$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1aec0eb8-1346-3ea7-bda3-4185c8790a0e.roa File: 1aec0eb8-1346-3ea7-bda3-4185c8790a0e.roa (raw, json) Hash identifier: GEY6SOQdoDOi5RL6soD2dZRtJI2VwO2TOK/YeV9eBMQ= Subject key identifier: 23:8E:99:88:84:E9:4E:25:30:93:B9:B1:25:F7:DC:24:50:5A:A5:A7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A7FE099FE98B9F430771D2900 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1aec0eb8-1346-3ea7-bda3-4185c8790a0e.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 6167 IP address blocks: 174.201.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:99:fe:98:b9:f4:30:77:1d:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=ad20d685-d975-4442-a25d-24d7c1708721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e3:a1:56:4f:95:f9:3c:e4:b5:01:fd:86:a4: 36:13:68:59:cb:cb:e1:e2:ce:2e:14:55:4e:84:62: 3c:11:00:41:f5:3b:5b:61:f5:ed:25:bb:1a:a4:cd: 7d:d7:82:d0:3b:b3:91:2a:54:73:ce:9a:cf:ae:66: 18:45:e0:c5:5b:5d:c1:6f:c7:10:64:60:11:77:b2: b8:e8:4b:78:4c:76:bb:3c:62:56:2c:df:22:34:0d: d2:b9:d4:d2:cf:6f:74:96:fb:0d:64:35:2f:1e:cc: 69:24:4d:60:d9:2b:26:6e:55:79:d2:ce:6d:59:ee: b9:da:54:83:f4:43:35:29:6e:37:8e:70:dd:75:43: 01:da:53:79:0a:13:65:85:72:66:85:54:f0:68:dd: 30:1d:b5:c5:4b:8a:cd:df:a4:18:84:eb:27:8c:03: d7:4d:64:6f:6b:02:04:85:0c:a4:2f:3a:3d:3a:0d: 4b:72:dc:f1:55:de:65:78:fe:7f:98:c2:c2:36:11: b7:fd:ee:25:a0:21:5a:e0:49:6e:c6:cc:4c:d4:06: 29:35:1b:1e:27:2f:10:8a:db:12:85:be:b7:9f:be: 48:bb:b9:53:63:54:98:aa:bf:60:56:10:15:5f:be: e6:fe:d6:fa:6f:c9:8d:b2:97:44:90:16:c4:0c:52: 84:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:8E:99:88:84:E9:4E:25:30:93:B9:B1:25:F7:DC:24:50:5A:A5:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1aec0eb8-1346-3ea7-bda3-4185c8790a0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.201.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:77:91:3e:2b:bb:84:6d:5f:b6:3d:de:62:1c:ee:f0:bb:a0: 84:be:97:27:d9:94:10:03:dc:4c:2c:ce:de:16:d9:eb:3c:d7: ad:6c:91:a5:a2:c7:1d:e4:f3:fa:e4:17:2a:e8:4b:cb:ae:7f: 50:c2:64:57:04:b9:52:9d:bd:95:72:d9:9b:83:4b:62:ba:9d: 6c:95:e1:78:93:15:38:8b:e7:f2:7b:64:2a:ec:2d:38:4b:91: 50:55:ec:cf:7b:3a:ec:38:1c:8d:cd:8d:b9:47:5c:47:7e:a3: c5:a9:c4:24:d1:a0:f0:0a:47:b4:89:1e:ed:1d:b6:8e:76:21: 0b:52:ba:f3:30:7f:8f:91:db:4d:1b:2d:59:e6:5d:6b:87:e4: e6:d2:eb:fb:bc:be:21:9e:f0:21:b3:de:fe:5e:76:99:f1:0f: 94:56:f8:e7:2f:5b:05:f1:45:64:3c:12:b0:75:75:4b:65:46: 8d:65:55:3f:45:04:b1:d9:79:bb:7e:6d:00:ab:c3:97:bb:ef: 2e:6a:db:cc:16:86:b3:d5:8d:02:7e:e4:76:0a:03:35:d9:92: ab:cc:d3:69:b8:81:30:18:77:47:4f:85:35:d3:d7:63:57:3c: 6c:0d:32:78:39:35:d5:bb:a0:a9:75:a9:ed:3c:e8:b9:ca:52: 57:c8:2f:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4Jn+mLn0MHcdKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk YWQyMGQ2ODUtZDk3NS00NDQyLWEyNWQtMjRkN2MxNzA4NzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteOhVk+V+TzktQH9hqQ2E2hZy8vh4s4uFFVO hGI8EQBB9TtbYfXtJbsapM1914LQO7ORKlRzzprPrmYYReDFW13Bb8cQZGARd7K4 6Et4THa7PGJWLN8iNA3SudTSz290lvsNZDUvHsxpJE1g2SsmblV50s5tWe652lSD 9EM1KW43jnDddUMB2lN5ChNlhXJmhVTwaN0wHbXFS4rN36QYhOsnjAPXTWRvawIE hQykLzo9Og1LctzxVd5leP5/mMLCNhG3/e4loCFa4EluxsxM1AYpNRseJy8QitsS hb63n75Iu7lTY1SYqr9gVhAVX77m/tb6b8mNspdEkBbEDFKE5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOOmYiE6U4lMJO5sSX33CRQWqWnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWFlYzBlYjgtMTM0Ni0z ZWE3LWJkYTMtNDE4NWM4NzkwYTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErskQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC13kT4ru4RtX7Y93mIc7vC7oIS+lyfZlBAD3Ewszt4W2es8161skaWi xx3k8/rkFyroS8uuf1DCZFcEuVKdvZVy2ZuDS2K6nWyV4XiTFTiL5/J7ZCrsLThL kVBV7M97Ouw4HI3NjblHXEd+o8WpxCTRoPAKR7SJHu0dto52IQtSuvMwf4+R200b LVnmXWuH5ObS6/u8viGe8CGz3v5edpnxD5RW+OcvWwXxRWQ8ErB1dUtlRo1lVT9F BLHZebt+bQCrw5e77y5q28wWhrPVjQJ+5HYKAzXZkqvM02m4gTAYd0dPhTXT12NX PGwNMng5NdW7oKl1qe086LnKUlfIL7Q= -----END CERTIFICATE-----Generated at Wed Aug 6 10:16:15 2025 by rpki-client