$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/565dd156-0cbd-3d4e-8bf4-7d2290bb9fcc.roa File: 565dd156-0cbd-3d4e-8bf4-7d2290bb9fcc.roa (raw, json) Hash identifier: zQt03ADMUVHVZiwmj1eNytxpYNbNqCWhghgxpcRhQOc= Subject key identifier: 4A:F9:03:B7:DF:6D:77:B2:5C:4C:CE:90:15:CA:E0:14:DB:46:C7:57 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD5C33966E1D3143C797C1FC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/565dd156-0cbd-3d4e-8bf4-7d2290bb9fcc.roa Signing time: Tue 12 Aug 2025 19:21:18 +0000 ROA not before: Tue 12 Aug 2025 19:21:18 +0000 ROA not after: Mon 10 Nov 2025 20:21:18 +0000 asID: 6167 IP address blocks: 174.221.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:c3:39:66:e1:d3:14:3c:79:7c:1f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 12 19:21:18 2025 GMT Not After : Nov 10 20:21:18 2025 GMT Subject: CN=9539e7cf-6c4b-470a-a7ae-62244ebfe8e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:53:51:47:2e:63:03:2b:62:f1:57:b0:50:69: d1:19:4b:26:58:fe:c3:72:8d:d2:a3:ec:a0:01:4f: 4f:f1:0b:07:25:43:a2:e7:c0:f6:ac:b4:da:3e:81: 89:63:36:50:76:77:66:1c:86:92:3b:1d:4f:3e:23: 6d:a7:fd:73:39:41:92:3d:00:71:fc:73:7b:e4:8b: 82:5f:6d:70:1f:73:e0:6e:55:49:95:50:d0:0e:98: e6:5c:95:c9:81:73:12:82:07:51:79:f5:c3:b6:82: df:e6:50:56:b8:00:11:83:9d:13:f3:65:39:1f:47: a9:e5:57:0b:50:79:06:37:96:e4:c1:25:66:14:f3: 01:ad:73:2e:5e:62:08:4c:75:67:2d:87:ce:ec:91: 09:a7:1c:7b:78:00:21:86:95:0e:82:c4:75:de:1c: a5:c9:e4:5a:8c:b0:b6:f6:17:8d:50:8a:96:e0:91: f1:99:0f:1f:0b:ae:8a:57:df:dd:7e:07:74:2a:4e: 87:d0:4d:8b:e1:70:ff:23:b1:83:43:cc:a3:a4:dc: 3c:f5:db:6d:fb:cb:89:2f:b4:93:6d:f9:f1:4f:c3: e1:f3:14:08:a4:c0:35:ef:52:93:10:05:b6:4b:3a: 83:c4:4f:c4:2b:c7:5d:fb:ee:ac:98:ed:2c:58:23: 7a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F9:03:B7:DF:6D:77:B2:5C:4C:CE:90:15:CA:E0:14:DB:46:C7:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/565dd156-0cbd-3d4e-8bf4-7d2290bb9fcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.221.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:1b:37:43:eb:c5:f0:e0:31:bd:0d:ee:74:28:26:b8:1e:9a: 3d:14:6e:56:eb:de:7d:bd:3f:68:3f:0e:91:40:65:dd:9a:c0: c0:f1:f1:d8:c6:00:cd:c5:91:a9:3e:dc:3d:2f:37:eb:2c:77: ab:14:39:9b:da:ae:2b:66:c4:c2:92:42:6c:6a:ed:be:87:26: 6d:6f:d2:df:31:77:c7:97:50:a2:68:9f:eb:b4:78:dd:b5:a9: 69:0d:51:14:20:89:5e:53:95:92:6a:11:7f:9c:ae:82:5c:bc: a5:61:b4:52:7a:65:5b:57:56:2f:18:75:69:82:4e:27:b0:70: a9:43:c2:1d:75:58:01:85:65:90:e9:08:d5:58:fc:32:b1:db: c1:9c:0e:b9:9e:c7:2e:b1:d4:86:97:66:b5:de:11:8a:15:b1: c8:a3:28:25:58:13:6a:10:02:07:1a:15:a9:0d:12:2d:28:1d: 12:d0:a3:d8:62:96:86:2a:99:ca:76:c7:92:72:b1:26:33:6d: 91:75:28:87:a7:b9:25:10:9a:d7:bd:48:71:30:c5:c9:b9:d1: f2:b5:29:7e:1d:72:0c:b5:bd:8a:e9:17:78:b3:e7:09:0d:9b: fb:5b:b2:56:47:8d:89:2d:9f:10:d1:79:71:5a:be:66:93:55: 07:c4:6a:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVwzlm4dMUPHl8H8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMjE5MjExOFoXDTI1MTExMDIwMjExOFowLzEtMCsGA1UEAxMk OTUzOWU3Y2YtNmM0Yi00NzBhLWE3YWUtNjIyNDRlYmZlOGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVNRRy5jAyti8VewUGnRGUsmWP7Dco3So+yg AU9P8QsHJUOi58D2rLTaPoGJYzZQdndmHIaSOx1PPiNtp/1zOUGSPQBx/HN75IuC X21wH3PgblVJlVDQDpjmXJXJgXMSggdRefXDtoLf5lBWuAARg50T82U5H0ep5VcL UHkGN5bkwSVmFPMBrXMuXmIITHVnLYfO7JEJpxx7eAAhhpUOgsR13hylyeRajLC2 9heNUIqW4JHxmQ8fC66KV9/dfgd0Kk6H0E2L4XD/I7GDQ8yjpNw89dtt+8uJL7ST bfnxT8Ph8xQIpMA171KTEAW2SzqDxE/EK8dd++6smO0sWCN6zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEr5A7ffbXeyXEzOkBXK4BTbRsdXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTY1ZGQxNTYtMGNiZC0z ZDRlLThiZjQtN2QyMjkwYmI5ZmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrt3IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkbN0PrxfDgMb0N7nQoJrgemj0Ublbr3n29P2g/DpFAZd2awMDx8djG AM3Fkak+3D0vN+ssd6sUOZvaritmxMKSQmxq7b6HJm1v0t8xd8eXUKJon+u0eN21 qWkNURQgiV5TlZJqEX+croJcvKVhtFJ6ZVtXVi8YdWmCTiewcKlDwh11WAGFZZDp CNVY/DKx28GcDrmexy6x1IaXZrXeEYoVscijKCVYE2oQAgcaFakNEi0oHRLQo9hi loYqmcp2x5JysSYzbZF1KIenuSUQmte9SHEwxcm50fK1KX4dcgy1vYrpF3iz5wkN m/tbslZHjYktnxDReXFavmaTVQfEavA= -----END CERTIFICATE-----Generated at Sat Aug 23 18:22:03 2025 by rpki-client