$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b95ee2f-7ef0-380e-848e-47d344eab792.roa File: 8b95ee2f-7ef0-380e-848e-47d344eab792.roa (raw, json) Hash identifier: 9KBL+OgxAsJZROdbYSbR3cftuYJzZtkrsHEw2qnWTNg= Subject key identifier: BD:22:9E:1C:02:76:C4:03:4D:2F:DA:50:11:86:7E:09:62:DE:F2:83 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A7FE0A06B56A03A3B5A037A40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b95ee2f-7ef0-380e-848e-47d344eab792.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 6167 IP address blocks: 174.214.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:a0:6b:56:a0:3a:3b:5a:03:7a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=e3b72ff9-cad5-4b24-8949-609abb4d5388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:85:07:7f:8b:33:59:b3:1a:4b:4d:94:ea:72: 89:1f:69:36:b6:1d:c8:09:40:a9:75:a2:27:6d:10: 03:62:6c:32:3a:10:76:f3:70:83:d8:c7:32:9a:83: 87:0e:66:08:99:20:2a:af:8c:da:66:32:c4:78:7f: b7:dd:6e:22:3a:27:fb:50:16:6a:c1:29:31:5a:ad: 0e:11:72:80:19:25:8f:b2:9a:d8:7d:f7:c9:f8:a9: bf:71:1e:02:15:7b:f1:fd:31:05:5c:b0:c9:2c:4e: 57:6b:c4:3b:86:05:03:5d:6e:cb:55:50:05:b8:57: f7:87:98:2f:0b:e5:48:08:f5:f2:e0:17:e1:08:05: e0:07:e8:26:9b:f8:21:a2:40:40:3a:e2:14:4e:84: e3:66:0f:87:2a:e9:bb:99:8f:ff:10:55:6c:ef:8c: 2f:28:e8:1f:9c:f0:68:b6:08:0a:20:30:eb:1d:eb: cf:5f:ab:dd:2e:84:8c:0e:8a:1a:a6:23:5f:f5:6a: 82:bb:b8:cc:ca:67:f2:03:39:ca:2a:1c:44:f0:73: 67:47:92:51:68:a5:d2:ed:5e:c7:14:9b:ce:93:88: d1:b1:98:7d:00:dd:92:41:b1:b6:42:c6:aa:3d:aa: 70:e6:47:f3:d9:ce:14:65:50:7e:07:36:3a:96:36: 2d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:22:9E:1C:02:76:C4:03:4D:2F:DA:50:11:86:7E:09:62:DE:F2:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b95ee2f-7ef0-380e-848e-47d344eab792.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.214.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:5e:85:99:3e:f1:45:d6:26:f4:88:09:61:94:c2:49:1c:d2: c5:8d:9b:52:41:a0:c1:c9:94:a6:44:d4:1e:c9:93:42:62:cb: 46:fa:f5:45:b6:2d:9c:16:bc:48:9f:d1:fa:91:5f:83:fb:95: 91:ef:f9:0f:92:0c:64:84:22:35:56:fb:20:bc:1e:12:22:59: 2d:b9:01:cc:25:0f:f4:d4:d2:b8:ae:2d:3d:d3:00:2e:02:f3: ed:de:45:19:52:c1:d8:65:2e:f1:aa:7f:71:07:9c:ec:ba:12: f6:87:ef:4d:27:da:d8:78:1b:fe:77:6f:9e:26:ae:62:45:f4: ef:75:7c:47:9e:a2:ed:1a:5c:18:aa:6a:23:ba:16:02:fe:f2: 62:94:9b:be:bd:f5:8b:4d:03:c6:03:9b:0b:fe:a8:84:a6:af: b5:0f:bf:ad:83:6f:70:66:26:bf:00:3c:49:f5:43:3c:c7:d8: 7a:e7:65:2e:16:14:00:ff:1a:a5:df:43:3a:ae:32:72:ca:1a: c6:17:a9:91:2b:c5:f8:ba:f2:f3:36:70:06:cb:88:14:e1:71: af:b6:55:02:7c:26:78:44:51:f4:b5:ab:13:6e:e3:75:81:98: 27:bd:b0:94:a6:fd:a1:20:6a:60:81:9b:12:1a:88:35:12:98: f1:02:9a:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4KBrVqA6O1oDekAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk ZTNiNzJmZjktY2FkNS00YjI0LTg5NDktNjA5YWJiNGQ1Mzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYUHf4szWbMaS02U6nKJH2k2th3ICUCpdaIn bRADYmwyOhB283CD2McymoOHDmYImSAqr4zaZjLEeH+33W4iOif7UBZqwSkxWq0O EXKAGSWPsprYfffJ+Km/cR4CFXvx/TEFXLDJLE5Xa8Q7hgUDXW7LVVAFuFf3h5gv C+VICPXy4BfhCAXgB+gmm/ghokBAOuIUToTjZg+HKum7mY//EFVs74wvKOgfnPBo tggKIDDrHevPX6vdLoSMDooapiNf9WqCu7jMymfyAznKKhxE8HNnR5JRaKXS7V7H FJvOk4jRsZh9AN2SQbG2QsaqPapw5kfz2c4UZVB+BzY6ljYtzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0inhwCdsQDTS/aUBGGfgli3vKDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGI5NWVlMmYtN2VmMC0z ODBlLTg0OGUtNDdkMzQ0ZWFiNzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdehZk+8UXWJvSICWGUwkkc0sWNm1JBoMHJlKZE1B7Jk0Jiy0b69UW2 LZwWvEif0fqRX4P7lZHv+Q+SDGSEIjVW+yC8HhIiWS25AcwlD/TU0riuLT3TAC4C 8+3eRRlSwdhlLvGqf3EHnOy6EvaH700n2th4G/53b54mrmJF9O91fEeeou0aXBiq aiO6FgL+8mKUm7699YtNA8YDmwv+qISmr7UPv62Db3BmJr8APEn1QzzH2HrnZS4W FAD/GqXfQzquMnLKGsYXqZErxfi68vM2cAbLiBThca+2VQJ8JnhEUfS1qxNu43WB mCe9sJSm/aEgamCBmxIaiDUSmPECmj8= -----END CERTIFICATE-----Generated at Sat Aug 23 18:55:54 2025 by rpki-client