$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ada46f2-8aac-3ece-9ae0-4238aec8fa5c.roa File: 0ada46f2-8aac-3ece-9ae0-4238aec8fa5c.roa (raw, json) Hash identifier: 4T7LKjGMaC0dzpKYc58qHTjkyD/kHAfvxIikjHilt5E= Subject key identifier: 91:B2:68:0E:7A:1C:81:CC:4D:19:44:B8:B3:D0:E6:76:35:E0:FC:E0 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AA6F638CF5A02A8AE77D7CB40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ada46f2-8aac-3ece-9ae0-4238aec8fa5c.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 6167 IP address blocks: 174.229.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:38:cf:5a:02:a8:ae:77:d7:cb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=7e6424d8-c989-474a-b34f-999456b36fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:41:af:6e:a0:9c:5d:7a:e6:7b:e7:fe:17:16: 6d:65:2e:9f:07:42:00:25:cc:77:56:c3:4a:3b:0a: f7:27:ed:a4:99:48:e2:e7:82:35:a0:3c:13:eb:50: b1:f3:13:43:eb:b9:61:fa:45:ee:85:07:0e:1f:21: 77:94:3b:a0:34:de:b6:eb:45:cc:8c:44:99:f3:61: 6a:e9:16:24:40:68:62:65:75:9f:b7:f4:43:79:41: c3:66:4d:89:62:1a:08:65:4c:6c:eb:ed:a5:9b:49: 0c:3c:7d:35:01:95:e3:0b:83:1d:0a:5f:51:cd:c0: e9:70:3f:74:1b:93:50:fd:f9:da:16:cd:16:36:b0: b7:e9:9c:a9:b9:28:1c:fc:be:64:fe:0f:92:91:26: db:fa:a9:2b:46:52:a5:5d:e8:5e:24:a3:7e:dd:9b: ca:8f:48:6d:d8:69:cc:7c:36:62:29:dc:9e:cc:1f: 9a:51:23:d1:d2:21:db:8e:e3:8a:6e:f3:78:cd:ee: c6:4f:fc:5c:d6:80:83:dd:e7:75:81:51:ba:1b:a2: 3b:d5:46:37:60:38:cc:a3:9a:a8:74:dd:42:e7:84: 7d:1a:b7:4b:9c:d3:e7:f5:8e:9a:28:a5:f4:ec:21: a7:94:6d:e4:3b:30:4f:80:ea:49:d1:ec:c9:cf:f3: 30:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B2:68:0E:7A:1C:81:CC:4D:19:44:B8:B3:D0:E6:76:35:E0:FC:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ada46f2-8aac-3ece-9ae0-4238aec8fa5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.229.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:88:d3:90:73:84:f3:14:99:cc:16:d7:ff:bc:cf:ac:b3:1c: 4c:cf:00:b5:3d:1e:07:0f:6f:0e:18:0e:aa:b4:77:23:78:98: d5:19:f8:af:2c:3c:97:9e:52:d4:75:ac:70:b5:9f:99:ed:c1: fa:41:1a:3d:cc:33:ab:0d:c5:ed:10:17:ea:5a:19:f1:a6:18: 03:5e:27:ef:2a:03:e8:24:01:fe:0f:32:fe:b5:34:d7:95:a1: ec:a9:e8:a2:a8:b3:36:eb:a4:53:a3:31:69:92:5e:cf:9d:b2: 73:01:b3:b1:3d:c8:49:9a:de:39:9c:70:6f:61:e1:54:dc:14: c3:ee:2a:86:cf:71:57:25:9f:ab:17:65:df:ab:38:d7:aa:69: 47:51:ee:78:b3:62:8e:2f:bd:79:df:54:ca:1e:6e:b4:a0:04: 9b:65:06:9c:9a:60:e4:e6:2c:c1:a1:e0:75:77:52:14:ec:e0: 7f:d1:1c:25:57:38:c1:5d:2e:19:46:75:3d:9f:64:3e:e4:30: f7:40:f8:75:e8:d3:45:f1:7a:2f:6c:73:40:d1:2a:cc:3e:3c: 74:5a:c6:08:84:9c:68:52:6b:6e:ce:99:fe:9e:98:b0:72:33: 2c:8a:42:c8:e9:1c:e6:d1:5c:38:cc:ed:0d:5c:b6:64:d1:4c: 81:1a:96:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9jjPWgKornfXy0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk N2U2NDI0ZDgtYzk4OS00NzRhLWIzNGYtOTk5NDU2YjM2ZmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkGvbqCcXXrme+f+FxZtZS6fB0IAJcx3VsNK Owr3J+2kmUji54I1oDwT61Cx8xND67lh+kXuhQcOHyF3lDugNN6260XMjESZ82Fq 6RYkQGhiZXWft/RDeUHDZk2JYhoIZUxs6+2lm0kMPH01AZXjC4MdCl9RzcDpcD90 G5NQ/fnaFs0WNrC36ZypuSgc/L5k/g+SkSbb+qkrRlKlXeheJKN+3ZvKj0ht2GnM fDZiKdyezB+aUSPR0iHbjuOKbvN4ze7GT/xc1oCD3ed1gVG6G6I71UY3YDjMo5qo dN1C54R9GrdLnNPn9Y6aKKX07CGnlG3kOzBPgOpJ0ezJz/MwSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGyaA56HIHMTRlEuLPQ5nY14PzgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGFkYTQ2ZjItOGFhYy0z ZWNlLTlhZTAtNDIzOGFlYzhmYTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiI05BzhPMUmcwW1/+8z6yzHEzPALU9HgcPbw4YDqq0dyN4mNUZ+K8s PJeeUtR1rHC1n5ntwfpBGj3MM6sNxe0QF+paGfGmGANeJ+8qA+gkAf4PMv61NNeV oeyp6KKoszbrpFOjMWmSXs+dsnMBs7E9yEma3jmccG9h4VTcFMPuKobPcVcln6sX Zd+rONeqaUdR7nizYo4vvXnfVMoebrSgBJtlBpyaYOTmLMGh4HV3UhTs4H/RHCVX OMFdLhlGdT2fZD7kMPdA+HXo00Xxei9sc0DRKsw+PHRaxgiEnGhSa27Omf6emLBy MyyKQsjpHObRXDjM7Q1ctmTRTIEall4= -----END CERTIFICATE-----Generated at Wed Aug 6 13:09:28 2025 by rpki-client