$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/498ba564-e64a-39ef-af13-426d6912bf56.roa File: 498ba564-e64a-39ef-af13-426d6912bf56.roa (raw, json) Hash identifier: NdK5R9VwulToqVYQJWz2YZyNg8T1ngCA1d2YItiHis8= Subject key identifier: 7F:2E:3D:A9:09:4B:14:29:B7:34:FB:C0:0D:2D:65:00:DC:72:07:C2 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A963683B8F6FD4DAE0C9526C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/498ba564-e64a-39ef-af13-426d6912bf56.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 6167 IP address blocks: 174.255.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:83:b8:f6:fd:4d:ae:0c:95:26:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=39fa009e-a93c-40d6-a2a9-0f853f477335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3b:fb:36:44:ee:94:3f:57:90:63:56:cd:27: ae:82:4c:b3:1a:71:d0:58:3d:7a:ad:5e:ff:5c:57: c7:4d:1e:8e:24:00:e4:c8:79:6f:9a:67:c6:01:6b: 53:7b:c5:0e:ed:a7:07:5d:da:6e:1f:3b:1b:e8:db: ea:26:96:39:7e:2e:ff:dc:8b:8b:0b:4b:6f:3a:38: 57:f3:56:12:8b:ae:c3:43:d8:ed:fe:b8:62:a8:72: 1b:e8:e9:fe:77:66:0b:eb:fb:48:5a:c4:71:c5:58: bd:b2:7f:39:d2:f1:d9:a6:15:b4:44:21:5a:4c:47: 9e:f1:2c:67:eb:ed:c0:92:33:b6:ea:b6:3e:21:60: 93:78:04:95:2f:d4:b2:21:25:5b:ce:2e:27:60:1e: 7a:a7:35:8d:c5:8a:a7:00:10:8a:21:84:46:80:c7: 13:87:39:87:d5:57:87:5b:b7:71:19:c7:8d:29:75: d7:fe:66:a2:13:d8:ea:a0:f8:df:a4:85:95:7e:36: 1b:8a:3d:c0:cf:be:49:d4:20:fa:a3:5c:0a:44:99: 93:d8:ff:6c:e0:1b:27:cf:b2:52:72:df:d0:4e:3d: 6f:f0:a8:75:3f:63:5f:ce:2d:fe:6d:8e:f0:9f:c0: 60:cf:40:08:22:1d:14:a5:0d:c9:79:83:a2:2d:c3: d1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:2E:3D:A9:09:4B:14:29:B7:34:FB:C0:0D:2D:65:00:DC:72:07:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/498ba564-e64a-39ef-af13-426d6912bf56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.255.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:8a:c9:ef:8d:1e:f9:c3:40:08:29:8e:19:2d:f0:b7:d2:81: a6:dd:85:df:f7:fb:94:3a:24:34:d8:6c:77:78:b9:c9:b5:0f: 1c:72:a3:36:3d:6d:57:2e:17:2c:cc:72:a6:87:5d:56:71:43: ac:48:16:fc:33:77:ee:cc:3d:17:b1:86:96:6b:7b:96:d7:3b: 66:a2:6c:47:b0:da:2c:e4:b9:31:d5:eb:d0:15:d8:7e:ee:95: 07:bb:6a:c7:fe:0e:41:5b:33:9f:48:2d:6b:59:fa:41:c3:e2: 10:1a:bc:54:4e:75:ae:7b:86:aa:bc:28:dc:55:c8:e8:da:ee: 7f:4a:ca:0b:50:d7:0d:77:a6:e8:3c:21:78:b9:dc:9d:90:12: ac:ae:4e:50:18:ac:89:a2:66:25:e8:9d:96:df:39:8f:b6:cc: a5:04:3e:9a:90:63:a0:96:74:01:e6:cf:82:96:68:c1:96:50: a2:86:ee:5b:27:33:54:a7:65:df:15:c5:b1:bd:8a:8b:69:73: 89:2b:3d:90:1a:10:2f:b2:57:65:36:13:89:ed:0b:f9:de:08: 69:26:f3:9c:bf:ea:51:06:d0:f2:d6:43:52:b0:75:66:bf:80: ab:f5:9e:f0:21:8a:ab:ba:82:09:be:69:0f:fd:67:9e:fc:77: cc:b4:5e:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNoO49v1NrgyVJsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk MzlmYTAwOWUtYTkzYy00MGQ2LWEyYTktMGY4NTNmNDc3MzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzv7NkTulD9XkGNWzSeugkyzGnHQWD16rV7/ XFfHTR6OJADkyHlvmmfGAWtTe8UO7acHXdpuHzsb6NvqJpY5fi7/3IuLC0tvOjhX 81YSi67DQ9jt/rhiqHIb6On+d2YL6/tIWsRxxVi9sn850vHZphW0RCFaTEee8Sxn 6+3AkjO26rY+IWCTeASVL9SyISVbzi4nYB56pzWNxYqnABCKIYRGgMcThzmH1VeH W7dxGceNKXXX/maiE9jqoPjfpIWVfjYbij3Az75J1CD6o1wKRJmT2P9s4Bsnz7JS ct/QTj1v8Kh1P2Nfzi3+bY7wn8Bgz0AIIh0UpQ3JeYOiLcPRFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8uPakJSxQptzT7wA0tZQDccgfCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDk4YmE1NjQtZTY0YS0z OWVmLWFmMTMtNDI2ZDY5MTJiZjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrv+oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6Kye+NHvnDQAgpjhkt8LfSgabdhd/3+5Q6JDTYbHd4ucm1DxxyozY9 bVcuFyzMcqaHXVZxQ6xIFvwzd+7MPRexhpZre5bXO2aibEew2izkuTHV69AV2H7u lQe7asf+DkFbM59ILWtZ+kHD4hAavFROda57hqq8KNxVyOja7n9KygtQ1w13pug8 IXi53J2QEqyuTlAYrImiZiXonZbfOY+2zKUEPpqQY6CWdAHmz4KWaMGWUKKG7lsn M1SnZd8VxbG9iotpc4krPZAaEC+yV2U2E4ntC/neCGkm85y/6lEG0PLWQ1KwdWa/ gKv1nvAhiqu6ggm+aQ/9Z578d8y0XiM= -----END CERTIFICATE-----Generated at Wed Aug 6 14:19:24 2025 by rpki-client