$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4cd6a07f-d102-363e-9028-30a3b33d5a91.roa File: 4cd6a07f-d102-363e-9028-30a3b33d5a91.roa (raw, json) Hash identifier: iEl/PB/vmngvIKj/Ut8x+sUl+myiVAl5WvWBQb/CMGc= Subject key identifier: 06:21:E7:E7:60:00:56:9A:39:42:0E:72:EC:FD:67:6A:72:52:4E:C8 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A7FE09E3F20C335E0B5B63980 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4cd6a07f-d102-363e-9028-30a3b33d5a91.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 6167 IP address blocks: 174.208.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:9e:3f:20:c3:35:e0:b5:b6:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=7d590e74-749f-433b-9333-894e64e985b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:93:f2:c5:6a:a7:7a:aa:b4:27:12:7f:52:61: 11:08:74:30:c2:d9:04:71:1a:18:b3:b0:cf:57:cc: 30:53:87:ed:45:e9:76:0b:55:1e:4c:e6:67:13:a4: cf:d8:1f:48:c4:74:6e:d8:8a:79:df:af:df:c7:b6: 45:11:9c:bf:fe:7d:f0:da:75:11:ca:37:06:7f:89: f7:6f:90:35:16:71:ce:ca:aa:b1:52:8b:ef:1b:d9: fd:ee:a1:bd:12:97:3d:ed:dc:2b:5a:30:96:c7:59: 5b:a9:3d:ff:0d:5b:7c:7e:43:09:50:0c:d3:86:da: 04:e5:8a:65:7d:f6:45:a4:b8:5b:c1:81:ac:21:d7: 4b:8d:04:74:03:ec:05:62:f2:a0:ed:8f:97:c3:8e: 7a:8e:ac:c4:aa:0d:b3:51:36:6a:e3:9f:11:d1:d0: 74:fd:01:82:47:bb:8c:09:a5:19:c7:a2:fa:48:af: 7d:35:12:f1:2b:71:b7:45:ed:61:82:4b:2f:8b:11: b1:60:c5:b0:ff:5a:28:a7:7a:1b:6c:98:f9:3a:fb: 0c:44:0e:c9:8e:e4:01:63:13:14:3a:41:5e:26:a2: 4a:a9:3c:ee:4a:af:0b:f0:b9:93:18:b8:57:ea:3e: c9:2d:1f:54:58:5c:dd:00:cf:fc:93:62:ae:85:2d: 6d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:21:E7:E7:60:00:56:9A:39:42:0E:72:EC:FD:67:6A:72:52:4E:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4cd6a07f-d102-363e-9028-30a3b33d5a91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.208.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:6e:65:47:08:b0:12:fc:f9:76:88:1b:07:d2:cd:9c:c0:72: 02:da:74:c3:d7:ff:0a:3b:9d:87:ab:19:b7:68:37:b3:0c:c0: 9c:fd:22:d3:32:4c:a7:0a:ed:58:c1:f3:89:ff:14:0c:ba:7f: 4d:29:b5:8a:5f:9c:ce:e9:7a:4d:97:60:67:61:a2:c8:10:5f: 36:73:22:0e:34:13:f1:5c:2b:a7:40:c1:2a:95:62:8b:72:2f: 4d:2a:da:6e:e7:2f:d3:86:34:d5:64:5c:a6:45:87:03:fe:87: d6:33:58:63:6d:5d:57:3c:67:1e:ce:f8:29:f4:69:81:d9:82: d2:fa:70:0f:87:aa:02:26:2e:9e:34:34:72:8b:c5:06:93:58: df:97:36:a8:5d:2b:2a:1c:e9:68:7c:8c:08:8f:a2:81:d8:5b: 68:ce:00:8b:15:ea:f2:47:18:ca:d1:2c:81:55:55:9b:d2:80: 80:8c:66:fb:bd:b5:32:c4:f6:8d:8a:4e:44:84:7e:5e:65:a5: ae:9f:74:88:62:d9:17:1a:24:f8:2f:e2:a1:2f:10:a6:29:a7: 12:43:34:17:56:6a:90:64:e9:25:05:80:ab:77:00:73:fd:56: af:eb:56:4b:0c:e0:5b:c0:b7:94:a3:e6:41:0b:31:38:6c:a1: 06:9a:e8:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4J4/IMM14LW2OYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk N2Q1OTBlNzQtNzQ5Zi00MzNiLTkzMzMtODk0ZTY0ZTk4NWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspPyxWqneqq0JxJ/UmERCHQwwtkEcRoYs7DP V8wwU4ftRel2C1UeTOZnE6TP2B9IxHRu2Ip536/fx7ZFEZy//n3w2nURyjcGf4n3 b5A1FnHOyqqxUovvG9n97qG9Epc97dwrWjCWx1lbqT3/DVt8fkMJUAzThtoE5Ypl ffZFpLhbwYGsIddLjQR0A+wFYvKg7Y+Xw456jqzEqg2zUTZq458R0dB0/QGCR7uM CaUZx6L6SK99NRLxK3G3Re1hgksvixGxYMWw/1oop3obbJj5OvsMRA7JjuQBYxMU OkFeJqJKqTzuSq8L8LmTGLhX6j7JLR9UWFzdAM/8k2KuhS1thQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYh5+dgAFaaOUIOcuz9Z2pyUk7IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGNkNmEwN2YtZDEwMi0z NjNlLTkwMjgtMzBhM2IzM2Q1YTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrtCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFuZUcIsBL8+XaIGwfSzZzAcgLadMPX/wo7nYerGbdoN7MMwJz9ItMy TKcK7VjB84n/FAy6f00ptYpfnM7pek2XYGdhosgQXzZzIg40E/FcK6dAwSqVYoty L00q2m7nL9OGNNVkXKZFhwP+h9YzWGNtXVc8Zx7O+Cn0aYHZgtL6cA+HqgImLp40 NHKLxQaTWN+XNqhdKyoc6Wh8jAiPooHYW2jOAIsV6vJHGMrRLIFVVZvSgICMZvu9 tTLE9o2KTkSEfl5lpa6fdIhi2RcaJPgv4qEvEKYppxJDNBdWapBk6SUFgKt3AHP9 Vq/rVksM4FvAt5Sj5kELMThsoQaa6JM= -----END CERTIFICATE-----Generated at Wed Aug 6 09:35:41 2025 by rpki-client