$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/425734d2-dec1-3dc5-99a0-539fd0d0a490.roa File: 425734d2-dec1-3dc5-99a0-539fd0d0a490.roa (raw, json) Hash identifier: SaXw9j9yMdqIVDpqahA8EtgB6D7b3JSV5JhGx+sJ4gU= Subject key identifier: EB:F0:B0:46:CF:B3:FB:D6:53:D2:D2:96:D2:83:CE:8E:6C:4D:F2:6E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AA6F63067BDFBE2CF038F00A0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/425734d2-dec1-3dc5-99a0-539fd0d0a490.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 6167 IP address blocks: 174.229.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:30:67:bd:fb:e2:cf:03:8f:00:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=51a24f4c-c084-4b92-baff-cae236ab8dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2c:5f:4e:0c:92:0d:ae:f8:c2:c8:bd:e6:9c: c9:a8:b0:6c:17:1e:aa:24:6a:cd:da:99:cf:6e:26: e1:28:a3:79:02:0a:37:9b:dd:f4:72:ad:52:a9:76: 35:bc:49:70:a4:7e:1b:67:a4:ec:97:84:9f:7a:28: d4:87:a6:1c:f5:f0:f2:76:88:92:c9:27:62:39:ac: ff:e7:2c:12:fb:9e:a2:82:f1:e3:f6:ad:23:14:e1: b7:e9:e2:b1:c4:3a:91:85:0e:44:4f:5d:c1:dc:7a: 8d:c8:23:b1:02:50:47:f6:74:1f:8a:9e:2c:8e:1c: bd:bc:56:b4:da:d8:ec:8d:32:e7:30:40:f2:56:51: e4:7c:6d:e1:c8:c3:b6:59:46:6e:2c:23:4d:ea:a0: e9:aa:8a:89:17:a2:20:b9:6d:4a:64:7a:15:1d:6b: ae:08:60:8c:1e:f8:ef:76:16:30:77:f7:54:0e:34: 1e:e3:a5:ca:50:e9:9c:89:72:6e:be:fd:bf:81:64: 0c:aa:da:a6:64:b7:87:cb:0f:13:fa:78:7f:66:d3: 6c:47:5a:2e:6c:78:bc:3f:a5:d3:31:e7:18:6d:bf: 56:c8:0c:82:8f:11:e6:44:e2:5a:69:35:f5:d5:66: 2c:87:28:33:54:ba:90:00:02:0c:36:11:bc:c6:c5: b1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F0:B0:46:CF:B3:FB:D6:53:D2:D2:96:D2:83:CE:8E:6C:4D:F2:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/425734d2-dec1-3dc5-99a0-539fd0d0a490.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.229.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:8a:44:6d:9f:6a:a4:a5:d6:64:92:c3:7c:cd:3b:6a:12:41: b6:53:a1:dc:dd:58:41:20:a4:ab:6b:a3:c0:ca:52:dd:e7:2b: ba:67:c1:10:a5:6f:22:82:7b:a0:76:8b:41:8e:7b:85:23:ca: f3:91:4d:6b:ae:06:77:67:8a:9a:25:24:73:3a:40:62:77:ef: 18:b7:9f:f7:03:e1:f6:3e:19:04:06:99:ed:8b:93:bb:38:6a: 9b:2e:a5:22:13:e5:29:a5:0e:14:f6:d1:dd:5c:58:07:00:f7: b3:88:32:bb:5f:23:3c:18:14:52:b5:54:56:57:fb:04:33:55: c8:67:7d:a2:54:0a:98:b4:cd:9a:5d:b7:3c:ad:6f:55:ea:1a: 2b:c9:77:8b:93:2e:f3:0f:b0:08:a3:fa:e4:16:dc:27:8b:7d: 9a:26:ea:45:7d:86:18:a5:06:66:d8:23:08:c9:78:31:6d:cb: ce:ff:bb:fc:f3:de:63:70:d3:0b:5c:d8:60:39:90:0d:af:db: 77:c3:3f:48:ef:57:7a:07:9c:dd:2d:09:b2:33:f6:db:f7:cf: 10:71:ee:2b:60:95:2a:1f:ee:12:92:72:d5:5b:2c:44:fe:3a: 76:ef:e6:f1:01:ad:e1:ff:6b:e9:83:b6:d6:20:57:72:22:89: 94:e3:48:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9jBnvfvizwOPAKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk NTFhMjRmNGMtYzA4NC00YjkyLWJhZmYtY2FlMjM2YWI4ZGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoixfTgySDa74wsi95pzJqLBsFx6qJGrN2pnP bibhKKN5Ago3m930cq1SqXY1vElwpH4bZ6Tsl4SfeijUh6Yc9fDydoiSySdiOaz/ 5ywS+56igvHj9q0jFOG36eKxxDqRhQ5ET13B3HqNyCOxAlBH9nQfip4sjhy9vFa0 2tjsjTLnMEDyVlHkfG3hyMO2WUZuLCNN6qDpqoqJF6IguW1KZHoVHWuuCGCMHvjv dhYwd/dUDjQe46XKUOmciXJuvv2/gWQMqtqmZLeHyw8T+nh/ZtNsR1oubHi8P6XT MecYbb9WyAyCjxHmROJaaTX11WYshygzVLqQAAIMNhG8xsWxJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvwsEbPs/vWU9LSltKDzo5sTfJuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDI1NzM0ZDItZGVjMS0z ZGM1LTk5YTAtNTM5ZmQwZDBhNDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDruWYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmKRG2faqSl1mSSw3zNO2oSQbZTodzdWEEgpKtro8DKUt3nK7pnwRCl byKCe6B2i0GOe4UjyvORTWuuBndnipolJHM6QGJ37xi3n/cD4fY+GQQGme2Lk7s4 apsupSIT5SmlDhT20d1cWAcA97OIMrtfIzwYFFK1VFZX+wQzVchnfaJUCpi0zZpd tzytb1XqGivJd4uTLvMPsAij+uQW3CeLfZom6kV9hhilBmbYIwjJeDFty87/u/zz 3mNw0wtc2GA5kA2v23fDP0jvV3oHnN0tCbIz9tv3zxBx7itglSof7hKSctVbLET+ Onbv5vEBreH/a+mDttYgV3IiiZTjSPI= -----END CERTIFICATE-----Generated at Sat Aug 23 18:56:08 2025 by rpki-client