$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/748ef434-f707-3079-9782-d67b421eb63e.roa File: 748ef434-f707-3079-9782-d67b421eb63e.roa (raw, json) Hash identifier: RN8pSQWoZWuZgx1r/BhKIjLnEqLyv8+zh648rzivGII= Subject key identifier: 36:9E:80:F8:74:51:EA:24:04:A0:3B:1C:EB:D7:8E:18:79:84:D1:1C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A5B95B73ADF4A2D729A003E80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/748ef434-f707-3079-9782-d67b421eb63e.roa Signing time: Mon 30 Jun 2025 01:00:50 +0000 ROA not before: Mon 30 Jun 2025 01:00:50 +0000 ROA not after: Sun 28 Sep 2025 01:00:50 +0000 asID: 6167 IP address blocks: 174.220.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5b:95:b7:3a:df:4a:2d:72:9a:00:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 30 01:00:50 2025 GMT Not After : Sep 28 01:00:50 2025 GMT Subject: CN=36ff6b99-ad61-4423-b1da-07b7230d3f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b9:0f:87:48:fa:6f:0b:fe:dc:00:03:ba:b7: d7:db:bf:d7:dc:3d:db:0c:2f:cd:87:af:b4:28:50: 5d:22:4d:92:2e:47:2d:e1:a0:a1:98:9a:f1:a8:a1: 41:58:65:d3:0c:69:91:66:d5:1f:60:30:92:56:a6: 70:35:fe:22:7b:15:95:b4:1b:1a:40:2c:2a:02:10: ce:4c:80:42:37:38:d3:3a:31:d7:36:62:5a:b1:bf: 90:4f:f3:09:ea:05:f1:19:b4:c2:66:97:f9:12:e4: ba:de:46:4d:89:8b:6c:13:74:a8:c7:67:df:35:ba: 9e:0c:40:46:2b:8f:11:c8:b2:b6:32:69:d1:14:7b: 28:18:53:10:95:17:57:a1:91:60:2a:bf:e1:18:67: 2d:de:25:3a:fc:97:7b:7b:4a:50:9e:3e:b9:eb:52: d5:5f:8f:4d:32:32:65:81:c2:ac:18:64:35:5e:b5: 82:96:32:5a:bb:97:a7:42:52:1d:af:e0:05:61:0d: 52:1c:fc:ea:e7:72:51:e3:ac:eb:67:72:39:2e:4c: d7:fb:00:c3:36:82:09:1e:8d:50:06:24:61:69:b1: 67:25:6a:75:7a:d8:a1:84:bd:d6:0e:07:74:1a:91: 0d:87:40:34:40:f3:f5:6b:7e:f6:54:44:9f:b0:21: ea:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:9E:80:F8:74:51:EA:24:04:A0:3B:1C:EB:D7:8E:18:79:84:D1:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/748ef434-f707-3079-9782-d67b421eb63e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.220.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:50:29:2a:bf:61:c2:a8:36:97:15:9b:7b:97:5a:5d:89:08: e2:89:af:36:c0:b9:54:ec:61:72:5d:a4:0d:ac:81:a6:04:6f: 6a:34:d3:ca:34:1a:c8:9d:d9:61:7e:42:a9:a3:31:b5:98:59: 42:75:b0:10:ef:4a:4c:8d:cf:a8:d5:02:91:76:da:db:c6:b6: e3:0a:3d:1e:6c:a0:e3:35:98:94:94:4a:29:03:dc:cb:4e:c7: 73:df:2d:99:99:90:27:0b:d8:ec:7d:3a:de:b7:c4:18:8a:d9: a3:95:03:01:6f:e1:2f:fe:b0:aa:88:53:e9:fd:59:0a:b5:68: b9:4a:97:9b:b0:1c:c6:45:fc:14:7e:80:cd:99:18:58:e9:47: 66:ec:74:f7:fc:6f:f6:3f:ea:35:84:df:45:a9:c0:0b:1a:db: f3:72:fe:35:1d:7e:e3:84:6c:92:69:68:ec:30:cd:2e:05:da: c7:8f:ab:4d:06:0d:10:b5:02:2e:c5:62:81:9d:66:47:d2:ac: 87:94:40:6a:38:63:d4:6a:51:cd:8c:15:9d:1e:6e:d5:63:c9: d7:b5:86:39:39:b9:00:31:94:55:e2:78:f9:1f:4c:c5:d2:e4: 15:8b:e9:dc:f4:0b:66:4c:38:9a:c9:ac:1d:0a:db:29:09:55: 18:81:be:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpblbc630otcpoAPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYzMDAxMDA1MFoXDTI1MDkyODAxMDA1MFowLzEtMCsGA1UEAxMk MzZmZjZiOTktYWQ2MS00NDIzLWIxZGEtMDdiNzIzMGQzZjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLkPh0j6bwv+3AADurfX27/X3D3bDC/Nh6+0 KFBdIk2SLkct4aChmJrxqKFBWGXTDGmRZtUfYDCSVqZwNf4iexWVtBsaQCwqAhDO TIBCNzjTOjHXNmJasb+QT/MJ6gXxGbTCZpf5EuS63kZNiYtsE3Sox2ffNbqeDEBG K48RyLK2MmnRFHsoGFMQlRdXoZFgKr/hGGct3iU6/Jd7e0pQnj6561LVX49NMjJl gcKsGGQ1XrWCljJau5enQlIdr+AFYQ1SHPzq53JR46zrZ3I5LkzX+wDDNoIJHo1Q BiRhabFnJWp1etihhL3WDgd0GpENh0A0QPP1a372VESfsCHqdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDaegPh0UeokBKA7HOvXjhh5hNEcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzQ4ZWY0MzQtZjcwNy0z MDc5LTk3ODItZDY3YjQyMWViNjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRQKSq/YcKoNpcVm3uXWl2JCOKJrzbAuVTsYXJdpA2sgaYEb2o008o0 Gsid2WF+QqmjMbWYWUJ1sBDvSkyNz6jVApF22tvGtuMKPR5soOM1mJSUSikD3MtO x3PfLZmZkCcL2Ox9Ot63xBiK2aOVAwFv4S/+sKqIU+n9WQq1aLlKl5uwHMZF/BR+ gM2ZGFjpR2bsdPf8b/Y/6jWE30WpwAsa2/Ny/jUdfuOEbJJpaOwwzS4F2sePq00G DRC1Ai7FYoGdZkfSrIeUQGo4Y9RqUc2MFZ0ebtVjyde1hjk5uQAxlFXiePkfTMXS 5BWL6dz0C2ZMOJrJrB0K2ykJVRiBvko= -----END CERTIFICATE-----Generated at Tue Jul 1 21:42:01 2025 by rpki-client