQ0LWI2NTMtNmFkZGYwMzc5OTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnjDV1n41gMfCudDO1J51jQ4PQtF92U3Y0Nx 9tywmuBHHm/01XEHtqQ+6mvFcFCILVkF9iv0dDYLr0/7NvYEdt7F0GZsYnaD6Dkf t9e0OPv3JU6q8OwMqvB8BS56USj3iotjg95FBoLt5AA1n35YX+KFxOccqhbAkhBf 4hQK0PXZNLB/iEBmcK8Ae2Iqrv5Gm6uSOYv2+Ri8E7W8TUlkriGBQVle08qEHzeQ cNO99V1o1N94KqPDsvcXoe9oc0KjCNZVzzYQXH1wVKfawZFLbnK+1tSh10IuaOeN NNWgy9UE/LZzn2IvHfzfnBYu13FddoBse5w44wrUxWsTYN9GlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQKMQWtIv/hOlwjtXdrYLjFKtaMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjFkMDRmMGYtNWUxNS0z YzgzLThkM2YtZWI2YWNjYjVkZjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErt0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJ3k3aN7LY8PM5aPyPhAuQRq1PwavJCEVb7KaHo3zrP/xuSZKWp5RMx ZSo9y6ODm6+W2/L9O9ASpexU129IOFEdnapbWESZJ2UHBgV04harOtduZcRRl1dS 21lMmX0ren1Nm8cO37hAi1O7QEwBObJ/m9L5PqqTDCwz0QAFIyC9OJbzghUmteLA X1/DcvIc/uyE89lzyn7awUhdol4Fg6mPByrQjVA8UOzrJzMo+x8yoReMnv7M2lps 0J70lxxHS5yl4+Ms0+dZ/ACg+Ur25eNVyTanyIVfYvqF2zokhVbpV3U3NeEQoW4u nZW4VH9pt6ybcLFGZk1erwH19yKicR0= -----END CERTIFICATE-----Generated at Tue Jul 1 16:10:21 2025 by rpki-client