$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/250a66c8-6499-34b0-a1c3-8b91b067d95f.roa File: 250a66c8-6499-34b0-a1c3-8b91b067d95f.roa (raw, json) Hash identifier: Wz8vIxBeNGOasgWBRBBUl1B1iBTZZIU0CPnvcVIhKa8= Subject key identifier: 9D:CC:0E:46:1E:BF:8E:25:4A:B7:86:EA:3C:34:BF:8F:02:5F:27:D5 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A7FE09ABDF80D6CA9EF31D600 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/250a66c8-6499-34b0-a1c3-8b91b067d95f.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 6167 IP address blocks: 174.201.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:9a:bd:f8:0d:6c:a9:ef:31:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=b7b7ecfa-7a49-48f2-855a-d98e89772d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:84:f2:49:34:a3:a7:3a:06:70:3e:06:1e:ba: 99:fe:86:75:b6:84:56:7b:1b:41:0a:27:2a:e6:61: 8d:55:26:37:a1:f3:3f:3d:e8:82:94:57:0a:a9:52: e2:d5:98:0e:fd:9b:24:28:06:19:5a:2e:ed:a1:2c: 43:34:10:bf:d0:37:40:1d:21:33:25:c3:98:c0:eb: aa:dd:df:6c:a3:0f:51:ed:a7:ea:8e:0c:fa:82:a4: 2f:1f:63:27:80:82:32:02:84:fc:b3:01:d4:92:b0: 1d:1f:41:04:25:33:32:6a:8c:4f:e3:cf:56:bb:9e: be:35:b1:af:0c:3c:20:24:5e:50:62:2d:e7:f8:3c: ad:48:83:09:65:16:a0:64:4d:a4:9d:1d:63:f7:12: c0:d9:97:94:ea:0e:d2:16:92:0d:3e:7d:2e:85:0c: f5:67:7a:62:ce:e0:8e:91:83:41:5a:55:a5:e1:c5: c8:8d:1d:60:27:cd:2e:42:80:43:25:16:f8:18:96: 4c:c6:4b:2a:81:22:90:fa:b3:e0:5a:dc:dc:70:1a: cc:68:d1:48:92:9b:75:18:61:9e:6b:13:70:23:15: 3a:a8:69:df:48:6b:22:83:52:73:6f:1e:8f:f8:e0: 60:ae:a5:5f:db:c8:23:7b:f9:4c:db:6a:6d:88:c8: 43:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:CC:0E:46:1E:BF:8E:25:4A:B7:86:EA:3C:34:BF:8F:02:5F:27:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/250a66c8-6499-34b0-a1c3-8b91b067d95f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.201.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:71:07:7f:77:a2:20:31:2e:5e:9f:60:5d:e5:0f:e0:a2:8c: 2a:e5:7c:a1:2c:71:59:7d:af:5c:26:c5:e4:6b:c6:14:56:1d: bb:2c:e6:29:b0:86:62:04:93:44:db:12:11:c6:46:db:10:6b: fe:83:77:fa:b4:a4:25:00:20:e6:05:cd:f3:e3:b9:71:a1:6c: 02:64:a4:5c:f2:5a:33:6b:26:e5:65:88:d8:30:0a:78:5c:26: e3:c9:a1:21:91:da:de:dd:83:86:d2:b8:c6:e1:47:04:36:c8: c7:a7:38:cd:5f:55:0a:6d:3d:ef:fa:a3:1a:aa:3d:e5:43:dc: 54:09:b7:17:c2:7d:44:08:e9:3f:69:99:d4:d6:d1:58:79:3e: a0:98:b9:82:a3:cb:25:9c:5a:52:ed:ed:af:bb:7c:9b:42:10: c6:92:0f:68:0c:5f:79:4d:ee:99:ac:21:08:6c:62:ed:a5:35: 57:34:3a:d1:58:7d:c1:cc:6e:2e:f7:12:ef:40:f1:69:1f:83: ba:4e:e4:0e:12:9c:4c:b3:f6:16:1a:c4:09:f6:eb:05:cf:1c: 95:bd:34:87:79:d2:e4:0e:35:88:b0:e2:61:35:0c:0a:6e:6a: 59:59:ac:46:ae:cf:48:26:0f:91:0f:af:04:47:a3:74:b1:20: d9:51:53:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4Jq9+A1sqe8x1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk YjdiN2VjZmEtN2E0OS00OGYyLTg1NWEtZDk4ZTg5NzcyZDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYTySTSjpzoGcD4GHrqZ/oZ1toRWextBCicq 5mGNVSY3ofM/PeiClFcKqVLi1ZgO/ZskKAYZWi7toSxDNBC/0DdAHSEzJcOYwOuq 3d9sow9R7afqjgz6gqQvH2MngIIyAoT8swHUkrAdH0EEJTMyaoxP489Wu56+NbGv DDwgJF5QYi3n+DytSIMJZRagZE2knR1j9xLA2ZeU6g7SFpINPn0uhQz1Z3pizuCO kYNBWlWl4cXIjR1gJ80uQoBDJRb4GJZMxksqgSKQ+rPgWtzccBrMaNFIkpt1GGGe axNwIxU6qGnfSGsig1Jzbx6P+OBgrqVf28gje/lM22ptiMhDRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3MDkYev44lSreG6jw0v48CXyfVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjUwYTY2YzgtNjQ5OS0z NGIwLWExYzMtOGI5MWIwNjdkOTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErsnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxxB393oiAxLl6fYF3lD+CijCrlfKEscVl9r1wmxeRrxhRWHbss5imw hmIEk0TbEhHGRtsQa/6Dd/q0pCUAIOYFzfPjuXGhbAJkpFzyWjNrJuVliNgwCnhc JuPJoSGR2t7dg4bSuMbhRwQ2yMenOM1fVQptPe/6oxqqPeVD3FQJtxfCfUQI6T9p mdTW0Vh5PqCYuYKjyyWcWlLt7a+7fJtCEMaSD2gMX3lN7pmsIQhsYu2lNVc0OtFY fcHMbi73Eu9A8Wkfg7pO5A4SnEyz9hYaxAn26wXPHJW9NId50uQONYiw4mE1DApu allZrEauz0gmD5EPrwRHo3SxINlRU60= -----END CERTIFICATE-----Generated at Wed Aug 6 04:08:43 2025 by rpki-client