$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bb255ba2-f0fa-350a-82e7-494741e3003e.roa File: bb255ba2-f0fa-350a-82e7-494741e3003e.roa (raw, json) Hash identifier: 2f5YI+55b9ul2YZpUnELAQK+njsBldo9rnLsBvL4oEM= Subject key identifier: 2D:BF:B6:EE:72:D6:90:D3:6B:0C:B1:AA:DF:FB:CF:7A:B5:A4:60:95 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A4CF2B573CC75E56387025560 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bb255ba2-f0fa-350a-82e7-494741e3003e.roa Signing time: Tue 24 Jun 2025 19:11:13 +0000 ROA not before: Tue 24 Jun 2025 19:11:13 +0000 ROA not after: Mon 22 Sep 2025 19:11:13 +0000 asID: 6167 IP address blocks: 174.255.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:f2:b5:73:cc:75:e5:63:87:02:55:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 24 19:11:13 2025 GMT Not After : Sep 22 19:11:13 2025 GMT Subject: CN=dcd95f46-b0fe-4ebc-97db-d455d5f37f29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:38:21:33:e5:d8:88:d7:bc:92:b3:f6:9d:01: 93:8b:0f:70:67:48:da:ee:18:57:dd:d1:6a:8d:8f: 68:b6:8f:5a:dd:d0:1c:30:cc:36:21:c2:eb:ba:a5: 69:e8:f9:55:63:92:f8:96:13:8f:c9:49:6c:f7:da: b5:a7:28:c1:ed:67:0f:ca:00:ae:81:28:b2:3c:fb: f0:fa:c3:d7:37:09:f9:a8:b0:2a:7d:7b:3d:de:86: b3:8c:b2:93:3c:4e:ec:43:24:3c:c7:7a:11:c5:fc: ba:1d:a3:21:ea:71:27:88:5e:5a:f1:98:59:83:39: 84:01:e0:79:7c:f2:e5:79:bc:73:29:e1:50:fa:17: 59:40:d6:91:99:ef:8c:81:af:82:21:7e:dc:05:49: 16:71:cd:b2:c4:83:40:47:3e:9e:86:62:cd:1a:3b: a8:d6:86:55:bc:a4:e2:77:b4:12:18:90:22:75:e9: df:27:e7:35:7f:9e:b0:f2:ff:ca:89:ff:35:b2:ee: 14:69:76:86:fa:61:91:bd:02:ca:2d:e3:41:47:06: 60:d1:08:5f:24:b3:36:02:a1:03:53:54:ae:65:ab: b1:11:35:6e:fc:1b:8f:9f:1b:b1:02:ed:5e:df:29: 04:1b:bf:3a:30:16:3e:3e:ac:83:cb:73:e8:ab:60: 7f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:BF:B6:EE:72:D6:90:D3:6B:0C:B1:AA:DF:FB:CF:7A:B5:A4:60:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bb255ba2-f0fa-350a-82e7-494741e3003e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.255.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:b9:ba:be:ee:fc:53:0e:08:3e:e2:63:fb:02:b6:ad:d8:bc: 80:a7:e1:08:c9:fc:55:3d:66:95:f5:ed:1d:22:92:4c:9a:09: 79:27:72:6f:d2:08:de:6b:17:67:bd:e5:e5:4e:59:ce:01:a6: 5b:22:b0:ac:fe:c4:fe:6a:60:11:48:d3:38:64:8f:5c:0b:33: 9f:d9:cf:9a:68:7c:27:2a:07:fb:03:90:54:65:48:93:9a:3e: c7:de:a2:6b:b8:96:73:7a:cb:7a:36:ce:1f:1d:4d:5d:19:52: 27:17:f6:e5:3b:37:68:1e:58:66:4a:f4:de:31:8f:73:2b:cd: a1:bf:b2:ed:75:fa:fd:63:a0:e1:11:b9:ca:2f:48:0c:42:fe: 77:a8:f1:c4:15:70:21:22:63:70:ab:0e:d2:00:85:e4:2e:25: 77:82:96:b9:46:e9:0b:fb:f4:d1:17:be:85:9a:79:a0:ac:d5: 48:27:a4:3a:e9:e4:84:35:ff:6f:dd:29:6c:16:e4:52:46:05: da:50:d7:b1:b1:54:12:22:1c:b2:0b:48:1a:29:3f:a7:df:9e: d3:0b:b5:83:a2:cb:c1:10:8a:07:b8:42:04:9a:4e:81:31:8e: 66:36:58:8d:3b:f6:98:29:c6:87:98:f6:da:ba:ca:84:b9:0b: be:80:bd:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpM8rVzzHXlY4cCVWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYyNDE5MTExM1oXDTI1MDkyMjE5MTExM1owLzEtMCsGA1UEAxMk ZGNkOTVmNDYtYjBmZS00ZWJjLTk3ZGItZDQ1NWQ1ZjM3ZjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDghM+XYiNe8krP2nQGTiw9wZ0ja7hhX3dFq jY9oto9a3dAcMMw2IcLruqVp6PlVY5L4lhOPyUls99q1pyjB7WcPygCugSiyPPvw +sPXNwn5qLAqfXs93oazjLKTPE7sQyQ8x3oRxfy6HaMh6nEniF5a8ZhZgzmEAeB5 fPLlebxzKeFQ+hdZQNaRme+Mga+CIX7cBUkWcc2yxINARz6ehmLNGjuo1oZVvKTi d7QSGJAidenfJ+c1f56w8v/Kif81su4UaXaG+mGRvQLKLeNBRwZg0QhfJLM2AqED U1SuZauxETVu/BuPnxuxAu1e3ykEG786MBY+PqyDy3Poq2B/0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2/tu5y1pDTawyxqt/7z3q1pGCVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmIyNTViYTItZjBmYS0z NTBhLTgyZTctNDk0NzQxZTMwMDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrv/4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ65ur7u/FMOCD7iY/sCtq3YvICn4QjJ/FU9ZpX17R0ikkyaCXkncm/S CN5rF2e95eVOWc4BplsisKz+xP5qYBFI0zhkj1wLM5/Zz5pofCcqB/sDkFRlSJOa Psfeomu4lnN6y3o2zh8dTV0ZUicX9uU7N2geWGZK9N4xj3MrzaG/su11+v1joOER ucovSAxC/neo8cQVcCEiY3CrDtIAheQuJXeClrlG6Qv79NEXvoWaeaCs1UgnpDrp 5IQ1/2/dKWwW5FJGBdpQ17GxVBIiHLILSBopP6ffntMLtYOiy8EQige4QgSaToEx jmY2WI079pgpxoeY9tq6yoS5C76Avak= -----END CERTIFICATE-----Generated at Tue Jul 1 15:03:23 2025 by rpki-client