$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3effd9f-0a8d-3fe3-9cef-760ceaee67f3.roa File: d3effd9f-0a8d-3fe3-9cef-760ceaee67f3.roa (raw, json) Hash identifier: v0tdd2osiRKha9CV22urfvhU1yCPyMfME8dTlK3y8G4= Subject key identifier: 19:0D:2A:8C:54:50:F1:F4:92:69:41:D7:96:93:9D:93:D4:0D:E7:06 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD23BDF81E0DE1E8E3823E740 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3effd9f-0a8d-3fe3-9cef-760ceaee67f3.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 701 IP address blocks: 173.67.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:df:81:e0:de:1e:8e:38:23:e7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=d3f2a395-1397-4dbc-889f-35f73748029a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6e:14:69:5a:7d:39:f2:52:9f:d6:e2:7f:f5: dd:11:27:94:2f:37:7e:7a:2b:46:c4:00:db:ab:c2: a1:22:aa:bd:4d:68:e1:e2:4b:c2:dd:15:88:e2:fa: 77:ad:4f:56:11:88:24:a6:d7:d6:33:63:51:e8:fc: fc:50:a2:df:ff:b8:be:d1:a2:a9:55:a0:ef:58:06: b3:8a:8a:74:16:3d:ba:f0:a4:df:a8:a7:26:1f:16: 32:14:e2:0c:d3:11:aa:ff:f6:4d:cd:97:bc:47:92: 82:76:73:c9:d2:02:c9:a0:bc:09:01:c5:55:0c:db: 52:66:3f:76:e8:ab:63:a6:ca:03:5c:25:56:a0:27: 47:56:b5:33:0a:a8:5b:85:79:a1:c4:47:3b:7f:70: a0:85:03:53:22:11:1f:4e:a1:f3:21:1f:5f:06:4d: ec:12:0e:a7:96:f8:fa:a2:18:19:9f:39:48:9a:1b: 6e:a1:7f:7e:70:ab:1a:c4:cb:2d:b1:e6:e5:c3:15: e6:97:8c:33:68:04:54:1b:d3:c2:bc:c5:25:3c:7f: 7d:09:db:71:31:ca:0f:51:25:c2:10:e3:99:c3:ba: 70:11:f1:01:b0:10:af:03:33:34:e8:30:6a:59:b3: 19:b0:ea:bc:8e:5e:73:9b:bc:eb:96:9b:15:91:33: 8b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0D:2A:8C:54:50:F1:F4:92:69:41:D7:96:93:9D:93:D4:0D:E7:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3effd9f-0a8d-3fe3-9cef-760ceaee67f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 173.67.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:40:cd:c1:f1:48:63:8e:6e:cd:8b:37:a7:88:ea:00:f1:8e: e3:2d:22:d3:36:ad:25:c8:f6:32:52:19:e3:d5:a1:17:52:b3: f7:eb:69:86:57:3f:d5:98:46:15:98:6d:6c:a2:1c:c6:16:37: 85:ae:69:0d:32:51:13:41:35:b3:af:ba:ce:98:5f:0e:44:e2: 77:3f:d1:de:a7:e3:c7:26:4a:9d:4a:6b:dd:5f:e8:74:f9:72: bf:1f:f1:94:3c:7b:e5:78:c6:97:e7:b7:0d:ad:ca:7e:66:be: 53:15:a5:b8:1e:a1:36:8d:ec:1b:d1:f7:84:28:4b:89:40:49: 0f:84:e8:02:18:86:04:3f:52:9f:93:f8:a7:a8:d7:64:b4:f8: 85:e8:1f:db:15:13:8d:fe:b0:a1:83:7d:27:2c:9b:d7:e3:62: 64:d0:4f:9b:7c:a8:28:8f:9c:15:af:8b:fa:7e:ef:13:17:18: 9f:c4:34:17:d6:05:6e:58:d9:fd:2f:78:c3:4f:2f:2d:8a:3f: c9:aa:66:fa:da:0d:dd:3d:45:a1:88:96:68:67:a5:1f:45:32: 59:61:1d:8f:44:0d:1f:ae:8d:5f:ea:bb:51:e6:93:a1:d3:40: a3:9f:f4:e7:96:bb:17:bd:90:12:f5:a4:85:d0:fd:fa:6c:5e: 25:44:d7:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO9+B4N4ejjgj50AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZDNmMmEzOTUtMTM5Ny00ZGJjLTg4OWYtMzVmNzM3NDgwMjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiW4UaVp9OfJSn9bif/XdESeULzd+eitGxADb q8KhIqq9TWjh4kvC3RWI4vp3rU9WEYgkptfWM2NR6Pz8UKLf/7i+0aKpVaDvWAaz iop0Fj268KTfqKcmHxYyFOIM0xGq//ZNzZe8R5KCdnPJ0gLJoLwJAcVVDNtSZj92 6KtjpsoDXCVWoCdHVrUzCqhbhXmhxEc7f3CghQNTIhEfTqHzIR9fBk3sEg6nlvj6 ohgZnzlImhtuoX9+cKsaxMstseblwxXml4wzaARUG9PCvMUlPH99CdtxMcoPUSXC EOOZw7pwEfEBsBCvAzM06DBqWbMZsOq8jl5zm7zrlpsVkTOLFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkNKoxUUPH0kmlB15aTnZPUDecGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDNlZmZkOWYtMGE4ZC0z ZmUzLTljZWYtNzYwY2VhZWU2N2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErUPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpAzcHxSGOObs2LN6eI6gDxjuMtItM2rSXI9jJSGePVoRdSs/fraYZX P9WYRhWYbWyiHMYWN4WuaQ0yURNBNbOvus6YXw5E4nc/0d6n48cmSp1Ka91f6HT5 cr8f8ZQ8e+V4xpfntw2tyn5mvlMVpbgeoTaN7BvR94QoS4lASQ+E6AIYhgQ/Up+T +Keo12S0+IXoH9sVE43+sKGDfScsm9fjYmTQT5t8qCiPnBWvi/p+7xMXGJ/ENBfW BW5Y2f0veMNPLy2KP8mqZvraDd09RaGIlmhnpR9FMllhHY9EDR+ujV/qu1Hmk6HT QKOf9OeWuxe9kBL1pIXQ/fpsXiVE170= -----END CERTIFICATE-----Generated at Sat Aug 23 15:55:01 2025 by rpki-client