$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98f288e7-5795-3db3-9395-9c6c0cd1d5c3.roa File: 98f288e7-5795-3db3-9395-9c6c0cd1d5c3.roa (raw, json) Hash identifier: jQ2KXkK6U067wWauH+YzLbDCLXM676JOOt4wrwEbEas= Subject key identifier: 5E:49:0A:44:DE:5B:13:FC:D5:F4:CA:5D:2A:2B:80:2E:93:A8:93:E4 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AA6F642D8E6DC1AAC1304EC40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98f288e7-5795-3db3-9395-9c6c0cd1d5c3.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 6167 IP address blocks: 174.246.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:42:d8:e6:dc:1a:ac:13:04:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=1c8a5899-ef6e-4c2a-b737-f691709a270b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:04:bf:bc:95:d5:a8:db:77:15:35:3f:d4:62: 39:eb:5e:ac:3c:ec:d4:94:d5:b5:85:a3:45:7f:ec: 4b:00:08:4f:89:5e:5e:f4:7a:20:f7:ca:d0:0c:c4: 3f:ad:97:8c:db:40:cd:3a:38:98:08:69:d2:31:70: 01:cd:d2:eb:64:47:7f:7a:a7:47:27:83:d7:c5:68: e2:2a:a9:7c:26:5a:d3:c4:6f:b0:e0:8c:d0:05:80: 0c:70:17:1d:0d:15:76:5d:e9:78:60:33:8e:97:e1: ec:72:79:0b:73:6e:d4:dc:3a:3b:d8:87:b2:42:09: 33:40:7f:4f:2e:39:de:75:94:6a:11:ac:a7:ec:02: f2:5d:e6:f4:59:db:fc:fb:3f:77:18:43:91:db:cf: 0d:35:1d:66:34:93:ca:3f:80:bc:61:75:92:f7:6c: cf:58:a2:4e:17:c1:cb:f2:ff:7a:60:37:ba:09:76: 31:35:74:b2:8a:84:ad:a3:83:7f:07:80:21:d2:91: 44:d7:08:f5:0e:36:99:c2:2c:9a:9c:45:80:49:fb: 91:42:77:16:81:cb:13:ea:eb:0a:7d:c1:20:5a:8c: e5:d4:b9:d7:ff:36:ca:f4:c5:22:df:a1:50:e2:46: 46:cc:4c:1c:49:ff:14:32:c1:3a:cd:5b:43:34:d2: 7b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:49:0A:44:DE:5B:13:FC:D5:F4:CA:5D:2A:2B:80:2E:93:A8:93:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98f288e7-5795-3db3-9395-9c6c0cd1d5c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.246.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:f5:9f:02:81:82:90:90:fb:2d:b6:cf:d3:48:08:2c:70:ae: 00:5e:44:4f:6e:74:c1:d7:a1:41:86:95:3f:f7:68:f2:94:ee: c1:04:e5:3f:b8:94:86:b7:87:8b:1b:31:bf:c5:30:23:1b:97: 62:70:88:02:12:f0:31:fe:99:62:8c:e4:80:33:8e:db:f8:5a: e9:87:f7:77:71:44:38:b0:9c:64:49:23:58:51:c0:3e:54:45: f2:ae:e9:b8:3d:c3:72:ae:bb:ae:75:90:ac:c2:a1:a8:93:c0: 3b:52:cd:c2:4c:d1:43:52:d8:0b:b7:39:fe:3c:bb:e2:43:99: 9c:d2:a5:7b:0d:0e:19:0b:e5:2c:60:5b:26:bc:8d:fe:0c:50: 9e:f2:31:32:d8:08:9f:a9:53:78:8c:bd:cd:7a:b3:73:b3:e3: 26:26:eb:df:d0:42:67:c6:6c:2d:e5:58:ec:c3:a2:5c:21:52: ee:4a:93:c7:e6:34:49:f0:22:e0:46:07:0f:bb:ed:5e:15:35: 74:a3:c2:61:39:25:33:5e:6e:c1:bd:2f:4c:de:b9:cf:94:c7: 12:cb:35:03:04:95:54:5f:a2:13:f1:9a:fa:fc:8b:8a:4e:0d: aa:1d:3d:07:4b:79:25:25:e4:ef:a3:7f:d9:f5:77:f9:b9:28: df:60:20:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9kLY5twarBME7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk MWM4YTU4OTktZWY2ZS00YzJhLWI3MzctZjY5MTcwOWEyNzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAS/vJXVqNt3FTU/1GI5616sPOzUlNW1haNF f+xLAAhPiV5e9Hog98rQDMQ/rZeM20DNOjiYCGnSMXABzdLrZEd/eqdHJ4PXxWji Kql8JlrTxG+w4IzQBYAMcBcdDRV2Xel4YDOOl+HscnkLc27U3Do72IeyQgkzQH9P LjnedZRqEayn7ALyXeb0Wdv8+z93GEOR288NNR1mNJPKP4C8YXWS92zPWKJOF8HL 8v96YDe6CXYxNXSyioSto4N/B4Ah0pFE1wj1DjaZwiyanEWASfuRQncWgcsT6usK fcEgWozl1LnX/zbK9MUi36FQ4kZGzEwcSf8UMsE6zVtDNNJ7AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5JCkTeWxP81fTKXSorgC6TqJPkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOThmMjg4ZTctNTc5NS0z ZGIzLTkzOTUtOWM2YzBjZDFkNWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErvYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK31nwKBgpCQ+y22z9NICCxwrgBeRE9udMHXoUGGlT/3aPKU7sEE5T+4 lIa3h4sbMb/FMCMbl2JwiAIS8DH+mWKM5IAzjtv4WumH93dxRDiwnGRJI1hRwD5U RfKu6bg9w3Kuu651kKzCoaiTwDtSzcJM0UNS2Au3Of48u+JDmZzSpXsNDhkL5Sxg Wya8jf4MUJ7yMTLYCJ+pU3iMvc16s3Oz4yYm69/QQmfGbC3lWOzDolwhUu5Kk8fm NEnwIuBGBw+77V4VNXSjwmE5JTNebsG9L0zeuc+UxxLLNQMElVRfohPxmvr8i4pO DaodPQdLeSUl5O+jf9n1d/m5KN9gICE= -----END CERTIFICATE-----Generated at Fri Aug 8 13:06:42 2025 by rpki-client