$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d32a6d8a-9fb6-3a78-9c6f-b1bb7fc33152.roa File: d32a6d8a-9fb6-3a78-9c6f-b1bb7fc33152.roa (raw, json) Hash identifier: Ob1sy5z0rG4HCLrLwhTHqbSMwDs14ax1WCA2toBa6OM= Subject key identifier: 1A:48:B8:C7:59:08:BF:D5:CE:71:AA:BE:84:7C:00:4B:E5:B5:13:40 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD5C33903296419A30EFF2700 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d32a6d8a-9fb6-3a78-9c6f-b1bb7fc33152.roa Signing time: Tue 12 Aug 2025 19:21:17 +0000 ROA not before: Tue 12 Aug 2025 19:21:17 +0000 ROA not after: Mon 10 Nov 2025 20:21:17 +0000 asID: 6167 IP address blocks: 174.200.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:c3:39:03:29:64:19:a3:0e:ff:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 12 19:21:17 2025 GMT Not After : Nov 10 20:21:17 2025 GMT Subject: CN=2145d5cc-8d14-44f4-863d-6c93d5b23cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:31:83:21:0a:50:ef:d2:3b:c3:bf:e5:e5:19: 8b:d2:21:95:27:95:f5:68:fd:8c:0a:2e:b4:41:bd: d3:d9:08:32:51:8b:aa:6e:3f:5c:9b:7d:da:70:4a: 20:f7:75:56:92:e0:bd:4e:46:b9:08:79:67:7b:90: 09:0e:2b:81:a3:cc:ec:a6:03:6a:48:11:24:6e:27: ba:c0:03:b4:79:44:e7:32:42:98:f0:fe:98:63:c5: d3:98:bf:f8:a3:32:9d:c1:cd:2d:e9:8e:82:4f:89: 2c:c5:be:09:97:57:19:ce:0b:e6:6f:10:51:15:a3: 22:70:cc:5f:64:df:b0:44:96:69:a3:62:87:44:f5: 15:b1:35:6e:1c:7c:a9:8b:54:a1:1e:af:07:c0:4b: 65:09:15:62:de:05:58:04:bc:b0:7b:01:56:64:09: 4e:4c:e8:53:10:44:91:6e:dd:5b:cd:0e:7e:3c:74: 60:9a:9e:15:28:ce:b3:4b:d6:12:e7:25:3c:71:f1: e0:23:29:64:6a:02:7d:d5:07:8f:69:c7:9a:d2:c1: 58:20:b5:48:9d:a0:5f:52:68:2d:9e:ba:ab:60:fd: 26:58:c6:1b:90:39:cd:29:e0:fb:42:9c:da:e2:85: ca:96:aa:93:f7:9a:94:de:53:e1:c9:06:6a:76:53: 24:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:48:B8:C7:59:08:BF:D5:CE:71:AA:BE:84:7C:00:4B:E5:B5:13:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d32a6d8a-9fb6-3a78-9c6f-b1bb7fc33152.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.200.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:92:ad:9c:e5:03:73:62:ab:94:39:a9:59:b4:39:e2:81:45: ad:2e:b2:62:1f:60:d8:4b:0b:ae:29:34:38:04:97:d4:db:f4: a4:82:61:bd:89:d9:71:62:c8:51:9c:cf:04:9b:c0:79:79:04: 07:37:32:80:c7:ac:98:d6:0d:1f:50:99:b6:21:8b:1e:40:e3: 24:c0:a4:e3:86:1f:84:37:17:15:64:7f:a0:8f:cb:6f:9d:4c: ed:3d:39:6e:2b:3f:2a:56:dd:fd:f1:0e:a2:38:dd:e6:f1:47: f3:36:67:c8:ce:96:50:e0:f5:34:22:fe:7b:f9:a8:9c:b8:23: 0a:58:b4:38:53:e9:b8:d3:59:ee:60:5f:28:3e:2d:3a:9e:40: 46:28:73:d2:3d:88:84:96:b2:5f:4f:57:9f:e3:0a:e0:08:f9: da:0e:6f:ec:64:a1:63:38:75:27:ac:44:f8:c2:3c:76:da:8e: e6:ad:5b:1f:69:1c:25:32:67:2e:a1:2a:e0:be:a0:ed:ac:50: 01:9f:3c:c5:0d:f5:10:1a:d4:ca:6b:b0:2d:9d:95:e9:e6:06: 1b:68:17:e2:b5:0d:7e:44:6f:85:20:7d:dc:c9:86:0f:2e:24: ee:42:75:4e:ff:7d:8d:3b:e6:8c:0f:ca:4c:90:c2:65:d6:2e: 39:37:8a:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVwzkDKWQZow7/JwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMjE5MjExN1oXDTI1MTExMDIwMjExN1owLzEtMCsGA1UEAxMk MjE0NWQ1Y2MtOGQxNC00NGY0LTg2M2QtNmM5M2Q1YjIzY2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDGDIQpQ79I7w7/l5RmL0iGVJ5X1aP2MCi60 Qb3T2QgyUYuqbj9cm33acEog93VWkuC9Tka5CHlne5AJDiuBo8zspgNqSBEkbie6 wAO0eUTnMkKY8P6YY8XTmL/4ozKdwc0t6Y6CT4ksxb4Jl1cZzgvmbxBRFaMicMxf ZN+wRJZpo2KHRPUVsTVuHHypi1ShHq8HwEtlCRVi3gVYBLywewFWZAlOTOhTEESR bt1bzQ5+PHRgmp4VKM6zS9YS5yU8cfHgIylkagJ91QePacea0sFYILVInaBfUmgt nrqrYP0mWMYbkDnNKeD7Qpza4oXKlqqT95qU3lPhyQZqdlMk0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpIuMdZCL/VznGqvoR8AEvltRNAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDMyYTZkOGEtOWZiNi0z YTc4LTljNmYtYjFiYjdmYzMzMTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrsjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqSrZzlA3Niq5Q5qVm0OeKBRa0usmIfYNhLC64pNDgEl9Tb9KSCYb2J 2XFiyFGczwSbwHl5BAc3MoDHrJjWDR9QmbYhix5A4yTApOOGH4Q3FxVkf6CPy2+d TO09OW4rPypW3f3xDqI43ebxR/M2Z8jOllDg9TQi/nv5qJy4IwpYtDhT6bjTWe5g Xyg+LTqeQEYoc9I9iISWsl9PV5/jCuAI+doOb+xkoWM4dSesRPjCPHbajuatWx9p HCUyZy6hKuC+oO2sUAGfPMUN9RAa1MprsC2dlenmBhtoF+K1DX5Eb4UgfdzJhg8u JO5CdU7/fY075owPykyQwmXWLjk3ipQ= -----END CERTIFICATE-----Generated at Sat Aug 23 13:21:12 2025 by rpki-client