$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f325b3a-136c-3d1c-9b70-cf492b7ea673.roa File: 3f325b3a-136c-3d1c-9b70-cf492b7ea673.roa (raw, json) Hash identifier: xSn3TOWygLQ+MFYl1QndLbLF8UgeI6HEjODbNAxcyWY= Subject key identifier: EF:A6:06:9C:D2:5C:1F:AB:F4:C6:B2:5A:81:ED:96:95:60:DF:71:DB Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584ACB41208D09E1BA4C0F2C0A40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f325b3a-136c-3d1c-9b70-cf492b7ea673.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 6167 IP address blocks: 174.221.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:20:8d:09:e1:ba:4c:0f:2c:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=c07d5938-4ee0-4d58-9d69-289891d0af04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7d:6e:b6:5c:31:f2:de:1b:3b:ff:80:6c:03: 9c:13:9e:39:ad:44:ce:b6:5d:ef:43:61:f9:83:8e: 84:70:af:80:ba:71:e1:18:65:e6:98:84:15:c1:a6: 0c:5d:1e:92:b5:aa:ff:2a:ba:56:c8:d9:80:ac:ae: 5d:5c:6f:d9:64:bd:dd:d5:2c:e6:55:c8:aa:cf:79: 07:46:fc:6f:6d:41:c6:45:b6:9e:4a:51:3f:2e:dd: 7d:e5:5c:49:62:14:38:6a:19:a1:24:24:3f:f9:83: 66:77:68:d8:32:4e:3f:dd:85:2f:69:91:95:aa:b1: 67:17:93:30:0a:dd:2e:be:2e:81:5b:6f:f1:fd:a5: b7:2e:4d:84:2a:f9:6a:3d:a3:9f:db:55:f1:a7:4a: 96:ed:ac:af:33:01:2a:e3:20:2b:bc:71:82:aa:a9: b5:10:7b:a3:5d:61:9a:20:f0:5d:6d:db:50:3f:c9: 69:2e:8b:bc:6f:11:92:69:62:77:70:23:c2:5b:d1: a8:bb:19:05:56:99:53:d1:41:38:6f:f1:69:cd:02: 9c:28:37:c9:69:79:5f:c7:56:61:35:9a:2b:ba:4f: 25:b0:af:1f:85:36:48:10:09:88:e8:be:07:c7:7e: 5f:63:74:9b:92:48:fd:d1:22:8e:7c:2b:6a:4a:c0: b3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A6:06:9C:D2:5C:1F:AB:F4:C6:B2:5A:81:ED:96:95:60:DF:71:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f325b3a-136c-3d1c-9b70-cf492b7ea673.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.221.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:0a:84:bf:d8:c8:d9:61:0d:74:ed:4f:6f:85:93:1a:0b:c6: 39:9d:1a:48:1a:33:ef:db:25:b6:8d:ad:02:40:4a:11:d2:53: 22:ea:28:e7:ee:72:dd:fe:59:5a:c9:1b:5c:99:c6:38:19:38: 5b:92:f3:e0:91:03:4f:2c:59:da:99:07:72:f1:bf:ca:cc:56: 36:68:52:96:25:ca:f4:55:29:9a:e5:4a:62:7f:d7:20:58:f2: 19:b4:f6:da:ac:8e:72:3f:55:59:1d:45:90:42:0b:7f:a9:ff: a2:05:99:d1:f2:6d:9e:70:46:ea:96:29:77:ec:d9:9d:dc:13: f7:02:45:90:bc:30:af:a2:58:bf:69:ad:90:b0:6a:16:b7:df: e3:41:e1:be:7e:ee:2a:95:bd:d0:7f:df:24:e5:0a:a2:2f:74: 97:55:49:1e:59:85:d8:35:61:a6:35:6f:68:ff:61:69:10:cf: 5c:25:55:1c:b7:ef:11:95:28:ca:91:b8:43:98:17:39:7b:99: a5:3a:72:62:65:48:66:9a:ef:4a:be:58:90:6b:b0:b5:bd:4f: 5f:47:21:cd:6f:76:55:16:c2:9b:a9:63:d7:48:cd:c4:c9:5c: 9a:00:24:20:77:40:fd:22:ac:c5:1e:63:70:f0:6e:db:d2:c2: 74:23:d5:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQSCNCeG6TA8sCkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk YzA3ZDU5MzgtNGVlMC00ZDU4LTlkNjktMjg5ODkxZDBhZjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnn1utlwx8t4bO/+AbAOcE545rUTOtl3vQ2H5 g46EcK+AunHhGGXmmIQVwaYMXR6Star/KrpWyNmArK5dXG/ZZL3d1SzmVciqz3kH RvxvbUHGRbaeSlE/Lt195VxJYhQ4ahmhJCQ/+YNmd2jYMk4/3YUvaZGVqrFnF5Mw Ct0uvi6BW2/x/aW3Lk2EKvlqPaOf21Xxp0qW7ayvMwEq4yArvHGCqqm1EHujXWGa IPBdbdtQP8lpLou8bxGSaWJ3cCPCW9GouxkFVplT0UE4b/FpzQKcKDfJaXlfx1Zh NZoruk8lsK8fhTZIEAmI6L4Hx35fY3Sbkkj90SKOfCtqSsCzLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+mBpzSXB+r9MayWoHtlpVg33HbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2YzMjViM2EtMTM2Yy0z ZDFjLTliNzAtY2Y0OTJiN2VhNjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErt2gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIKhL/YyNlhDXTtT2+FkxoLxjmdGkgaM+/bJbaNrQJAShHSUyLqKOfu ct3+WVrJG1yZxjgZOFuS8+CRA08sWdqZB3Lxv8rMVjZoUpYlyvRVKZrlSmJ/1yBY 8hm09tqsjnI/VVkdRZBCC3+p/6IFmdHybZ5wRuqWKXfs2Z3cE/cCRZC8MK+iWL9p rZCwaha33+NB4b5+7iqVvdB/3yTlCqIvdJdVSR5Zhdg1YaY1b2j/YWkQz1wlVRy3 7xGVKMqRuEOYFzl7maU6cmJlSGaa70q+WJBrsLW9T19HIc1vdlUWwpupY9dIzcTJ XJoAJCB3QP0irMUeY3DwbtvSwnQj1YE= -----END CERTIFICATE-----Generated at Sat Aug 23 22:05:30 2025 by rpki-client