$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f8942720-130a-31b6-8fc0-d586e4dff4a1.roa File: f8942720-130a-31b6-8fc0-d586e4dff4a1.roa (raw, json) Hash identifier: Be72KLmcyOpayp0J080Y7YAF/EdKCdhEW6XkNcy6oxk= Subject key identifier: 92:4C:D1:6A:B0:3E:98:00:E4:30:69:1B:11:D5:0D:DD:C0:9B:6B:71 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A7FE0A7EDA73391E8D21A1500 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f8942720-130a-31b6-8fc0-d586e4dff4a1.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 6167 IP address blocks: 174.220.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:a7:ed:a7:33:91:e8:d2:1a:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=5f4477de-30c0-44b1-8867-9ad2c83d8f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:77:93:b0:87:84:29:df:dc:9a:1d:bb:28:bd: 4e:e4:49:46:cb:08:16:45:85:84:6a:69:96:87:53: fe:c1:3f:9c:aa:d0:19:5f:ba:55:6a:39:75:ae:0f: ab:d6:83:d0:a3:f2:fa:d3:5f:57:9c:9e:43:2a:2b: 65:85:85:e2:a6:3a:e8:e0:da:c7:be:6c:fb:89:01: f5:5b:f4:3a:95:47:77:ea:8e:1c:33:a3:ba:40:fe: 19:35:9a:bd:66:0f:e8:6f:f6:06:a4:c8:0b:19:14: 31:64:09:e5:f6:48:df:da:dc:66:cf:8f:3c:64:67: ea:98:f4:ec:cd:3a:ac:56:62:18:9d:4a:11:0e:d6: 66:c8:af:e2:fa:57:59:e7:65:67:95:77:30:88:e9: fe:a3:6b:9e:e2:ed:36:35:9b:05:12:50:df:89:49: 05:58:7c:f9:07:0c:22:3f:76:fc:6a:22:52:d8:37: 07:cf:6c:81:e4:eb:a6:b9:bf:75:59:b6:9e:d7:b8: 3c:ca:30:1c:55:3c:07:19:d3:1d:41:f8:d7:06:96: 8c:be:65:ba:22:4c:9b:bf:72:df:db:d4:56:99:c6: d4:07:2a:c6:68:95:db:36:5b:ed:5a:97:e5:2a:83: ca:af:6a:f3:83:06:61:ea:5c:a2:fe:38:1b:5c:93: 4a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:4C:D1:6A:B0:3E:98:00:E4:30:69:1B:11:D5:0D:DD:C0:9B:6B:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f8942720-130a-31b6-8fc0-d586e4dff4a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.220.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:d0:77:7b:05:1a:80:36:4a:a3:01:1c:d5:90:ea:41:61:0e: 67:ed:e9:24:17:35:78:73:bf:7a:57:fc:8e:34:e5:a2:f3:03: d5:83:55:a0:51:ea:4a:e4:d8:21:25:97:5d:1c:50:e3:fc:4d: 95:96:31:6b:15:7c:2d:cf:8a:34:78:d7:1c:1c:60:a7:ec:7f: de:94:7c:e3:85:09:0b:2d:7a:9a:bd:8f:75:4e:10:14:66:7e: bc:8b:2b:52:70:28:bd:92:a8:38:88:e2:94:dc:4b:7f:18:04: 46:0b:b7:36:23:b6:0d:c8:d7:df:20:34:af:51:ea:c4:b6:ac: 30:1a:59:08:c2:fe:33:41:08:5f:76:f9:3a:34:dc:39:13:44: 7f:27:38:0d:12:a8:31:76:a5:9c:aa:28:ca:00:d5:fe:ff:dd: d9:79:e8:4e:3e:22:72:e1:25:b9:02:2d:a4:fc:8a:90:75:90: b8:db:65:91:68:dc:d0:97:54:77:49:0e:13:2a:51:69:65:a1: 1e:eb:5b:ec:11:4d:30:d0:fd:ed:d0:94:8b:24:e0:59:4d:8a: 4c:0d:53:e4:d4:37:7b:00:7b:c6:c5:8f:be:53:84:db:25:cd: 21:0a:58:d2:84:a2:77:6e:9f:54:49:26:5a:35:ba:39:2d:cd: d9:b7:bb:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4KftpzOR6NIaFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk NWY0NDc3ZGUtMzBjMC00NGIxLTg4NjctOWFkMmM4M2Q4ZjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXeTsIeEKd/cmh27KL1O5ElGywgWRYWEammW h1P+wT+cqtAZX7pVajl1rg+r1oPQo/L6019XnJ5DKitlhYXipjro4NrHvmz7iQH1 W/Q6lUd36o4cM6O6QP4ZNZq9Zg/ob/YGpMgLGRQxZAnl9kjf2txmz488ZGfqmPTs zTqsVmIYnUoRDtZmyK/i+ldZ52VnlXcwiOn+o2ue4u02NZsFElDfiUkFWHz5Bwwi P3b8aiJS2DcHz2yB5Oumub91Wbae17g8yjAcVTwHGdMdQfjXBpaMvmW6Ikybv3Lf 29RWmcbUByrGaJXbNlvtWpflKoPKr2rzgwZh6lyi/jgbXJNKqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJM0WqwPpgA5DBpGxHVDd3Am2txMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjg5NDI3MjAtMTMwYS0z MWI2LThmYzAtZDU4NmU0ZGZmNGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvQd3sFGoA2SqMBHNWQ6kFhDmft6SQXNXhzv3pX/I405aLzA9WDVaBR 6krk2CEll10cUOP8TZWWMWsVfC3PijR41xwcYKfsf96UfOOFCQstepq9j3VOEBRm fryLK1JwKL2SqDiI4pTcS38YBEYLtzYjtg3I198gNK9R6sS2rDAaWQjC/jNBCF92 +To03DkTRH8nOA0SqDF2pZyqKMoA1f7/3dl56E4+InLhJbkCLaT8ipB1kLjbZZFo 3NCXVHdJDhMqUWlloR7rW+wRTTDQ/e3QlIsk4FlNikwNU+TUN3sAe8bFj75ThNsl zSEKWNKEondun1RJJlo1ujktzdm3u7I= -----END CERTIFICATE-----Generated at Sat Aug 23 15:18:41 2025 by rpki-client