$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c8cb608-e1a2-3dc4-a157-ef202fc6d031.roa File: 5c8cb608-e1a2-3dc4-a157-ef202fc6d031.roa (raw, json) Hash identifier: Gt/+B8SRgHtZDHF6aa3BXhTxwB1ksXKNokn8Fv22lyw= Subject key identifier: 11:FA:81:00:5A:B1:1E:83:99:BB:66:21:A7:39:38:1F:C7:61:FD:4D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AADF12E2E08E057A240138280 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c8cb608-e1a2-3dc4-a157-ef202fc6d031.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 22394 IP address blocks: 174.41.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:2e:2e:08:e0:57:a2:40:13:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=031d0d25-28cd-411d-a9c6-8e075833e5da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:32:0c:7c:82:bd:e9:00:97:d0:69:2d:2b:de: 7b:f2:1b:59:ab:e3:4a:98:11:5e:6b:80:ff:eb:8a: 0f:37:bc:94:f6:36:bf:36:b2:53:11:9d:4b:7e:ae: df:d7:76:00:ac:db:e6:9c:f0:af:3a:44:6f:82:04: 78:2a:d6:d2:4d:94:b4:27:02:45:35:8e:cf:91:fd: e6:10:15:c1:6e:78:73:db:57:1e:9f:73:da:32:9f: ab:15:b1:dc:ad:12:d4:c2:be:20:86:26:8c:3b:c7: 29:ec:59:a6:fe:ac:79:55:a1:4a:40:19:20:2d:32: e7:80:0a:9b:3d:eb:26:10:9b:5a:e6:e7:4a:8d:51: d5:b3:7f:6d:8e:c1:76:46:e4:88:7b:7d:63:ee:24: eb:32:e8:e0:c8:79:e6:26:16:28:e0:0e:6a:33:62: a0:54:11:27:f0:2b:13:a8:3c:88:96:f0:e6:2f:5e: fc:ac:f5:62:33:fb:dc:37:d8:89:44:80:69:23:1c: 32:32:e2:ab:b7:35:cc:da:8b:c3:1a:fb:74:db:2d: 39:ad:3f:cc:9c:8d:17:3b:00:78:38:bb:74:e2:68: 40:9a:29:8f:b9:0c:59:22:50:14:dc:dc:a3:43:6f: 3e:e1:8e:8d:e2:c4:c3:e3:c7:06:c5:a2:40:50:85: 6f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:FA:81:00:5A:B1:1E:83:99:BB:66:21:A7:39:38:1F:C7:61:FD:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c8cb608-e1a2-3dc4-a157-ef202fc6d031.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.41.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:3a:a3:c2:90:b2:7c:aa:22:2a:16:ec:fe:9e:27:3b:1c:58: aa:d2:3c:21:e7:be:31:99:e4:ae:16:3d:71:81:d6:01:40:09: 0d:1e:a8:c8:e9:b2:7a:0f:61:c5:9d:1f:6b:26:df:4d:e7:28: 84:cd:3f:fb:09:fc:89:31:27:ae:d6:a1:72:f8:a8:b2:07:29: cf:6a:2b:27:24:95:bf:46:62:90:b5:40:08:47:3a:16:e1:ad: 1e:10:70:26:2e:0a:49:99:6d:5a:12:e7:8a:f5:9d:be:a2:24: 00:92:50:77:48:8d:4a:ac:a4:f7:d8:6f:8c:e1:5a:da:9b:36: 2f:fc:86:ea:20:d8:73:22:5d:bf:fa:6a:2b:98:1c:a9:bd:c9: 4c:81:64:c3:83:1a:91:65:34:81:ee:cd:bb:6b:ce:46:9d:a8: f3:5e:28:32:47:ab:f0:47:df:23:bc:8b:d2:77:fe:1c:7b:b9: 96:63:34:85:c2:36:1d:ce:39:48:3c:e5:c7:17:25:67:a4:a6: 37:49:5a:57:ee:c6:e4:e3:83:30:72:10:f9:ec:dd:32:29:c5: c6:09:45:47:e2:da:c5:50:38:74:47:81:bb:04:05:64:18:d4: 59:9c:da:5f:f0:5d:2f:e6:48:66:6c:f1:66:73:fb:b0:cd:64: 23:3e:15:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8S4uCOBXokATgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk MDMxZDBkMjUtMjhjZC00MTFkLWE5YzYtOGUwNzU4MzNlNWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizIMfIK96QCX0GktK9578htZq+NKmBFea4D/ 64oPN7yU9ja/NrJTEZ1Lfq7f13YArNvmnPCvOkRvggR4KtbSTZS0JwJFNY7Pkf3m EBXBbnhz21cen3PaMp+rFbHcrRLUwr4ghiaMO8cp7Fmm/qx5VaFKQBkgLTLngAqb PesmEJta5udKjVHVs39tjsF2RuSIe31j7iTrMujgyHnmJhYo4A5qM2KgVBEn8CsT qDyIlvDmL178rPViM/vcN9iJRIBpIxwyMuKrtzXM2ovDGvt02y05rT/MnI0XOwB4 OLt04mhAmimPuQxZIlAU3NyjQ28+4Y6N4sTD48cGxaJAUIVveQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBH6gQBasR6DmbtmIac5OB/HYf1NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWM4Y2I2MDgtZTFhMi0z ZGM0LWExNTctZWYyMDJmYzZkMDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrimYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKg6o8KQsnyqIioW7P6eJzscWKrSPCHnvjGZ5K4WPXGB1gFACQ0eqMjp snoPYcWdH2sm303nKITNP/sJ/IkxJ67WoXL4qLIHKc9qKycklb9GYpC1QAhHOhbh rR4QcCYuCkmZbVoS54r1nb6iJACSUHdIjUqspPfYb4zhWtqbNi/8huog2HMiXb/6 aiuYHKm9yUyBZMODGpFlNIHuzbtrzkadqPNeKDJHq/BH3yO8i9J3/hx7uZZjNIXC Nh3OOUg85ccXJWekpjdJWlfuxuTjgzByEPns3TIpxcYJRUfi2sVQOHRHgbsEBWQY 1Fmc2l/wXS/mSGZs8WZz+7DNZCM+FX4= -----END CERTIFICATE-----Generated at Sun Aug 10 05:35:24 2025 by rpki-client