$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f552de3-03de-347c-b9f1-dd083fa15243.roa File: 3f552de3-03de-347c-b9f1-dd083fa15243.roa (raw, json) Hash identifier: xupbeuyuTRz9vm2voS7dS5WUYUTKfg7RzI45B2iPZEA= Subject key identifier: EE:4C:73:ED:79:4C:05:9C:DE:3E:D4:EB:BF:D9:13:7F:4B:E5:4A:36 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AF256A43BE20CEF99D1F16F00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f552de3-03de-347c-b9f1-dd083fa15243.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 6167 IP address blocks: 174.249.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:a4:3b:e2:0c:ef:99:d1:f1:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=9096b939-1868-4b18-a7cc-62d188d0806a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:38:d7:d5:49:53:e4:8b:60:2d:59:07:6e:03: 14:dd:0b:d9:3e:b0:ed:db:a6:27:bd:98:97:c3:04: 6d:57:33:57:eb:10:87:84:4b:78:01:51:ad:88:f0: 8a:69:1e:08:34:c2:dc:65:b0:6c:59:8b:04:cc:ee: c7:52:bf:42:ed:7d:b7:d8:5b:3f:1d:98:54:02:77: 3a:07:c5:7c:03:3e:0d:58:66:47:44:f3:b0:64:f7: fb:a3:9f:0b:8c:a5:33:43:ca:8f:37:81:b6:2b:63: 55:62:d2:43:6d:51:71:aa:50:ec:06:5e:96:87:8f: 25:bb:23:7f:e2:a1:b8:19:cf:84:1b:c8:67:df:11: 46:c0:6f:8f:cd:d5:22:3d:2f:99:18:27:1f:39:d9: 36:a0:ed:5e:1b:96:c3:0e:da:b1:13:b3:98:e0:a5: 6e:99:c0:68:20:b9:c8:0f:22:6d:c8:9e:4a:ef:26: 0b:a9:97:2b:67:b2:30:39:3e:9f:7f:ac:3b:95:ba: c8:b3:c3:03:58:34:1d:71:17:ba:6e:d8:96:91:ba: e7:a3:d0:9f:ed:73:49:c1:00:d6:6e:d7:b5:1a:94: 4e:ce:1a:2c:80:bd:b4:fc:50:02:95:f7:ff:02:fc: e1:1b:1b:e8:8a:8d:9a:b1:0a:a8:cf:30:27:d5:68: 25:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4C:73:ED:79:4C:05:9C:DE:3E:D4:EB:BF:D9:13:7F:4B:E5:4A:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f552de3-03de-347c-b9f1-dd083fa15243.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.249.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:3b:33:bb:49:9f:c1:f6:c7:db:12:00:1e:71:85:cc:34:f9: af:2b:b7:36:13:55:05:1c:fd:57:49:c3:ea:de:96:8c:b4:e5: 18:fe:1f:51:23:27:da:ba:4c:80:22:47:57:b6:4e:f9:ef:7f: 53:fe:95:16:27:6d:76:54:f9:83:f1:c1:33:23:4f:62:0c:3c: b8:0f:99:5c:b8:ce:c3:de:1d:e1:e7:3d:e2:fb:18:64:5c:a3: c0:a4:10:a7:fd:d5:3d:47:51:73:3a:82:56:92:e1:24:fd:ad: f6:06:d8:6e:3a:db:6f:33:4c:ac:0b:b8:79:27:a8:0c:53:1e: d1:a9:14:c4:1c:01:9b:82:35:b7:f5:96:47:a5:58:88:d4:8e: 98:a7:8b:e6:66:99:0b:ab:30:97:27:e9:33:fd:7e:a6:22:b9: 71:10:1f:80:5a:dd:37:d0:4c:92:56:a0:cf:04:84:73:f9:b5: 25:3c:50:46:82:a1:63:a1:f5:b6:86:25:14:0c:ae:3c:6f:e4: 76:cf:8f:f7:8d:9c:05:00:ae:7b:db:a1:89:dc:9d:91:7f:61: 03:71:ea:ba:40:d4:30:df:1b:47:73:34:4e:ab:04:f2:d7:25: 8e:c7:fc:fe:f4:92:00:cc:20:00:e6:b1:bc:61:52:98:5b:05: 35:c0:dd:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVqQ74gzvmdHxbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk OTA5NmI5MzktMTg2OC00YjE4LWE3Y2MtNjJkMTg4ZDA4MDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizjX1UlT5ItgLVkHbgMU3QvZPrDt26YnvZiX wwRtVzNX6xCHhEt4AVGtiPCKaR4INMLcZbBsWYsEzO7HUr9C7X232Fs/HZhUAnc6 B8V8Az4NWGZHRPOwZPf7o58LjKUzQ8qPN4G2K2NVYtJDbVFxqlDsBl6Wh48luyN/ 4qG4Gc+EG8hn3xFGwG+PzdUiPS+ZGCcfOdk2oO1eG5bDDtqxE7OY4KVumcBoILnI DyJtyJ5K7yYLqZcrZ7IwOT6ff6w7lbrIs8MDWDQdcRe6btiWkbrno9Cf7XNJwQDW bte1GpROzhosgL20/FAClff/AvzhGxvoio2asQqozzAn1WglFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5Mc+15TAWc3j7U67/ZE39L5Uo2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2Y1NTJkZTMtMDNkZS0z NDdjLWI5ZjEtZGQwODNmYTE1MjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErvnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC87M7tJn8H2x9sSAB5xhcw0+a8rtzYTVQUc/VdJw+reloy05Rj+H1Ej J9q6TIAiR1e2Tvnvf1P+lRYnbXZU+YPxwTMjT2IMPLgPmVy4zsPeHeHnPeL7GGRc o8CkEKf91T1HUXM6glaS4ST9rfYG2G46228zTKwLuHknqAxTHtGpFMQcAZuCNbf1 lkelWIjUjpini+ZmmQurMJcn6TP9fqYiuXEQH4Ba3TfQTJJWoM8EhHP5tSU8UEaC oWOh9baGJRQMrjxv5HbPj/eNnAUArnvboYncnZF/YQNx6rpA1DDfG0dzNE6rBPLX JY7H/P70kgDMIADmsbxhUphbBTXA3cs= -----END CERTIFICATE-----Generated at Sat Aug 23 14:25:10 2025 by rpki-client