$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ef76a33-406b-3cdd-8d19-1f64cdb325e1.roa File: 8ef76a33-406b-3cdd-8d19-1f64cdb325e1.roa (raw, json) Hash identifier: HFr3SKuVk+kXEw2tLAyw7+T/frm+Vlm61mEmvkLKlVM= Subject key identifier: 52:F6:B7:A5:9E:78:43:BE:D8:4A:B1:1C:8A:4E:26:5A:68:92:AD:39 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AA6F64282B83F13B369EA28C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ef76a33-406b-3cdd-8d19-1f64cdb325e1.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 6167 IP address blocks: 174.245.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:42:82:b8:3f:13:b3:69:ea:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=f0903936-399e-45fa-a05e-133447f30788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0e:60:a4:0f:8e:7d:23:67:62:f1:d1:8a:c3: a9:ed:97:9d:5a:bb:9e:60:d7:20:80:86:58:93:0c: b2:c6:2d:18:ed:83:88:fb:44:45:c0:96:d8:65:52: 5c:b5:95:03:6f:ca:ea:b7:9a:7d:41:99:20:76:bf: 24:2e:e1:82:5c:ae:b8:6f:47:32:66:ec:44:da:44: fa:67:75:e7:93:a6:98:28:a8:f5:6f:be:38:4f:6c: 45:5f:c6:f2:41:ab:91:f7:96:22:68:ce:87:1d:4f: c9:c2:cd:c5:80:2d:c1:21:59:50:48:c0:b7:1e:4b: c5:fd:f9:52:8e:f1:42:12:f7:f3:ce:a1:90:ce:2a: ff:35:3d:5b:0e:a6:f6:db:60:e9:d9:f7:74:61:59: a2:8c:c0:9f:ee:84:97:c6:01:c4:42:e8:5f:57:94: e2:8a:d8:3d:71:f1:48:41:c5:73:9d:11:fa:a6:8c: 81:e1:3c:07:f2:64:df:ef:a3:87:51:47:f3:71:05: e8:25:c2:88:52:14:33:c8:6a:c4:99:25:08:03:59: c9:8a:b9:61:e2:b6:0b:30:e3:36:01:91:41:08:ae: 2f:9e:06:06:d1:41:63:5c:75:f6:05:de:0e:09:03: db:b9:59:17:bf:0a:49:3f:4b:59:04:66:b7:df:65: a3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F6:B7:A5:9E:78:43:BE:D8:4A:B1:1C:8A:4E:26:5A:68:92:AD:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ef76a33-406b-3cdd-8d19-1f64cdb325e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.245.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:c7:9c:ca:52:fb:98:79:c8:ba:38:95:48:e2:ab:56:eb:6f: 78:a3:b0:d7:f1:b8:cf:37:ff:41:15:46:70:67:c9:7e:57:cc: a6:a2:94:08:71:99:a3:fb:82:71:f3:63:38:4d:93:2a:da:57: a8:e9:41:90:65:db:a8:06:9e:65:f1:13:14:f9:e0:4b:70:15: 93:53:d4:05:8b:52:79:6e:d6:ec:be:1c:71:80:0d:e0:82:c0: 3f:1b:03:74:64:c0:f6:45:d4:cd:d5:89:bb:de:c7:63:ba:ef: 8c:da:01:a4:6d:cc:26:6f:38:97:e6:d3:e3:ce:f2:91:a1:2d: 1b:5d:15:7f:5a:6f:4e:a1:20:1b:e5:bb:80:df:44:93:3a:97: a6:ca:f9:26:f6:43:74:8b:27:0c:3e:eb:86:70:42:c5:ce:0f: 47:55:54:8b:1b:ec:2c:92:f9:b4:8c:15:5d:8a:56:96:44:b2: a2:c5:67:68:a6:af:90:f2:08:71:16:91:7b:21:96:2a:d5:e3: 86:da:2b:75:22:35:25:45:49:a4:24:14:89:bf:f9:8f:7d:bf: 3f:b4:f8:6e:c8:e8:d5:f6:be:70:3d:82:c3:fc:9b:cc:c8:08: d3:f1:28:b0:5b:7d:1c:4b:89:05:b8:24:c3:e2:cf:fe:dd:89: da:36:03:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9kKCuD8Ts2nqKMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk ZjA5MDM5MzYtMzk5ZS00NWZhLWEwNWUtMTMzNDQ3ZjMwNzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjw5gpA+OfSNnYvHRisOp7ZedWrueYNcggIZY kwyyxi0Y7YOI+0RFwJbYZVJctZUDb8rqt5p9QZkgdr8kLuGCXK64b0cyZuxE2kT6 Z3Xnk6aYKKj1b744T2xFX8byQauR95YiaM6HHU/Jws3FgC3BIVlQSMC3HkvF/flS jvFCEvfzzqGQzir/NT1bDqb222Dp2fd0YVmijMCf7oSXxgHEQuhfV5Tiitg9cfFI QcVznRH6poyB4TwH8mTf76OHUUfzcQXoJcKIUhQzyGrEmSUIA1nJirlh4rYLMOM2 AZFBCK4vngYG0UFjXHX2Bd4OCQPbuVkXvwpJP0tZBGa332Wj5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFL2t6WeeEO+2EqxHIpOJlpokq05MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGVmNzZhMzMtNDA2Yi0z Y2RkLThkMTktMWY2NGNkYjMyNWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrvXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDHnMpS+5h5yLo4lUjiq1brb3ijsNfxuM83/0EVRnBnyX5XzKailAhx maP7gnHzYzhNkyraV6jpQZBl26gGnmXxExT54EtwFZNT1AWLUnlu1uy+HHGADeCC wD8bA3RkwPZF1M3Vibvex2O674zaAaRtzCZvOJfm0+PO8pGhLRtdFX9ab06hIBvl u4DfRJM6l6bK+Sb2Q3SLJww+64ZwQsXOD0dVVIsb7CyS+bSMFV2KVpZEsqLFZ2im r5DyCHEWkXshlirV44baK3UiNSVFSaQkFIm/+Y99vz+0+G7I6NX2vnA9gsP8m8zI CNPxKLBbfRxLiQW4JMPiz/7dido2A/g= -----END CERTIFICATE-----Generated at Wed Aug 6 11:02:05 2025 by rpki-client