$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/672f9b6a-028d-3209-8cf0-f90e0fed1406.roa File: 672f9b6a-028d-3209-8cf0-f90e0fed1406.roa (raw, json) Hash identifier: KgF5q0Jont0UEpDnPU+QHxVsxErxSSMnXRcbZJJOAgc= Subject key identifier: 1A:2F:16:60:61:2E:5C:26:CE:20:12:12:7F:D2:7D:F8:91:D0:25:A6 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AA6F6450F6E8EA3D1BB19C780 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/672f9b6a-028d-3209-8cf0-f90e0fed1406.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 6167 IP address blocks: 174.248.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:45:0f:6e:8e:a3:d1:bb:19:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=e98ed190-f7ec-4db2-83c3-d9c31d078963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:21:45:45:09:3c:2a:1f:52:52:b3:d0:89:2d: dd:fd:e5:01:48:04:66:b7:1b:f5:f4:a4:ed:82:5e: cc:8d:b9:0c:87:58:3f:1d:13:5a:1b:9d:10:11:da: 23:b1:1c:38:a2:a4:77:bc:70:ca:fc:87:54:fb:7a: 47:03:0e:37:81:03:a0:45:c4:21:76:d3:04:40:bb: 13:df:d1:4f:f5:29:50:df:b6:97:61:a4:10:6e:22: 81:44:12:bd:b6:2e:10:2e:3d:52:5a:97:8d:83:5e: 9b:59:50:45:19:7e:1f:c1:42:bf:6d:7e:0d:f3:ab: 87:58:16:fb:77:32:45:8d:84:a8:26:dd:6f:ea:5e: 76:0f:76:3f:05:87:e6:c7:5c:f6:d2:59:2e:03:47: 33:d7:1c:34:89:fe:56:1b:2b:2a:a7:f2:34:71:12: 43:a1:10:d7:aa:77:3d:00:32:a3:65:d5:a8:9c:8b: 7a:4d:3f:4e:6d:72:56:2b:c5:05:b2:fd:b7:4a:83: 8c:ee:97:0a:9c:6c:b3:3b:72:2d:e1:4b:9f:b5:87: c0:a1:f8:9b:8f:b1:9a:4c:4e:ff:d8:55:98:88:e0: d4:76:90:74:8f:48:44:5d:29:a4:13:63:5c:31:55: bf:89:a6:be:9b:60:8d:c5:26:bc:f3:32:88:39:c4: 50:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2F:16:60:61:2E:5C:26:CE:20:12:12:7F:D2:7D:F8:91:D0:25:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/672f9b6a-028d-3209-8cf0-f90e0fed1406.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.248.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:b5:5d:fe:e9:ea:3b:44:e3:b7:d7:3e:15:1a:f0:ea:f3:58: e3:a4:b2:ef:35:7c:ca:ba:cb:fd:91:35:99:5c:6d:44:72:29: c4:fd:af:fb:df:42:e6:76:3f:4f:cd:5a:c9:ce:36:46:63:62: ec:af:d0:a2:f6:8d:9e:45:fd:bf:39:e2:e2:56:a8:5f:5e:cc: f0:7c:1a:5c:e5:9d:40:cd:3f:31:42:6a:39:46:0e:c4:7a:8c: d9:7c:ca:b9:32:40:81:d8:08:fe:ad:27:c3:b9:b4:92:77:71: af:1d:1a:45:ef:a0:d0:90:1e:85:7c:6e:c7:44:53:e0:86:fe: 4a:96:02:09:d0:05:c7:3e:24:3f:af:7e:9b:9b:a1:51:7d:12: 6e:42:7b:fd:5f:3e:fe:d3:3c:aa:2e:e5:b7:03:9e:9b:93:1a: dd:31:55:3a:11:65:d7:05:1c:4e:f8:4f:86:33:ee:78:2a:d3: 0d:6f:e1:4d:5a:9a:f5:72:7f:14:d1:c3:fd:c3:1f:92:c3:3a: 48:86:62:13:55:8f:34:2d:aa:54:f5:e0:7e:a2:2e:ed:51:bf: 45:f7:64:4b:16:eb:3c:8c:0b:c5:1b:bb:c9:c1:c1:36:a2:d5: 85:b9:9f:81:07:d6:c9:93:55:55:31:76:96:c7:dd:04:99:81: e6:c4:40:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9kUPbo6j0bsZx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk ZTk4ZWQxOTAtZjdlYy00ZGIyLTgzYzMtZDljMzFkMDc4OTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCFFRQk8Kh9SUrPQiS3d/eUBSARmtxv19KTt gl7MjbkMh1g/HRNaG50QEdojsRw4oqR3vHDK/IdU+3pHAw43gQOgRcQhdtMEQLsT 39FP9SlQ37aXYaQQbiKBRBK9ti4QLj1SWpeNg16bWVBFGX4fwUK/bX4N86uHWBb7 dzJFjYSoJt1v6l52D3Y/BYfmx1z20lkuA0cz1xw0if5WGysqp/I0cRJDoRDXqnc9 ADKjZdWonIt6TT9ObXJWK8UFsv23SoOM7pcKnGyzO3It4UuftYfAofibj7GaTE7/ 2FWYiODUdpB0j0hEXSmkE2NcMVW/iaa+m2CNxSa88zKIOcRQhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBovFmBhLlwmziASEn/SffiR0CWmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjcyZjliNmEtMDI4ZC0z MjA5LThjZjAtZjkwZTBmZWQxNDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrvjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALi1Xf7p6jtE47fXPhUa8OrzWOOksu81fMq6y/2RNZlcbURyKcT9r/vf QuZ2P0/NWsnONkZjYuyv0KL2jZ5F/b854uJWqF9ezPB8GlzlnUDNPzFCajlGDsR6 jNl8yrkyQIHYCP6tJ8O5tJJ3ca8dGkXvoNCQHoV8bsdEU+CG/kqWAgnQBcc+JD+v fpuboVF9Em5Ce/1fPv7TPKou5bcDnpuTGt0xVToRZdcFHE74T4Yz7ngq0w1v4U1a mvVyfxTRw/3DH5LDOkiGYhNVjzQtqlT14H6iLu1Rv0X3ZEsW6zyMC8Ubu8nBwTai 1YW5n4EH1smTVVUxdpbH3QSZgebEQKY= -----END CERTIFICATE-----Generated at Thu Aug 7 05:14:17 2025 by rpki-client