$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f2519ee-9373-30ca-99a7-dfd648c904e7.roa File: 3f2519ee-9373-30ca-99a7-dfd648c904e7.roa (raw, json) Hash identifier: QU1iKShyp9+FjdwltJqC13HKQFiyKAueND645UQeONA= Subject key identifier: 81:8F:1B:F5:CF:34:65:A8:7B:FB:D9:0B:88:0C:AB:A4:1F:27:94:A3 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD5C33945D67634B699877C80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f2519ee-9373-30ca-99a7-dfd648c904e7.roa Signing time: Tue 12 Aug 2025 19:21:18 +0000 ROA not before: Tue 12 Aug 2025 19:21:18 +0000 ROA not after: Mon 10 Nov 2025 20:21:18 +0000 asID: 6167 IP address blocks: 174.221.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:c3:39:45:d6:76:34:b6:99:87:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 12 19:21:18 2025 GMT Not After : Nov 10 20:21:18 2025 GMT Subject: CN=0c7559c6-f5fa-419e-9d1a-c6df1a52bf18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:6b:9e:57:b6:7e:aa:a2:af:5e:a1:00:52:18: d6:7a:0e:30:7f:a7:ff:5f:c5:68:fa:0b:0e:10:21: 9e:f7:6f:f3:b0:40:4c:1e:44:63:44:31:7a:21:82: 19:7b:21:cb:16:0d:27:9d:bc:cb:32:47:ab:1d:b6: 29:8f:e1:ae:94:e0:f2:d9:8e:df:e7:73:29:f2:2f: 85:87:17:75:3d:15:3f:fd:7b:fc:d9:7a:09:87:61: 9b:90:a7:fb:23:14:2e:75:30:f3:50:20:13:18:3f: a3:91:8b:cd:dd:3b:e8:da:7e:05:c2:50:26:cb:78: db:79:81:53:1f:ee:fa:3c:cc:2e:f6:d2:ee:f5:c4: 14:6c:17:27:88:8b:d3:6a:92:e3:af:5e:39:1b:f8: f2:f8:15:b9:ab:b0:1f:36:66:f0:72:1d:5b:38:69: b5:0c:07:1f:73:86:e3:d6:b4:87:e6:2f:93:44:d6: 9a:f7:7c:c4:43:69:ce:27:71:5e:47:65:47:72:ed: e0:00:18:ae:ee:2c:c4:e1:25:0a:0a:34:93:83:ba: 0c:2e:94:c0:c3:b1:e0:97:b2:1e:92:02:7b:41:d8: 93:c4:ad:ac:3f:c4:89:bc:33:24:cc:11:7a:3e:8a: 4c:1f:c8:96:3a:c6:79:a2:7e:8c:a7:40:73:03:94: ef:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:8F:1B:F5:CF:34:65:A8:7B:FB:D9:0B:88:0C:AB:A4:1F:27:94:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f2519ee-9373-30ca-99a7-dfd648c904e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.221.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:73:e4:8d:ef:97:6f:e5:bd:78:2d:9f:4d:a4:b9:37:ad:69: 2e:c2:c2:53:4f:22:66:b5:30:1f:3e:40:26:34:0a:03:7a:c2: 2d:fa:c9:68:11:0b:a0:65:b7:e4:2a:ef:38:ff:4f:ff:89:a5: ef:61:81:b2:71:2f:e1:8f:aa:7d:f9:28:d7:08:0f:fe:00:53: 40:2a:68:99:1c:ac:ac:66:d4:98:3b:3d:4d:8d:39:7b:aa:2d: d9:43:99:a7:7e:e6:99:85:ce:d9:7b:43:14:d0:0a:8a:c2:04: f6:5b:b2:ef:a3:1e:ed:05:f5:f4:9b:da:e9:47:b4:55:ab:9d: a4:72:a7:1b:ab:4b:03:e6:d2:53:24:6c:ba:69:a7:c1:4d:b9: 66:2a:36:14:0e:f1:a3:25:63:a2:49:1f:95:8d:c8:2f:08:1c: 33:81:5c:49:c7:06:c8:f1:ec:e4:b7:75:89:54:8b:44:22:02: 12:e2:b1:fb:37:85:f0:ea:81:c1:12:a8:9c:c3:fe:a2:65:3f: a2:cd:c5:aa:2a:89:e6:1d:6a:29:e0:b5:8f:94:74:18:ec:da: 4c:b6:6b:0c:1e:f0:bc:26:03:52:bc:ab:73:75:fb:c7:74:78: 1e:a0:21:3a:71:67:42:80:51:5f:6c:0f:45:22:ca:9d:7d:40: 6b:49:96:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVwzlF1nY0tpmHfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMjE5MjExOFoXDTI1MTExMDIwMjExOFowLzEtMCsGA1UEAxMk MGM3NTU5YzYtZjVmYS00MTllLTlkMWEtYzZkZjFhNTJiZjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42ueV7Z+qqKvXqEAUhjWeg4wf6f/X8Vo+gsO ECGe92/zsEBMHkRjRDF6IYIZeyHLFg0nnbzLMkerHbYpj+GulODy2Y7f53Mp8i+F hxd1PRU//Xv82XoJh2GbkKf7IxQudTDzUCATGD+jkYvN3Tvo2n4FwlAmy3jbeYFT H+76PMwu9tLu9cQUbBcniIvTapLjr145G/jy+BW5q7AfNmbwch1bOGm1DAcfc4bj 1rSH5i+TRNaa93zEQ2nOJ3FeR2VHcu3gABiu7izE4SUKCjSTg7oMLpTAw7Hgl7Ie kgJ7QdiTxK2sP8SJvDMkzBF6PopMH8iWOsZ5on6Mp0BzA5TvSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGPG/XPNGWoe/vZC4gMq6QfJ5SjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2YyNTE5ZWUtOTM3My0z MGNhLTk5YTctZGZkNjQ4YzkwNGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrt3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJz5I3vl2/lvXgtn02kuTetaS7CwlNPIma1MB8+QCY0CgN6wi36yWgR C6Blt+Qq7zj/T/+Jpe9hgbJxL+GPqn35KNcID/4AU0AqaJkcrKxm1Jg7PU2NOXuq LdlDmad+5pmFztl7QxTQCorCBPZbsu+jHu0F9fSb2ulHtFWrnaRypxurSwPm0lMk bLppp8FNuWYqNhQO8aMlY6JJH5WNyC8IHDOBXEnHBsjx7OS3dYlUi0QiAhLisfs3 hfDqgcESqJzD/qJlP6LNxaoqieYdaingtY+UdBjs2ky2awwe8LwmA1K8q3N1+8d0 eB6gITpxZ0KAUV9sD0Uiyp19QGtJlgo= -----END CERTIFICATE-----Generated at Sat Aug 23 17:00:04 2025 by rpki-client