$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/941de0e7-25b0-39cb-9819-4adb8f1d5251.roa File: 941de0e7-25b0-39cb-9819-4adb8f1d5251.roa (raw, json) Hash identifier: OuoicMnvjX4HB8dflnOopKeG8IVVqdRsW17wsD3/3Y4= Subject key identifier: 63:69:A9:FC:91:DE:A2:7A:E5:82:B4:DF:A1:5A:8E:73:05:80:51:B6 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AA6F634DF082AF78EA9790880 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/941de0e7-25b0-39cb-9819-4adb8f1d5251.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 6167 IP address blocks: 174.252.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:34:df:08:2a:f7:8e:a9:79:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=8a3302f5-5f68-42a7-9754-a154711c4bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:81:81:93:0f:5e:33:af:f7:a2:70:21:7a:a1: b0:be:8d:65:e8:da:f1:8e:81:b6:35:0b:32:30:07: a5:1e:95:1c:73:54:39:5d:43:e0:7f:91:88:51:a1: 4f:7a:f0:e5:48:ad:44:7a:51:a8:4c:26:72:8b:eb: 6a:b8:87:30:d9:f8:8a:08:28:72:41:0d:a4:8b:96: 14:ad:4d:56:a6:89:02:16:87:43:47:0c:2d:6d:5c: 86:f3:c2:0a:9d:4d:8a:a9:31:28:9d:14:93:ca:80: 0f:07:1b:aa:ad:f8:29:4e:a7:cf:de:d9:bb:dd:44: 8f:a2:83:a5:6c:9d:56:16:d4:ec:25:e8:7d:40:59: e2:b8:90:e8:6b:86:17:f9:c8:43:16:94:b1:cb:de: 40:32:16:d1:5b:9f:7c:3e:d3:24:9f:2e:94:df:c3: d2:0f:91:c5:0b:c9:55:54:53:0f:d1:d5:bc:fe:bb: fa:d4:8f:e4:dd:e9:a4:cf:4e:58:51:54:bd:55:14: d9:96:5d:a0:29:d8:08:2d:5b:24:0d:54:a3:db:f3: 08:5a:b8:a1:91:2f:4f:08:1a:66:fe:9d:44:00:d9: 37:0f:4d:bd:2c:e4:85:12:d0:f5:b2:83:de:75:c8: 53:1f:53:32:f9:18:92:a4:d4:b1:82:75:28:12:d2: 7f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:69:A9:FC:91:DE:A2:7A:E5:82:B4:DF:A1:5A:8E:73:05:80:51:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/941de0e7-25b0-39cb-9819-4adb8f1d5251.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.252.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:f5:62:e8:76:90:86:14:56:de:14:7a:b0:b1:09:f6:9f:ec: 64:d5:8e:29:5b:e5:49:2d:9f:db:0d:99:be:26:3c:67:3d:4a: 50:f3:08:ea:50:0a:04:9f:da:4a:b6:eb:f7:88:0a:c5:af:aa: e7:6f:3b:37:8b:b0:93:c1:da:91:6f:53:cf:d3:53:b0:84:ff: 7f:0f:f6:3f:e2:71:8a:c5:f4:c0:f7:4e:a2:9a:14:88:72:9f: 8a:2c:2d:b7:f2:54:7e:a5:04:f3:04:75:a3:72:2a:57:79:43: 85:c7:48:a8:d5:2f:6d:b4:e0:2b:93:8f:c0:91:5c:a7:94:1a: 01:9f:16:cc:9c:55:49:a5:f0:83:9e:14:8f:f2:65:16:15:06: 33:c6:ef:c5:39:6e:e6:c4:d0:e8:f3:19:50:4a:ef:21:bc:39: 28:35:e9:db:f4:ba:c8:3f:27:71:6a:b6:f2:62:65:d9:fb:59: 9a:4f:1c:fb:79:5b:50:50:a6:53:ab:3f:6b:d6:e3:7c:df:43: 8f:f7:c1:3f:a1:d9:8f:de:27:9c:78:7b:9c:43:42:7e:83:6e: 45:26:2c:f1:8a:e1:4c:ad:7d:85:26:10:85:16:b7:2a:e0:93: 8f:83:84:ee:de:9a:6b:e5:da:d2:17:10:9c:bb:0f:21:64:91: 75:99:db:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9jTfCCr3jql5CIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk OGEzMzAyZjUtNWY2OC00MmE3LTk3NTQtYTE1NDcxMWM0YmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIGBkw9eM6/3onAheqGwvo1l6NrxjoG2NQsy MAelHpUcc1Q5XUPgf5GIUaFPevDlSK1EelGoTCZyi+tquIcw2fiKCChyQQ2ki5YU rU1WpokCFodDRwwtbVyG88IKnU2KqTEonRSTyoAPBxuqrfgpTqfP3tm73USPooOl bJ1WFtTsJeh9QFniuJDoa4YX+chDFpSxy95AMhbRW598PtMkny6U38PSD5HFC8lV VFMP0dW8/rv61I/k3emkz05YUVS9VRTZll2gKdgILVskDVSj2/MIWrihkS9PCBpm /p1EANk3D029LOSFEtD1soPedchTH1My+RiSpNSxgnUoEtJ/CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNpqfyR3qJ65YK036FajnMFgFG2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTQxZGUwZTctMjViMC0z OWNiLTk4MTktNGFkYjhmMWQ1MjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErvwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJL1Yuh2kIYUVt4UerCxCfaf7GTVjilb5Uktn9sNmb4mPGc9SlDzCOpQ CgSf2kq26/eICsWvqudvOzeLsJPB2pFvU8/TU7CE/38P9j/icYrF9MD3TqKaFIhy n4osLbfyVH6lBPMEdaNyKld5Q4XHSKjVL2204CuTj8CRXKeUGgGfFsycVUml8IOe FI/yZRYVBjPG78U5bubE0OjzGVBK7yG8OSg16dv0usg/J3FqtvJiZdn7WZpPHPt5 W1BQplOrP2vW43zfQ4/3wT+h2Y/eJ5x4e5xDQn6DbkUmLPGK4UytfYUmEIUWtyrg k4+DhO7emmvl2tIXEJy7DyFkkXWZ270= -----END CERTIFICATE-----Generated at Wed Aug 6 13:16:31 2025 by rpki-client