$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8747393-bee7-348d-8c0c-fd745518521c.roa File: a8747393-bee7-348d-8c0c-fd745518521c.roa (raw, json) Hash identifier: hPrZUxoJd0gxsc9mGIsfikJn74ptjwzqKMOmAUoNcqw= Subject key identifier: DC:1B:B2:06:57:E8:63:F1:60:BF:1E:B9:89:8D:4E:A8:D6:2A:BD:6C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AA6F63E7A0A6F9CF01CA71080 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8747393-bee7-348d-8c0c-fd745518521c.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 6167 IP address blocks: 174.239.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:3e:7a:0a:6f:9c:f0:1c:a7:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=a23101a6-8bda-4bc0-a2a0-4d2f47c1e749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a4:8f:e0:e8:31:bf:a6:d7:f4:3c:be:68:11: 52:83:c5:df:b3:0c:b3:25:d2:70:3c:cf:9b:4b:f5: 48:f0:22:11:3f:6c:1b:de:8f:fa:91:f1:df:e6:cc: 45:a3:10:d9:50:07:ea:3a:97:3d:80:18:31:2e:60: 62:f8:2c:93:fd:6d:5d:fa:78:4b:92:1b:a1:72:45: d6:58:7b:b6:f0:09:31:d0:29:82:a1:34:3b:88:eb: 57:d4:ed:5d:88:6a:ce:e6:9f:f9:60:28:a5:e4:5b: 81:06:96:1a:94:e9:8d:55:b7:fe:ac:c1:1b:52:08: fb:76:49:e0:4b:43:44:ce:1f:57:26:79:53:cc:4e: ba:f9:22:8c:2d:fc:3c:0b:c5:77:86:7f:31:fc:b1: 09:6c:ce:04:45:52:0b:ea:06:64:d6:e3:cf:3a:5c: 28:03:b6:ef:f8:13:87:ad:fa:fe:2f:3a:df:20:6b: ba:a3:74:8e:16:79:9a:81:f3:fa:be:0a:25:75:98: 74:ac:6d:6d:5a:e9:ea:2d:20:97:12:be:cb:89:89: d8:31:8f:3b:1f:83:82:67:d5:4b:37:1a:98:bc:07: f3:14:8e:3f:07:74:f4:69:f7:6b:22:b6:24:ee:fc: 22:47:b8:81:50:27:1e:8d:2d:1b:44:79:92:69:ee: 04:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:1B:B2:06:57:E8:63:F1:60:BF:1E:B9:89:8D:4E:A8:D6:2A:BD:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8747393-bee7-348d-8c0c-fd745518521c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.239.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:79:23:72:bc:1f:ce:41:e8:d8:5b:9f:b0:65:57:40:7e:1e: 4d:2b:69:31:cd:6e:44:42:93:4a:82:11:f7:a5:ff:fa:14:2f: 8f:d2:b1:ec:1f:aa:77:1d:d1:9b:cb:2e:60:f4:62:70:8c:b1: 82:bf:1f:09:5d:b4:06:a7:b1:1a:b4:cf:01:a4:49:63:21:a5: 14:d0:18:22:70:32:30:86:4f:69:fc:2e:87:ce:de:41:a9:d5: dc:03:b7:57:69:fe:90:8d:ac:4c:fa:dd:f0:ec:7a:c4:af:ce: bf:6b:fe:a1:61:9c:87:06:42:61:3c:b3:de:d8:1d:33:6b:a9: de:6d:09:cb:4e:81:bb:7f:01:96:c8:00:c0:14:78:dc:ab:5f: 0b:0f:90:08:42:78:30:fd:f4:c9:d4:08:14:0c:23:dd:19:b2: 82:28:0f:92:a1:3e:40:e2:a7:d9:d3:46:2d:b5:68:67:8c:81: 0c:56:c7:57:31:9e:a9:97:df:7f:07:5c:8f:14:0d:db:86:3d: 3f:91:b9:46:63:94:d1:97:49:a5:73:a1:1e:46:16:a8:63:ac: 98:46:7c:4d:94:4e:16:ff:32:95:c6:fd:5f:30:90:b9:79:2a: 42:af:15:5d:24:5d:fb:3f:57:3d:1d:31:65:fe:bd:7b:16:21: cb:40:8f:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9j56Cm+c8BynEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk YTIzMTAxYTYtOGJkYS00YmMwLWEyYTAtNGQyZjQ3YzFlNzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKSP4Ogxv6bX9Dy+aBFSg8XfswyzJdJwPM+b S/VI8CIRP2wb3o/6kfHf5sxFoxDZUAfqOpc9gBgxLmBi+CyT/W1d+nhLkhuhckXW WHu28Akx0CmCoTQ7iOtX1O1diGrO5p/5YCil5FuBBpYalOmNVbf+rMEbUgj7dkng S0NEzh9XJnlTzE66+SKMLfw8C8V3hn8x/LEJbM4ERVIL6gZk1uPPOlwoA7bv+BOH rfr+LzrfIGu6o3SOFnmagfP6vgoldZh0rG1tWunqLSCXEr7LiYnYMY87H4OCZ9VL NxqYvAfzFI4/B3T0afdrIrYk7vwiR7iBUCcejS0bRHmSae4EuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwbsgZX6GPxYL8euYmNTqjWKr1sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTg3NDczOTMtYmVlNy0z NDhkLThjMGMtZmQ3NDU1MTg1MjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEru9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKN5I3K8H85B6Nhbn7BlV0B+Hk0raTHNbkRCk0qCEfel//oUL4/Ssewf qncd0ZvLLmD0YnCMsYK/HwldtAansRq0zwGkSWMhpRTQGCJwMjCGT2n8LofO3kGp 1dwDt1dp/pCNrEz63fDsesSvzr9r/qFhnIcGQmE8s97YHTNrqd5tCctOgbt/AZbI AMAUeNyrXwsPkAhCeDD99MnUCBQMI90ZsoIoD5KhPkDip9nTRi21aGeMgQxWx1cx nqmX338HXI8UDduGPT+RuUZjlNGXSaVzoR5GFqhjrJhGfE2UThb/MpXG/V8wkLl5 KkKvFV0kXfs/Vz0dMWX+vXsWIctAj+Y= -----END CERTIFICATE-----Generated at Wed Aug 6 10:21:03 2025 by rpki-client