$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36fecfde-d240-3b8b-bafe-4a9baf8f7954.roa File: 36fecfde-d240-3b8b-bafe-4a9baf8f7954.roa (raw, json) Hash identifier: g4AFkXg9486Gx5iy1s6NeRgPUe7WsrUagn+0Jr/1hJY= Subject key identifier: 36:2C:B3:01:6E:2C:73:CE:EE:77:DC:82:6D:48:DA:48:B7:60:40:62 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AADF138BCF671AEC949C29380 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36fecfde-d240-3b8b-bafe-4a9baf8f7954.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 22394 IP address blocks: 174.41.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:38:bc:f6:71:ae:c9:49:c2:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=3c4daa9b-6ece-42af-9957-1bdef9a048fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:14:8e:81:0f:97:80:b5:80:b6:b1:63:f4:2a: c9:d3:a7:3b:2e:73:6f:bb:9b:d5:5b:a5:97:63:99: b7:7c:53:ba:df:f8:a8:1c:81:57:5d:43:17:36:20: 1a:ba:d7:fb:2c:94:53:33:a5:eb:e8:6f:91:11:83: 7b:de:64:b3:bd:06:14:69:2a:88:a5:dd:22:e5:2f: 64:86:74:25:a5:d7:39:f2:d6:e7:45:76:dc:b7:c9: 7e:c4:95:39:be:ac:0d:1f:32:2a:b1:df:91:7e:63: 2f:6b:b3:dd:ad:48:2b:a0:cc:29:58:9f:a7:d6:46: 87:19:e1:f1:a3:f0:74:c8:1b:f2:5f:30:3c:1f:48: d1:40:c4:f9:8b:88:7f:76:29:3b:15:b8:c7:e8:87: cf:ba:e1:3b:13:28:26:b5:20:94:ad:65:43:ba:75: a1:bc:71:c2:c0:3a:85:7c:af:a4:fc:84:bc:59:c3: 67:01:2b:f0:6c:9e:21:8e:6b:3e:9c:4b:1c:c4:4a: ec:56:a8:8e:bc:2f:c5:38:f9:ac:5a:29:89:0a:04: bb:71:9a:43:2e:a9:36:c0:a1:db:2c:8c:94:f4:9d: ce:8f:22:5f:36:d1:53:3b:c5:d0:35:97:c9:82:5b: db:51:bd:a7:df:d2:f5:d3:56:62:e3:5a:b5:2f:aa: 36:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:2C:B3:01:6E:2C:73:CE:EE:77:DC:82:6D:48:DA:48:B7:60:40:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36fecfde-d240-3b8b-bafe-4a9baf8f7954.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.41.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:2c:a8:6a:5f:81:6b:cf:71:7b:f2:86:5b:0f:d5:46:ba:c1: 87:9f:69:79:4f:a3:94:e8:cf:74:79:4e:86:e0:d7:84:9e:3d: 56:34:46:f6:98:a4:ae:d3:2c:5a:64:7b:76:be:47:c4:e4:4f: 88:47:7c:e3:e8:89:2f:ce:73:ca:1e:6f:7f:31:40:c0:d2:a6: 56:3b:8d:e2:d5:05:c9:47:59:a7:3d:69:db:89:bb:7a:23:af: 8f:26:24:5e:e2:d6:04:51:4c:ea:74:d5:84:d0:5d:16:5d:57: 1f:f9:e6:df:3c:6e:5d:c3:34:49:0f:bd:18:8f:26:f6:1c:b2: 8c:0f:a5:0a:f8:e8:6a:93:f5:ac:c2:6e:e0:e9:2f:e5:71:a0: 49:c4:ae:6f:eb:0f:dd:92:5b:d3:d2:ca:61:90:b0:cc:85:fc: 3a:e9:eb:5d:c2:78:56:c4:28:bd:bb:29:37:43:86:38:54:e8: 87:12:b0:0a:10:7d:6a:72:43:4a:7c:f9:3e:6a:ed:57:1f:1b: 16:e8:55:46:41:f1:c5:7f:b5:68:ed:4a:3e:8a:5e:ee:57:b3: 2b:da:84:19:91:1b:be:b3:67:7c:89:ea:2b:95:a1:f1:2a:62: d9:19:18:a4:90:42:62:ca:51:c9:f3:d5:05:02:3a:c1:ee:f2: 30:24:b4:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8Ti89nGuyUnCk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk M2M0ZGFhOWItNmVjZS00MmFmLTk5NTctMWJkZWY5YTA0OGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BSOgQ+XgLWAtrFj9CrJ06c7LnNvu5vVW6WX Y5m3fFO63/ioHIFXXUMXNiAautf7LJRTM6Xr6G+REYN73mSzvQYUaSqIpd0i5S9k hnQlpdc58tbnRXbct8l+xJU5vqwNHzIqsd+RfmMva7PdrUgroMwpWJ+n1kaHGeHx o/B0yBvyXzA8H0jRQMT5i4h/dik7FbjH6IfPuuE7EygmtSCUrWVDunWhvHHCwDqF fK+k/IS8WcNnASvwbJ4hjms+nEscxErsVqiOvC/FOPmsWimJCgS7cZpDLqk2wKHb LIyU9J3OjyJfNtFTO8XQNZfJglvbUb2n39L101Zi41q1L6o24QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYsswFuLHPO7nfcgm1I2ki3YEBiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzZmZWNmZGUtZDI0MC0z YjhiLWJhZmUtNGE5YmFmOGY3OTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrinEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMsqGpfgWvPcXvyhlsP1Ua6wYefaXlPo5Toz3R5Tobg14SePVY0RvaY pK7TLFpke3a+R8TkT4hHfOPoiS/Oc8oeb38xQMDSplY7jeLVBclHWac9aduJu3oj r48mJF7i1gRRTOp01YTQXRZdVx/55t88bl3DNEkPvRiPJvYcsowPpQr46GqT9azC buDpL+VxoEnErm/rD92SW9PSymGQsMyF/Drp613CeFbEKL27KTdDhjhU6IcSsAoQ fWpyQ0p8+T5q7VcfGxboVUZB8cV/tWjtSj6KXu5XsyvahBmRG76zZ3yJ6iuVofEq YtkZGKSQQmLKUcnz1QUCOsHu8jAktCs= -----END CERTIFICATE-----Generated at Sat Aug 9 10:34:56 2025 by rpki-client