$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e543a0b-cd49-373a-8853-83c45c8f4dcb.roa File: 5e543a0b-cd49-373a-8853-83c45c8f4dcb.roa (raw, json) Hash identifier: SBwQAyDDA+Ntwv5Bwiaxyti8MSp2+NIMw1qvwIlHM+E= Subject key identifier: 64:E9:BA:59:2C:39:AA:AB:A1:4D:06:6A:2D:43:A4:E5:59:83:53:F1 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AA6F63D6D227130FAAFE9DF80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e543a0b-cd49-373a-8853-83c45c8f4dcb.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 6167 IP address blocks: 174.238.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:3d:6d:22:71:30:fa:af:e9:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=0208c8f7-6c79-4567-b9b6-c0da640caf6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:81:21:37:68:20:4c:ca:c1:20:fa:b9:a7:0a: ce:25:e7:ba:d7:bc:10:f4:f7:c3:36:41:59:e1:6d: f5:f7:31:b6:67:aa:2b:a9:cb:2b:ec:a1:f8:b1:54: 07:7f:4b:fe:b3:f4:c8:73:27:ca:cf:a6:ec:ee:66: ec:45:e5:47:6b:49:9c:0b:94:ee:6c:56:c1:16:a1: 91:24:7b:68:18:e2:9a:c3:7a:ab:37:74:2e:67:7f: f0:9b:5b:c6:12:76:51:e0:79:e3:aa:c9:e2:5a:15: 11:85:e6:28:81:fb:06:18:cd:79:08:0c:b0:d7:57: 42:df:ba:48:2b:33:e3:02:e4:2d:41:4e:00:33:ba: ec:e6:dd:42:bd:05:95:02:18:e0:23:c4:38:11:7b: cc:03:6d:8d:a0:35:b6:76:4b:4d:d8:72:32:44:8d: 18:50:11:35:c6:91:6e:d3:5c:f0:f7:20:4d:ff:d3: af:60:79:90:f8:7e:de:e3:c3:ec:48:21:83:7b:08: b2:45:00:31:f3:8a:d5:df:a8:a1:c1:60:d6:04:b8: be:4d:f8:cd:ba:21:85:54:32:2c:b0:b2:a5:fe:ef: ac:b7:81:9c:f6:51:02:36:40:a0:38:69:f4:a5:fa: 01:a5:c9:18:15:7a:54:4a:a6:de:aa:ad:75:68:0e: 97:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E9:BA:59:2C:39:AA:AB:A1:4D:06:6A:2D:43:A4:E5:59:83:53:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e543a0b-cd49-373a-8853-83c45c8f4dcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.238.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:71:81:04:ab:70:9a:04:95:9d:b1:18:c0:a0:6d:f9:5b:c1: f8:b5:f8:cd:9c:47:43:92:5d:68:b7:01:f1:3b:b1:5a:18:98: 38:60:a3:9f:9a:13:fb:dd:87:30:92:72:14:64:de:5f:6a:0d: 02:85:73:a0:d7:2b:0c:9b:12:28:b3:84:c4:85:d4:b5:1b:71: e0:8c:cb:95:ae:70:c1:6a:95:55:3a:da:81:56:7e:01:86:e9: 1c:50:d2:aa:64:82:17:c8:8a:58:22:1b:3c:91:6d:bc:69:4f: 94:d3:7d:37:ca:11:8e:67:70:3f:f7:67:48:62:bf:3c:be:71: 65:b4:02:78:5b:eb:ac:28:be:65:c5:bc:88:e2:73:28:1f:0c: e5:a5:ce:2f:5b:c3:50:26:da:96:2a:de:49:af:c6:87:6f:18: 2a:0f:14:70:53:75:ed:c4:c4:3b:8d:c8:eb:75:02:b9:59:52: db:9f:5a:d0:69:f5:d0:c5:17:39:d0:68:17:f6:ae:3e:79:56: 46:61:23:ac:01:8c:6d:74:2b:8d:71:b8:6f:d6:77:2b:23:5f: dc:13:4b:46:23:1d:5b:be:4b:10:6c:a0:58:b7:d9:43:da:5a: 57:1f:3c:2b:d2:3c:f2:fd:09:5c:77:82:79:02:cd:21:55:95: 1d:34:88:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9j1tInEw+q/p34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk MDIwOGM4ZjctNmM3OS00NTY3LWI5YjYtYzBkYTY0MGNhZjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIEhN2ggTMrBIPq5pwrOJee617wQ9PfDNkFZ 4W319zG2Z6orqcsr7KH4sVQHf0v+s/TIcyfKz6bs7mbsReVHa0mcC5TubFbBFqGR JHtoGOKaw3qrN3QuZ3/wm1vGEnZR4HnjqsniWhURheYogfsGGM15CAyw11dC37pI KzPjAuQtQU4AM7rs5t1CvQWVAhjgI8Q4EXvMA22NoDW2dktN2HIyRI0YUBE1xpFu 01zw9yBN/9OvYHmQ+H7e48PsSCGDewiyRQAx84rV36ihwWDWBLi+TfjNuiGFVDIs sLKl/u+st4Gc9lECNkCgOGn0pfoBpckYFXpUSqbeqq11aA6XtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTpulksOaqroU0Gai1DpOVZg1PxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWU1NDNhMGItY2Q0OS0z NzNhLTg4NTMtODNjNDVjOGY0ZGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCru4YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK5xgQSrcJoElZ2xGMCgbflbwfi1+M2cR0OSXWi3AfE7sVoYmDhgo5+a E/vdhzCSchRk3l9qDQKFc6DXKwybEiizhMSF1LUbceCMy5WucMFqlVU62oFWfgGG 6RxQ0qpkghfIilgiGzyRbbxpT5TTfTfKEY5ncD/3Z0hivzy+cWW0Anhb66wovmXF vIjicygfDOWlzi9bw1Am2pYq3kmvxodvGCoPFHBTde3ExDuNyOt1ArlZUtufWtBp 9dDFFznQaBf2rj55VkZhI6wBjG10K41xuG/WdysjX9wTS0YjHVu+SxBsoFi32UPa WlcfPCvSPPL9CVx3gnkCzSFVlR00iCE= -----END CERTIFICATE-----Generated at Wed Aug 6 16:08:55 2025 by rpki-client