$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c8339e7-51a3-3e7a-b731-7f602bcb1a0c.roa File: 4c8339e7-51a3-3e7a-b731-7f602bcb1a0c.roa (raw, json) Hash identifier: b7gPgbFLUGo7S7/IsF6PHx/7E/lx3OeJrjciyU7KzLw= Subject key identifier: A9:3E:DC:97:73:DB:4D:1D:61:27:90:DA:F1:24:3A:D6:BD:6C:10:00 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AADF1389E90271A531A9AD928 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c8339e7-51a3-3e7a-b731-7f602bcb1a0c.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 22394 IP address blocks: 174.41.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:38:9e:90:27:1a:53:1a:9a:d9:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=ec90a809-8066-4bf2-a13c-87d0b2c471fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d0:6d:f2:a4:f6:a0:74:bb:0d:d0:84:38:63: ae:f3:46:a9:35:44:c8:82:28:4c:80:17:de:25:1c: 31:07:02:1a:ca:84:2e:82:c2:b4:a3:c0:ef:ac:66: 5a:a4:25:47:1f:96:1c:e7:ec:4b:d1:f8:82:8c:ec: ba:55:9b:d9:a7:da:c1:c0:0b:b7:f9:85:88:c0:2f: e0:d1:00:9a:d1:ba:e7:69:b3:8f:7a:bb:6e:8e:55: 48:b8:53:bc:0a:66:29:4f:f8:f6:d6:43:0f:3c:6f: 8d:77:b5:37:b2:99:12:9b:df:86:7e:96:46:e3:0e: 0c:75:31:3e:3d:29:71:59:76:45:37:b9:b5:77:42: a4:6a:80:d0:cc:ad:4f:40:79:58:5c:5d:59:eb:df: 3d:98:c6:25:f7:a9:0c:90:b5:0b:b1:d7:03:c9:8d: 91:45:22:e6:12:87:a1:c1:64:19:30:5c:91:e4:65: b9:28:98:70:8c:3e:5b:9c:24:a9:96:94:61:62:73: 3b:56:ad:b2:cb:29:ee:de:62:4d:7f:48:b0:9a:7b: 9b:13:32:e4:96:47:e4:4a:96:c1:d7:47:45:a8:ba: 97:b1:c8:ac:8a:41:ef:95:e0:c7:ca:64:58:2b:f0: 77:6e:f4:b7:23:42:9e:e7:35:b8:45:9d:5f:08:ea: 64:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3E:DC:97:73:DB:4D:1D:61:27:90:DA:F1:24:3A:D6:BD:6C:10:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c8339e7-51a3-3e7a-b731-7f602bcb1a0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.41.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:76:fa:6f:1e:f0:81:27:25:ac:f8:a9:9b:0f:15:c0:af:2f: 7b:a1:1f:20:e1:88:d3:2f:84:35:d7:b3:e6:49:39:6c:2b:a0: 9b:12:0f:c3:e4:e8:c0:56:67:8b:db:12:2d:61:78:dd:ee:5a: bd:e6:a1:4c:3a:a4:80:80:2d:90:a9:a3:4a:4b:e6:1f:ed:b9: 35:d5:a2:6a:98:93:f4:a3:14:4d:e9:48:83:9f:c7:fc:68:5b: d9:1a:01:c8:d1:9b:ef:fa:10:fe:3f:33:04:fd:01:99:df:ca: 5e:19:3d:84:64:b4:52:9b:5b:32:12:1b:71:bb:83:f1:87:ad: d2:49:84:c5:17:d5:b0:12:1a:80:cc:da:d3:80:b8:8d:84:ea: 72:c6:ab:5c:d0:27:09:be:93:94:c9:e5:57:dc:1b:59:95:58: f0:4d:da:f1:50:63:0d:ac:37:5f:f8:57:ff:9f:ec:ac:12:5c: dd:5d:1a:f2:99:4a:a4:82:26:91:67:c2:be:20:44:e0:55:3f: 77:6f:7a:f5:7a:0a:52:80:38:66:7e:a4:16:16:b2:bb:1a:e7: cf:4a:62:20:71:4e:7b:36:5a:0b:e1:9f:68:10:d0:88:8f:bb: aa:0c:5b:e4:cf:4f:cf:cb:cc:04:2a:28:48:d2:c0:63:90:78: cc:2b:e9:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8TiekCcaUxqa2SgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk ZWM5MGE4MDktODA2Ni00YmYyLWExM2MtODdkMGIyYzQ3MWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNBt8qT2oHS7DdCEOGOu80apNUTIgihMgBfe JRwxBwIayoQugsK0o8DvrGZapCVHH5Yc5+xL0fiCjOy6VZvZp9rBwAu3+YWIwC/g 0QCa0brnabOPertujlVIuFO8CmYpT/j21kMPPG+Nd7U3spkSm9+GfpZG4w4MdTE+ PSlxWXZFN7m1d0KkaoDQzK1PQHlYXF1Z6989mMYl96kMkLULsdcDyY2RRSLmEoeh wWQZMFyR5GW5KJhwjD5bnCSplpRhYnM7Vq2yyynu3mJNf0iwmnubEzLklkfkSpbB 10dFqLqXscisikHvleDHymRYK/B3bvS3I0Ke5zW4RZ1fCOpkswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKk+3Jdz200dYSeQ2vEkOta9bBAAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGM4MzM5ZTctNTFhMy0z ZTdhLWI3MzEtN2Y2MDJiY2IxYTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrim6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJF2+m8e8IEnJaz4qZsPFcCvL3uhHyDhiNMvhDXXs+ZJOWwroJsSD8Pk 6MBWZ4vbEi1heN3uWr3moUw6pICALZCpo0pL5h/tuTXVomqYk/SjFE3pSIOfx/xo W9kaAcjRm+/6EP4/MwT9AZnfyl4ZPYRktFKbWzISG3G7g/GHrdJJhMUX1bASGoDM 2tOAuI2E6nLGq1zQJwm+k5TJ5VfcG1mVWPBN2vFQYw2sN1/4V/+f7KwSXN1dGvKZ SqSCJpFnwr4gROBVP3dvevV6ClKAOGZ+pBYWsrsa589KYiBxTns2Wgvhn2gQ0IiP u6oMW+TPT8/LzAQqKEjSwGOQeMwr6TA= -----END CERTIFICATE-----Generated at Sat Aug 9 10:32:01 2025 by rpki-client