$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/93e5de7e-8ede-3fb2-988c-f1fa3a5a3cfe.roa File: 93e5de7e-8ede-3fb2-988c-f1fa3a5a3cfe.roa (raw, json) Hash identifier: cwZMLKb9smSUgsanr++9XwoIqNp84OMxhAlNkX0m20o= Subject key identifier: 60:19:DF:82:58:7F:1B:B2:6A:4C:F8:5A:73:40:F1:CF:34:23:86:51 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584ACB4120B0D7A426E947DFE300 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/93e5de7e-8ede-3fb2-988c-f1fa3a5a3cfe.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 6167 IP address blocks: 174.221.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:20:b0:d7:a4:26:e9:47:df:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=33a2e2ec-def2-48c4-aa60-ca2c228a2d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a9:c9:e1:85:1c:88:f9:61:e5:06:ab:49:f6: b3:e7:0f:1f:62:1d:68:3f:6e:51:d0:6d:9d:6b:a6: 9f:6f:61:2d:58:a3:fb:20:28:0b:e9:5e:4a:d7:4e: 5d:df:8b:00:10:f3:0e:f1:fe:3f:fb:31:13:b5:87: 93:00:5d:74:c3:fe:18:ef:0c:56:4f:81:ad:64:ca: 83:7c:c3:1d:d2:dc:c3:99:b1:3f:e1:96:9e:65:59: 34:39:53:c1:29:c1:f3:42:7c:7b:02:99:94:2e:8f: 2a:66:42:cb:53:3a:d9:60:fa:26:c5:a1:9e:9f:94: 46:68:9b:6f:0d:06:c5:44:9c:bf:e6:0a:af:51:b2: fb:7b:64:37:99:80:13:c0:0d:2a:9a:91:f2:b8:0d: 2d:3b:aa:72:95:f3:88:cc:a2:9a:3b:11:41:b4:dd: 21:ee:1b:0e:7d:82:03:7f:1b:01:1f:4b:ed:d9:b7: a9:83:db:f8:55:ab:73:2e:d4:3d:c8:42:97:e0:b8: 65:ef:40:7e:c5:39:27:3b:af:28:c1:13:fc:08:85: 34:b8:d1:8d:28:6d:0a:9b:4a:1c:85:b8:06:a3:01: 8b:64:34:85:7c:b1:32:0f:60:a7:1f:08:37:76:36: ce:b0:99:70:bf:c3:92:c0:0a:df:90:c4:cc:8c:42: 64:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:19:DF:82:58:7F:1B:B2:6A:4C:F8:5A:73:40:F1:CF:34:23:86:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/93e5de7e-8ede-3fb2-988c-f1fa3a5a3cfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.221.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:c6:93:16:44:ef:35:d9:14:17:70:78:75:38:99:19:95:11: aa:44:af:fd:8c:b0:cc:4a:38:f5:72:fd:55:d2:aa:a4:c0:70: 7f:ed:4f:0c:ac:84:55:af:8f:57:b8:7c:af:7a:18:5f:8c:8e: 4c:5a:69:72:1e:9c:b8:05:d7:f2:32:78:ee:ff:f6:e8:11:98: 48:cf:db:87:4d:7f:56:11:48:ff:7b:2d:0f:78:d5:d9:ea:fa: 17:25:5d:f5:40:aa:4b:f9:32:6d:b7:bd:d2:ed:d8:10:81:01: a6:29:7c:51:fc:9c:d8:f6:1d:83:45:d0:ba:d4:f1:33:b8:c6: 62:8c:b3:64:c7:d6:a2:14:89:31:ba:a8:bf:b6:4a:a6:dc:15: 79:23:dd:0a:23:79:33:ae:b2:cd:2f:a0:0b:46:6b:dc:7f:73: b2:8f:a8:f0:9b:83:1e:61:cd:30:bc:6b:b1:30:42:4d:77:f0: 45:61:26:ae:28:93:9f:d4:3a:8e:35:d7:fd:79:7b:53:b4:83: 38:32:e4:2a:a6:d8:57:14:99:d9:93:ab:ef:2c:ee:30:99:b9: 66:f3:51:5f:ee:be:8d:8c:cd:ac:4b:36:85:3f:93:b5:91:d3: ab:6d:fa:fb:41:b1:90:62:f1:a0:ce:d9:28:a8:11:d6:1e:67: a0:ca:c8:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQSCw16Qm6Uff4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk MzNhMmUyZWMtZGVmMi00OGM0LWFhNjAtY2EyYzIyOGEyZDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7KnJ4YUciPlh5QarSfaz5w8fYh1oP25R0G2d a6afb2EtWKP7ICgL6V5K105d34sAEPMO8f4/+zETtYeTAF10w/4Y7wxWT4GtZMqD fMMd0tzDmbE/4ZaeZVk0OVPBKcHzQnx7ApmULo8qZkLLUzrZYPomxaGen5RGaJtv DQbFRJy/5gqvUbL7e2Q3mYATwA0qmpHyuA0tO6pylfOIzKKaOxFBtN0h7hsOfYID fxsBH0vt2bepg9v4VatzLtQ9yEKX4Lhl70B+xTknO68owRP8CIU0uNGNKG0Km0oc hbgGowGLZDSFfLEyD2CnHwg3djbOsJlwv8OSwArfkMTMjEJkfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAZ34JYfxuyakz4WnNA8c80I4ZRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTNlNWRlN2UtOGVkZS0z ZmIyLTk4OGMtZjFmYTNhNWEzY2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErt3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTGkxZE7zXZFBdweHU4mRmVEapEr/2MsMxKOPVy/VXSqqTAcH/tTwys hFWvj1e4fK96GF+MjkxaaXIenLgF1/IyeO7/9ugRmEjP24dNf1YRSP97LQ941dnq +hclXfVAqkv5Mm23vdLt2BCBAaYpfFH8nNj2HYNF0LrU8TO4xmKMs2TH1qIUiTG6 qL+2SqbcFXkj3QojeTOuss0voAtGa9x/c7KPqPCbgx5hzTC8a7EwQk138EVhJq4o k5/UOo411/15e1O0gzgy5Cqm2FcUmdmTq+8s7jCZuWbzUV/uvo2MzaxLNoU/k7WR 06tt+vtBsZBi8aDO2SioEdYeZ6DKyMA= -----END CERTIFICATE-----Generated at Sat Aug 23 13:11:05 2025 by rpki-client