$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/523beee1-112a-382c-ba88-2ef62215de5e.roa File: 523beee1-112a-382c-ba88-2ef62215de5e.roa (raw, json) Hash identifier: dj7oWIikJaNLr+FvnkZMkSmTBgTAVKT+/V5GXBPAkPo= Subject key identifier: FE:99:E5:CD:BE:1F:03:7D:BF:73:99:77:6B:CC:CD:21:AF:B8:D7:F1 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AA6F6446DE1D0B39D9F3FD880 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/523beee1-112a-382c-ba88-2ef62215de5e.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 6167 IP address blocks: 174.248.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:44:6d:e1:d0:b3:9d:9f:3f:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=4d6f9fb2-bb91-4d62-9e17-7d4ac851f05a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e1:5e:66:85:aa:c6:44:98:5e:de:ff:82:08: be:02:a2:c9:f0:a0:32:4c:59:55:df:70:78:ef:2c: 15:81:05:b7:a3:6c:af:d5:57:5b:c0:5d:1c:8c:ff: 31:bd:fe:f9:bf:58:d3:3e:49:90:65:ba:22:b7:b5: de:35:74:37:44:1a:fe:ef:08:3b:8a:49:d0:e5:10: e1:f2:65:e5:81:bc:fe:e2:48:22:c8:8a:78:0f:31: 78:ba:71:8c:87:6a:18:59:36:ef:b4:4a:22:78:5c: 95:de:31:e9:1e:ae:15:96:cb:b9:91:9b:8a:83:2d: c9:5d:80:99:e8:88:cd:8b:9f:d6:bf:b3:b1:4d:67: 8f:68:ce:97:cc:76:43:05:fc:2c:a5:ec:6a:1f:1c: 11:1b:e0:0c:38:9d:74:07:97:06:16:9c:46:93:30: e0:37:03:d1:21:13:1a:f8:23:52:dd:00:27:12:54: 77:3a:ee:d1:d4:ff:68:5c:62:7f:d1:d2:00:82:0c: 93:e5:86:04:c8:bf:24:37:90:9b:e2:d3:2c:82:8e: 3d:72:ef:f9:ad:90:80:bf:75:af:a6:bc:b5:06:90: c2:d7:b4:b0:53:c7:18:41:b2:24:b4:81:68:a0:d0: 9e:aa:d2:62:5a:41:cc:47:7d:9a:78:1b:9b:06:90: 52:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:99:E5:CD:BE:1F:03:7D:BF:73:99:77:6B:CC:CD:21:AF:B8:D7:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/523beee1-112a-382c-ba88-2ef62215de5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.248.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:3f:d2:18:10:b5:ee:ec:2d:23:43:e2:24:cf:34:55:02:d0: 46:f5:53:82:ba:44:44:c8:15:be:63:2e:66:11:cc:04:10:2b: 60:93:f0:0d:2b:03:a9:e2:e0:c7:d0:bc:3b:de:67:1b:be:f3: d7:92:5f:3a:10:a7:0b:62:48:19:fe:e7:c8:28:48:84:46:32: 04:95:49:ee:bb:35:4d:c9:47:bc:3b:e2:91:dc:ce:c8:e2:f0: 3d:7e:51:de:d0:d1:9c:83:77:21:f6:64:3b:8a:df:ce:ba:20: 46:05:97:6d:e3:9c:91:2b:b3:65:78:9f:7e:79:6d:ae:dc:bc: 1c:d8:e2:60:9d:09:68:a3:5a:3f:51:7d:52:8a:56:88:28:d7: 5f:d5:ad:e8:5d:5c:10:d8:c0:44:5e:ed:9d:6f:a9:a0:48:9c: 3c:ce:d7:68:76:a0:bc:5e:a2:d0:05:96:38:8d:36:99:c1:90: 56:7c:b9:ae:8c:8e:04:7c:6d:4e:e5:fe:56:74:10:30:23:a0: 7a:75:6a:e4:eb:2a:da:f3:24:0c:bc:78:33:1c:d7:de:fc:45: ff:f8:4c:7f:a8:17:51:67:bf:92:c8:c7:c1:38:6a:fe:34:54: 9c:c3:f4:4f:c1:c1:72:13:ba:fa:96:7a:00:ab:96:55:4d:0e: 03:49:a6:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9kRt4dCznZ8/2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk NGQ2ZjlmYjItYmI5MS00ZDYyLTllMTctN2Q0YWM4NTFmMDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uFeZoWqxkSYXt7/ggi+AqLJ8KAyTFlV33B4 7ywVgQW3o2yv1VdbwF0cjP8xvf75v1jTPkmQZboit7XeNXQ3RBr+7wg7iknQ5RDh 8mXlgbz+4kgiyIp4DzF4unGMh2oYWTbvtEoieFyV3jHpHq4Vlsu5kZuKgy3JXYCZ 6IjNi5/Wv7OxTWePaM6XzHZDBfwspexqHxwRG+AMOJ10B5cGFpxGkzDgNwPRIRMa +CNS3QAnElR3Ou7R1P9oXGJ/0dIAggyT5YYEyL8kN5Cb4tMsgo49cu/5rZCAv3Wv pry1BpDC17SwU8cYQbIktIFooNCeqtJiWkHMR32aeBubBpBSUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6Z5c2+HwN9v3OZd2vMzSGvuNfxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTIzYmVlZTEtMTEyYS0z ODJjLWJhODgtMmVmNjIyMTVkZTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrvhkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJk/0hgQte7sLSND4iTPNFUC0Eb1U4K6RETIFb5jLmYRzAQQK2CT8A0r A6ni4MfQvDveZxu+89eSXzoQpwtiSBn+58goSIRGMgSVSe67NU3JR7w74pHczsji 8D1+Ud7Q0ZyDdyH2ZDuK3866IEYFl23jnJErs2V4n355ba7cvBzY4mCdCWijWj9R fVKKVogo11/VrehdXBDYwERe7Z1vqaBInDzO12h2oLxeotAFljiNNpnBkFZ8ua6M jgR8bU7l/lZ0EDAjoHp1auTrKtrzJAy8eDMc1978Rf/4TH+oF1Fnv5LIx8E4av40 VJzD9E/BwXITuvqWegCrllVNDgNJpjQ= -----END CERTIFICATE-----Generated at Sat Aug 9 10:37:29 2025 by rpki-client