$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d7fe30dc-5f89-3965-a504-32c75043f39b.roa File: d7fe30dc-5f89-3965-a504-32c75043f39b.roa (raw, json) Hash identifier: y8sM6tiCXdpuLnDLbAv/yFOdrA6n5jJLbkyn6iuwR98= Subject key identifier: 8D:60:C2:E0:8B:69:85:64:36:93:40:26:01:2C:17:BC:AC:C7:7C:3D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584ACB41207DE085B546AC3E8180 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d7fe30dc-5f89-3965-a504-32c75043f39b.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 6167 IP address blocks: 174.221.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:41:20:7d:e0:85:b5:46:ac:3e:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=b1ea0d5f-95f1-4628-8720-99fa89103881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:db:7b:59:3a:49:74:b3:b5:e4:7e:7b:da:93: b0:fe:61:ac:45:f9:3e:d8:ac:cc:13:cb:22:26:b8: 74:93:f4:33:7d:52:68:55:32:77:c4:87:a8:41:a3: 07:f6:3d:83:df:ce:fb:8d:f2:c4:bf:97:cc:4b:9d: 35:a0:f3:a9:86:cd:35:15:7f:cc:90:21:0a:1c:96: 04:b7:7d:f1:4f:4a:bd:bb:34:12:4e:3d:72:cb:48: 5d:4a:5f:93:24:15:12:44:ef:be:5f:c6:18:f1:e4: 7e:84:d4:aa:21:8d:e5:d8:f4:93:a9:c8:e6:47:25: 65:70:8e:03:38:5b:35:f6:ee:9f:73:29:ac:fe:f0: ba:a3:8d:7d:ee:8c:b4:45:f9:32:ab:ce:a5:75:e4: ce:ad:23:20:fb:9e:c9:d9:73:2a:8a:a3:11:8f:58: 87:1e:1d:16:ba:d8:bf:b4:5c:21:93:6d:a6:6e:ab: 89:99:72:57:f8:12:87:e2:7f:b0:ac:ca:68:07:d9: 26:79:c9:05:05:fe:1a:a2:12:fb:bf:0c:8f:d4:9e: 75:93:b8:68:e1:d2:91:5e:6a:03:cf:d0:ba:96:9b: 8f:e7:5c:5a:ea:f7:95:f0:8e:3a:0a:27:8f:c0:e5: 03:8e:f5:d1:eb:91:ae:55:3d:7c:fe:b4:55:af:b4: 86:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:60:C2:E0:8B:69:85:64:36:93:40:26:01:2C:17:BC:AC:C7:7C:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d7fe30dc-5f89-3965-a504-32c75043f39b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.221.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:fd:b4:be:19:8f:ca:05:ef:ba:4d:c1:c6:5a:e3:06:a4:8a: ac:48:79:25:b9:f6:47:73:07:fa:7b:29:e0:44:ae:1b:cb:76: 10:86:79:47:42:52:06:f5:05:13:34:5c:dd:f7:7d:6c:21:dc: f0:96:32:91:73:3a:f8:91:6e:0d:15:c8:13:75:8e:f1:16:ae: c1:72:ce:d0:2b:77:88:3c:61:f9:0a:4c:80:80:b8:8e:5e:11: 9d:8b:a8:86:53:4b:52:76:33:d7:0d:01:de:4e:d0:c0:19:c9: a4:68:60:76:e0:47:6b:41:6f:63:15:08:6a:3d:ac:9e:84:a2: 44:b1:3c:81:02:3a:67:e6:d3:77:2d:bb:b1:6c:13:da:91:27: 07:4f:15:23:3e:58:6f:0a:60:eb:22:f4:d7:88:1f:be:2d:a1: 25:2e:df:79:81:f3:a2:41:9d:96:04:eb:1f:5e:05:40:aa:e7: a1:ad:c1:6b:b5:1c:f8:dd:bd:32:c4:12:2c:9c:22:5a:37:03: a5:54:52:75:d2:dc:b7:df:b3:8c:97:88:18:94:8d:3e:79:1b: 18:e1:08:53:af:2e:3a:41:9d:a5:96:55:4e:0a:1b:96:36:a1: 66:24:43:6c:e1:e8:f5:40:33:96:a6:3e:c1:42:c0:94:19:cc: 8c:d3:36:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQSB94IW1Rqw+gYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk YjFlYTBkNWYtOTVmMS00NjI4LTg3MjAtOTlmYTg5MTAzODgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdt7WTpJdLO15H572pOw/mGsRfk+2KzME8si Jrh0k/QzfVJoVTJ3xIeoQaMH9j2D3877jfLEv5fMS501oPOphs01FX/MkCEKHJYE t33xT0q9uzQSTj1yy0hdSl+TJBUSRO++X8YY8eR+hNSqIY3l2PSTqcjmRyVlcI4D OFs19u6fcyms/vC6o4197oy0Rfkyq86ldeTOrSMg+57J2XMqiqMRj1iHHh0Wuti/ tFwhk22mbquJmXJX+BKH4n+wrMpoB9kmeckFBf4aohL7vwyP1J51k7ho4dKRXmoD z9C6lpuP51xa6veV8I46CiePwOUDjvXR65GuVT18/rRVr7SG4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1gwuCLaYVkNpNAJgEsF7ysx3w9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDdmZTMwZGMtNWY4OS0z OTY1LWE1MDQtMzJjNzUwNDNmMzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErt2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAX9tL4Zj8oF77pNwcZa4wakiqxIeSW59kdzB/p7KeBErhvLdhCGeUdC Ugb1BRM0XN33fWwh3PCWMpFzOviRbg0VyBN1jvEWrsFyztArd4g8YfkKTICAuI5e EZ2LqIZTS1J2M9cNAd5O0MAZyaRoYHbgR2tBb2MVCGo9rJ6EokSxPIECOmfm03ct u7FsE9qRJwdPFSM+WG8KYOsi9NeIH74toSUu33mB86JBnZYE6x9eBUCq56GtwWu1 HPjdvTLEEiycIlo3A6VUUnXS3Lffs4yXiBiUjT55GxjhCFOvLjpBnaWWVU4KG5Y2 oWYkQ2zh6PVAM5amPsFCwJQZzIzTNoQ= -----END CERTIFICATE-----Generated at Sat Aug 23 14:32:13 2025 by rpki-client