$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/71e14953-f533-3705-9850-4a6c2e06f1a1.roa File: 71e14953-f533-3705-9850-4a6c2e06f1a1.roa (raw, json) Hash identifier: h63KnRLoon6UGCjgK/9TSwn9JQHUWBmEPVQQHnrIJVY= Subject key identifier: FF:FD:70:63:A5:63:BD:BB:D5:76:BD:16:5E:59:84:12:9A:94:BC:49 Certificate issuer: /CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c Certificate serial: 010D0C9F4328584A7FE0924474CC1C9178900880 Authority key identifier: 74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/71e14953-f533-3705-9850-4a6c2e06f1a1.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 36549 IP address blocks: 173.225.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:92:44:74:cc:1c:91:78:90:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=4aaad261-7000-4104-b55d-07982cb66ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:04:7f:c7:55:ea:87:e1:8d:02:48:05:43:6b: 51:9e:b4:3a:05:9c:67:70:3a:0e:17:90:58:cb:bc: 16:0f:2c:f2:45:9f:d7:cf:c4:c1:45:8f:d0:d1:bf: 0c:f6:c1:85:f3:2c:f5:1d:ca:5a:03:c6:77:b8:f3: 51:b9:12:80:88:0e:97:01:dc:18:71:f0:fa:7b:f8: c9:3e:9e:23:e0:df:a0:64:24:82:4f:bb:ae:93:f5: eb:5f:4e:c0:72:5b:0a:81:49:25:70:4e:e9:e2:63: a2:71:5a:43:9f:66:2d:06:ab:bc:79:0b:90:8b:50: db:c7:af:4c:8a:73:5b:de:12:63:d1:7f:cb:7b:bc: 80:4e:1c:d4:c8:85:85:11:54:b6:39:2d:21:7c:05: 18:96:7b:55:78:a1:1d:5f:b7:79:f7:f4:6a:46:fd: 3a:39:11:03:c7:63:4b:b8:8c:26:ce:9c:b9:0f:24: c6:f1:04:a5:27:88:cf:ab:d4:1d:a4:ef:28:be:22: 64:0d:15:b6:e5:14:d6:9c:4c:57:48:18:5a:eb:0a: 31:f5:60:88:0a:bd:4f:0f:34:5c:36:57:b1:83:bb: a0:28:8c:94:1b:3a:5e:69:4d:9e:c1:a4:f1:61:2a: c7:bc:67:7d:11:46:99:76:57:54:92:55:d5:c7:a8: 1e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:FD:70:63:A5:63:BD:BB:D5:76:BD:16:5E:59:84:12:9A:94:BC:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/71e14953-f533-3705-9850-4a6c2e06f1a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl X509v3 Authority Key Identifier: keyid:74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer sbgp-ipAddrBlock: critical IPv4: 173.225.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:72:19:fe:31:60:5f:04:93:86:fc:10:12:8b:3c:1c:49:ce: 19:d5:25:94:fa:10:1c:f1:4f:43:cc:a7:f7:67:db:7d:18:ef: 53:46:1f:64:18:a6:c8:4e:77:e4:78:14:fb:55:14:08:50:b7: d3:12:f7:49:2c:45:ab:47:a7:06:85:b2:57:bd:4b:0f:9a:46: af:0a:5e:47:c0:de:86:96:49:a7:b0:3c:03:e9:2f:a2:53:9c: 39:90:50:0f:7c:db:e5:4a:ed:49:e5:e7:94:38:ff:75:08:78: a4:3e:59:9f:ee:ae:38:23:ea:7a:19:b7:d2:e2:69:5c:c3:28: af:fe:9d:66:83:59:53:b8:8b:83:40:40:fa:c9:a0:21:85:8f: 0f:a4:f9:3b:b6:8a:9c:e5:82:69:25:5f:1a:13:1b:63:04:0e: e5:ee:de:65:5b:32:af:e4:ce:e1:04:fa:16:ef:71:8f:35:7f: f5:ac:4c:e1:70:b8:c3:b7:27:5d:c2:c3:d9:56:fa:16:ef:6d: 1e:94:16:72:71:56:25:e8:38:bc:6e:8c:e8:b8:50:ff:04:cf: 7c:58:a0:d2:83:fc:52:09:18:a8:86:54:17:07:56:17:42:48: 8d:e8:70:ec:9b:b3:93:f9:3d:0d:12:d9:71:f8:b8:3a:8c:b7: 27:4f:30:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4JJEdMwckXiQCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU5ZmU3YzgtZjdmYS00NjM3LWE3NDYtODczZGJlYWRi ZjNjMB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk NGFhYWQyNjEtNzAwMC00MTA0LWI1NWQtMDc5ODJjYjY2ZWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7QR/x1Xqh+GNAkgFQ2tRnrQ6BZxncDoOF5BY y7wWDyzyRZ/Xz8TBRY/Q0b8M9sGF8yz1HcpaA8Z3uPNRuRKAiA6XAdwYcfD6e/jJ Pp4j4N+gZCSCT7uuk/XrX07AclsKgUklcE7p4mOicVpDn2YtBqu8eQuQi1Dbx69M inNb3hJj0X/Le7yAThzUyIWFEVS2OS0hfAUYlntVeKEdX7d59/RqRv06OREDx2NL uIwmzpy5DyTG8QSlJ4jPq9QdpO8oviJkDRW25RTWnExXSBha6wox9WCICr1PDzRc Nlexg7ugKIyUGzpeaU2ewaTxYSrHvGd9EUaZdldUklXVx6ge6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/9cGOlY7271Xa9Fl5ZhBKalLxJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yNTlm ZTdjOC1mN2ZhLTQ2MzctYTc0Ni04NzNkYmVhZGJmM2MvNzFlMTQ5NTMtZjUzMy0z NzA1LTk4NTAtNGE2YzJlMDZmMWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjU5ZmU3YzgtZjdmYS00NjM3LWE3 NDYtODczZGJlYWRiZjNjLzI1OWZlN2M4LWY3ZmEtNDYzNy1hNzQ2LTg3M2RiZWFk YmYzYy5jcmwwHwYDVR0jBBgwFoAUdFJpwi/8O6u55n4V9rH9o+lb5uowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yNTlmZTdjOC1mN2ZhLTQ2MzctYTc0Ni04NzNk YmVhZGJmM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEreHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxyGf4xYF8Ek4b8EBKLPBxJzhnVJZT6EBzxT0PMp/dn230Y71NGH2QY pshOd+R4FPtVFAhQt9MS90ksRatHpwaFsle9Sw+aRq8KXkfA3oaWSaewPAPpL6JT nDmQUA982+VK7Unl55Q4/3UIeKQ+WZ/urjgj6noZt9LiaVzDKK/+nWaDWVO4i4NA QPrJoCGFjw+k+Tu2ipzlgmklXxoTG2MEDuXu3mVbMq/kzuEE+hbvcY81f/WsTOFw uMO3J13Cw9lW+hbvbR6UFnJxViXoOLxujOi4UP8Ez3xYoNKD/FIJGKiGVBcHVhdC SI3ocOybs5P5PQ0S2XH4uDqMtydPMGw= -----END CERTIFICATE-----Generated at Fri Aug 8 10:19:31 2025 by rpki-client