$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/82f7b60b-3320-3bd3-a587-5602458d8f3d.roa File: 82f7b60b-3320-3bd3-a587-5602458d8f3d.roa (raw, json) Hash identifier: Qs5Id3XG1Ov5+YYrFsnQ5jqYqr1D0x0tGwMLRPYou2U= Subject key identifier: C8:8D:F4:B2:BA:9C:1B:5F:66:92:29:0B:EB:67:04:07:E5:C8:4E:C3 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A4CF2B554EDA4B8AFFF431E80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/82f7b60b-3320-3bd3-a587-5602458d8f3d.roa Signing time: Tue 24 Jun 2025 19:11:13 +0000 ROA not before: Tue 24 Jun 2025 19:11:13 +0000 ROA not after: Mon 22 Sep 2025 19:11:13 +0000 asID: 6167 IP address blocks: 174.255.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:f2:b5:54:ed:a4:b8:af:ff:43:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 24 19:11:13 2025 GMT Not After : Sep 22 19:11:13 2025 GMT Subject: CN=09bf3df2-c07f-4fd8-8981-915bb9f30166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:54:bb:a3:25:d1:a8:18:20:a6:a4:c1:b1:a6: 40:79:7d:d4:69:ee:89:bf:d6:4b:1a:ad:8b:5e:6b: 55:62:8b:69:91:d8:82:d9:67:b9:eb:ae:49:7d:75: 5e:d8:56:d3:4f:b7:38:8c:92:02:59:d5:81:2d:68: ca:78:4d:d9:cc:14:49:a7:a9:bd:8e:7b:15:3f:1a: c9:36:b4:9e:5d:b1:5a:9f:db:ac:c3:66:d0:8a:c6: e0:b6:ba:31:01:c1:52:dc:e1:f1:cb:14:42:37:2f: 8d:b9:78:6e:90:6c:47:f6:77:36:08:5d:b9:88:9f: 78:ea:d8:3c:d2:ab:e5:19:e8:7c:2b:44:0a:ba:0b: 87:68:e1:49:88:e1:74:2b:11:30:29:88:aa:f3:be: 8e:1d:77:c2:67:f1:1b:57:08:4f:e0:1b:91:83:4f: 84:1d:f4:c2:e8:0e:b3:e8:ec:50:dc:59:d6:aa:48: 12:18:4c:28:db:5e:c2:e2:5e:e7:92:eb:76:95:68: 48:f5:5b:8d:e0:ca:8a:45:c7:4e:0d:c5:03:55:ef: ac:55:d1:8a:39:27:ea:14:8c:d9:9e:63:91:01:c3: df:21:fb:09:99:42:3b:a5:4b:b1:84:d2:7d:56:36: 61:6d:da:97:d5:d0:c7:ab:bb:2f:aa:0b:f4:07:1c: 47:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:8D:F4:B2:BA:9C:1B:5F:66:92:29:0B:EB:67:04:07:E5:C8:4E:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/82f7b60b-3320-3bd3-a587-5602458d8f3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.255.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:89:69:c7:d6:b1:b7:c4:d9:9f:ea:b0:a4:f1:0f:1d:b6:93: 85:fb:1e:ce:4c:88:82:42:65:96:64:d1:8a:46:71:39:d3:1b: 02:d0:49:01:12:69:72:a6:e7:36:fa:22:79:f8:8c:8a:b4:fa: eb:13:c1:35:1f:84:46:48:ed:b7:f7:3c:30:81:6f:84:6d:ee: 35:65:b3:23:f6:a0:ca:90:f6:fa:4e:5d:50:98:dc:ef:3e:51: 96:33:fe:1f:f4:26:cf:09:ec:cc:f1:1c:69:cb:22:f7:4d:d3: a8:f3:fc:d4:76:5d:37:1e:c8:ed:2e:ec:18:11:94:48:d3:10: 5a:e3:64:74:2e:c2:24:82:74:ed:2d:bf:06:7f:0c:e5:4b:e6: e1:bb:76:42:98:35:bb:01:19:22:0d:b1:5e:8e:4e:eb:1d:a5: a0:02:a3:ba:18:0d:82:79:d5:41:7f:ac:f1:a7:2f:6b:91:77: 26:ef:fc:63:61:00:3d:88:b2:35:02:b7:3d:9e:c5:28:52:c1: f4:f0:9a:39:83:5f:75:9f:80:8a:5e:36:d1:5f:9e:1f:15:08: 7a:64:4a:05:9b:10:d1:a2:81:13:c7:a7:80:c4:28:9b:a3:b5: 82:55:0b:32:16:4e:80:e2:85:b1:cb:fd:28:20:40:24:9f:6e: 95:07:b4:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpM8rVU7aS4r/9DHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYyNDE5MTExM1oXDTI1MDkyMjE5MTExM1owLzEtMCsGA1UEAxMk MDliZjNkZjItYzA3Zi00ZmQ4LTg5ODEtOTE1YmI5ZjMwMTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FS7oyXRqBggpqTBsaZAeX3Uae6Jv9ZLGq2L XmtVYotpkdiC2We5665JfXVe2FbTT7c4jJICWdWBLWjKeE3ZzBRJp6m9jnsVPxrJ NrSeXbFan9usw2bQisbgtroxAcFS3OHxyxRCNy+NuXhukGxH9nc2CF25iJ946tg8 0qvlGeh8K0QKuguHaOFJiOF0KxEwKYiq876OHXfCZ/EbVwhP4BuRg0+EHfTC6A6z 6OxQ3FnWqkgSGEwo217C4l7nkut2lWhI9VuN4MqKRcdODcUDVe+sVdGKOSfqFIzZ nmORAcPfIfsJmUI7pUuxhNJ9VjZhbdqX1dDHq7svqgv0BxxHNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMiN9LK6nBtfZpIpC+tnBAflyE7DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODJmN2I2MGItMzMyMC0z YmQzLWE1ODctNTYwMjQ1OGQ4ZjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrv/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOJacfWsbfE2Z/qsKTxDx22k4X7Hs5MiIJCZZZk0YpGcTnTGwLQSQES aXKm5zb6Inn4jIq0+usTwTUfhEZI7bf3PDCBb4Rt7jVlsyP2oMqQ9vpOXVCY3O8+ UZYz/h/0Js8J7MzxHGnLIvdN06jz/NR2XTceyO0u7BgRlEjTEFrjZHQuwiSCdO0t vwZ/DOVL5uG7dkKYNbsBGSINsV6OTusdpaACo7oYDYJ51UF/rPGnL2uRdybv/GNh AD2IsjUCtz2exShSwfTwmjmDX3WfgIpeNtFfnh8VCHpkSgWbENGigRPHp4DEKJuj tYJVCzIWToDihbHL/SggQCSfbpUHtHw= -----END CERTIFICATE-----Generated at Tue Jul 1 16:47:48 2025 by rpki-client