$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3e9ba061-ed94-3473-abfa-0fa77da6d25c.roa File: 3e9ba061-ed94-3473-abfa-0fa77da6d25c.roa (raw, json) Hash identifier: 3nI37/wkm7+1/KvXkSKmFHNo5USF+Yic/nhs/7G4Ay4= Subject key identifier: 42:AC:51:75:6E:D3:4E:66:20:AE:0B:0A:9F:A0:CC:F1:B8:BA:A1:32 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AADF139402573ED5ED334B380 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3e9ba061-ed94-3473-abfa-0fa77da6d25c.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 22394 IP address blocks: 174.41.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:39:40:25:73:ed:5e:d3:34:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=61e33495-d9c0-43f7-8fe4-6130705b2c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:18:df:96:6a:f5:51:ab:00:f2:e1:5a:da:d8: dd:c7:24:dd:b7:be:94:d0:9b:ff:25:38:77:e7:c6: 61:b2:33:a3:14:85:53:98:b9:a0:4c:62:67:62:3c: 2d:f2:7e:bd:98:d3:b4:ea:02:4b:a5:2b:94:d2:fd: aa:62:fc:94:47:b4:5a:84:0c:24:e1:1c:28:a8:11: 40:d3:59:43:ab:86:9e:24:75:53:59:5b:c9:5c:48: d1:d9:5c:d7:71:a4:60:98:d5:49:ab:46:35:fb:a4: fa:f1:87:48:52:96:7c:5c:70:84:0c:ff:43:35:b2: 50:94:a6:c8:64:8c:f5:41:1b:2a:34:9c:aa:3d:ba: 7d:6f:c3:20:9a:21:ce:7e:fd:30:e5:aa:74:59:8f: 85:6a:4e:e7:a2:55:f4:76:8f:a8:e2:b2:58:57:41: 29:42:67:d5:ea:ac:33:57:84:25:21:c5:ba:94:93: 6c:0e:db:a3:48:b9:9e:cd:c2:49:7a:b0:1a:0b:9c: 58:2b:b6:4c:82:e2:08:ec:2b:ae:ca:55:27:c3:d0: 91:b4:92:e2:21:74:f6:ff:08:15:75:4f:cd:41:84: a5:ff:10:e3:bc:f9:78:36:d8:2b:16:54:64:a6:cf: c0:9c:aa:8b:d8:6f:96:1b:8c:e0:3a:25:70:90:9c: e2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AC:51:75:6E:D3:4E:66:20:AE:0B:0A:9F:A0:CC:F1:B8:BA:A1:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3e9ba061-ed94-3473-abfa-0fa77da6d25c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.41.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:b2:0d:e4:89:7b:70:e1:c4:a0:8d:af:72:93:b3:c3:32:3f: f2:9f:68:35:75:d6:9e:3a:e2:31:a8:e9:83:4b:ea:91:d3:59: 9f:19:e3:25:e8:58:ca:09:ca:8e:4e:c5:69:97:dd:4e:ae:72: 8d:d3:12:b8:fe:76:6a:72:4c:cb:87:cb:e5:a4:25:2f:55:d3: f2:6a:a5:25:fd:29:5a:bb:3a:7e:4e:b1:d4:54:0e:22:7d:74: 58:48:45:c8:a2:6c:ca:ac:bf:2f:fa:07:32:01:be:43:aa:d9: f6:9f:4a:14:84:74:91:54:66:cf:ec:30:c3:de:88:c5:5d:28: 68:73:41:a9:a1:d1:63:32:c3:0c:2c:90:49:33:80:be:0a:82: 03:f3:b7:85:79:8a:d8:49:7a:35:29:22:96:c6:6d:6f:78:b6: eb:6c:99:37:ef:69:07:ff:a0:35:14:07:47:c0:f4:20:56:27: 42:71:f2:15:d5:1f:22:5f:96:5a:d8:ec:5c:7e:df:b3:8c:a3: 5a:0b:cf:5f:0e:c8:05:fc:e8:75:fc:52:d2:6e:56:ed:86:f1: 0a:07:f5:a5:99:52:c8:2e:fd:b9:7d:4e:06:54:f6:2d:e2:c7: f3:51:85:32:af:95:3d:26:78:42:af:8b:11:d5:44:db:f8:af: 91:5b:f3:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8TlAJXPtXtM0s4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk NjFlMzM0OTUtZDljMC00M2Y3LThmZTQtNjEzMDcwNWIyYzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBjflmr1UasA8uFa2tjdxyTdt76U0Jv/JTh3 58ZhsjOjFIVTmLmgTGJnYjwt8n69mNO06gJLpSuU0v2qYvyUR7RahAwk4RwoqBFA 01lDq4aeJHVTWVvJXEjR2VzXcaRgmNVJq0Y1+6T68YdIUpZ8XHCEDP9DNbJQlKbI ZIz1QRsqNJyqPbp9b8MgmiHOfv0w5ap0WY+Fak7nolX0do+o4rJYV0EpQmfV6qwz V4QlIcW6lJNsDtujSLmezcJJerAaC5xYK7ZMguII7CuuylUnw9CRtJLiIXT2/wgV dU/NQYSl/xDjvPl4NtgrFlRkps/AnKqL2G+WG4zgOiVwkJziLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKsUXVu005mIK4LCp+gzPG4uqEyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2U5YmEwNjEtZWQ5NC0z NDczLWFiZmEtMGZhNzdkYTZkMjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrimoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJuyDeSJe3DhxKCNr3KTs8MyP/KfaDV11p464jGo6YNL6pHTWZ8Z4yXo WMoJyo5OxWmX3U6uco3TErj+dmpyTMuHy+WkJS9V0/JqpSX9KVq7On5OsdRUDiJ9 dFhIRciibMqsvy/6BzIBvkOq2fafShSEdJFUZs/sMMPeiMVdKGhzQamh0WMywwws kEkzgL4KggPzt4V5ithJejUpIpbGbW94tutsmTfvaQf/oDUUB0fA9CBWJ0Jx8hXV HyJfllrY7Fx+37OMo1oLz18OyAX86HX8UtJuVu2G8QoH9aWZUsgu/bl9TgZU9i3i x/NRhTKvlT0meEKvixHVRNv4r5Fb83M= -----END CERTIFICATE-----Generated at Sat Aug 9 20:36:22 2025 by rpki-client