$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e54a316d-7e0a-3eb4-b219-1f4f73e53f0e.roa File: e54a316d-7e0a-3eb4-b219-1f4f73e53f0e.roa (raw, json) Hash identifier: XcKh636FPf8pJ78l9ePKywfELXV/BkSz1/DeiF5V9jo= Subject key identifier: D8:01:20:24:A8:53:B6:92:81:DF:A4:FB:0E:C2:1B:C1:78:FA:07:71 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A39747DB72F3CA0EF85F4AC00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e54a316d-7e0a-3eb4-b219-1f4f73e53f0e.roa Signing time: Tue 17 Jun 2025 19:36:33 +0000 ROA not before: Tue 17 Jun 2025 19:36:33 +0000 ROA not after: Mon 15 Sep 2025 19:36:33 +0000 asID: 6167 IP address blocks: 174.214.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:39:74:7d:b7:2f:3c:a0:ef:85:f4:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 17 19:36:33 2025 GMT Not After : Sep 15 19:36:33 2025 GMT Subject: CN=ee52d198-cb52-4c48-b2f8-f10bc917305e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ef:69:44:e1:82:65:b5:22:86:0c:5e:1c:b5: dd:a4:2f:fc:20:d6:4f:9e:53:1e:7a:45:a0:c4:db: e1:12:e6:ee:a7:af:d7:02:05:f2:a2:ef:c1:cc:ad: 7d:b2:fe:16:80:3b:15:0b:99:44:bb:eb:aa:d3:98: 72:ce:65:e5:93:60:8b:32:6f:5f:c6:50:2f:31:1b: 77:18:94:1f:5c:b9:ed:89:e1:36:a9:a7:e3:a1:e0: 84:df:ef:cc:a5:8a:16:63:3e:df:ae:1f:64:d7:55: 67:06:98:c2:9b:dd:6f:7c:21:9d:80:85:94:1a:eb: ad:d3:c0:df:66:d3:2b:e6:35:79:98:b2:4b:40:c1: b5:95:d9:a7:a2:d1:b8:4d:35:cc:5b:c0:0c:50:3e: 6b:49:20:bb:78:20:c2:71:aa:d5:7a:c5:2a:2f:44: 2f:29:95:12:d4:ac:e1:b6:41:ab:2f:0a:29:6c:0d: 3d:6b:12:76:c4:42:ae:78:b9:94:0f:f1:46:d4:80: cc:75:99:a8:32:6c:33:68:00:10:ad:55:3b:30:11: b7:f2:e2:a8:19:9d:9e:58:16:21:99:91:81:72:0e: b9:5c:33:cc:28:3c:72:fa:e6:65:8c:94:9e:de:6a: a3:20:02:83:76:c7:df:3e:ff:69:5d:c5:82:94:94: 78:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:01:20:24:A8:53:B6:92:81:DF:A4:FB:0E:C2:1B:C1:78:FA:07:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e54a316d-7e0a-3eb4-b219-1f4f73e53f0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.214.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:b3:23:8a:64:f3:e8:43:06:b2:cd:0d:95:3b:ad:7f:0d:83: 73:39:d2:c6:ce:86:99:6c:2c:a2:f3:0f:16:84:3b:8a:83:ab: 05:48:70:a4:83:66:09:6c:83:a8:31:bd:db:99:5a:57:fc:09: cc:42:f9:e3:05:9e:18:5c:45:7d:89:70:29:82:96:bc:39:10: b1:92:c6:3b:77:f1:4a:fc:71:3f:6f:8a:01:5a:eb:4c:1d:2a: a0:94:64:d9:6e:a3:92:af:c0:8a:27:5e:a7:0f:2f:29:37:3d: d1:1c:29:92:3b:32:b7:68:84:ea:98:6b:8a:69:33:11:1a:79: a7:32:86:d3:db:5b:55:be:34:f9:00:d9:b5:6b:21:58:4d:65: f3:f5:7f:8b:ab:23:0c:bf:f2:9c:44:4b:ea:46:a6:bb:65:36: 89:d5:df:72:67:21:8a:4c:15:c7:96:93:77:d4:d9:1d:bc:d5: a2:00:19:ca:b8:63:7a:32:58:6c:5f:be:64:11:de:2f:0b:db: b8:98:11:f7:94:2c:76:5c:e5:2e:12:64:cf:e6:70:d5:c7:a5: ca:89:07:e5:aa:aa:7b:bc:55:8a:ae:34:39:13:da:6a:ca:f6: 04:b0:78:46:c0:83:12:57:7b:2b:7b:b3:40:f9:26:f5:ea:1a: 64:d5:39:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo5dH23Lzyg74X0rAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDYxNzE5MzYzM1oXDTI1MDkxNTE5MzYzM1owLzEtMCsGA1UEAxMk ZWU1MmQxOTgtY2I1Mi00YzQ4LWIyZjgtZjEwYmM5MTczMDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzu9pROGCZbUihgxeHLXdpC/8INZPnlMeekWg xNvhEubup6/XAgXyou/BzK19sv4WgDsVC5lEu+uq05hyzmXlk2CLMm9fxlAvMRt3 GJQfXLntieE2qafjoeCE3+/MpYoWYz7frh9k11VnBpjCm91vfCGdgIWUGuut08Df ZtMr5jV5mLJLQMG1ldmnotG4TTXMW8AMUD5rSSC7eCDCcarVesUqL0QvKZUS1Kzh tkGrLwopbA09axJ2xEKueLmUD/FG1IDMdZmoMmwzaAAQrVU7MBG38uKoGZ2eWBYh mZGBcg65XDPMKDxy+uZljJSe3mqjIAKDdsffPv9pXcWClJR4RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgBICSoU7aSgd+k+w7CG8F4+gdxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTU0YTMxNmQtN2UwYS0z ZWI0LWIyMTktMWY0ZjczZTUzZjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+zI4pk8+hDBrLNDZU7rX8Ng3M50sbOhplsLKLzDxaEO4qDqwVIcKSD Zglsg6gxvduZWlf8CcxC+eMFnhhcRX2JcCmClrw5ELGSxjt38Ur8cT9vigFa60wd KqCUZNluo5KvwIonXqcPLyk3PdEcKZI7MrdohOqYa4ppMxEaeacyhtPbW1W+NPkA 2bVrIVhNZfP1f4urIwy/8pxES+pGprtlNonV33JnIYpMFceWk3fU2R281aIAGcq4 Y3oyWGxfvmQR3i8L27iYEfeULHZc5S4SZM/mcNXHpcqJB+Wqqnu8VYquNDkT2mrK 9gSweEbAgxJXeyt7s0D5JvXqGmTVOe0= -----END CERTIFICATE-----Generated at Tue Jul 1 01:06:25 2025 by rpki-client