$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8d0b7e6-9134-305a-be9d-e61521a42886.roa File: a8d0b7e6-9134-305a-be9d-e61521a42886.roa (raw, json) Hash identifier: SK1nSYihnJUD3s+hrFUIF7VKEuQOVgt7ksNu8nKGEwA= Subject key identifier: 7D:0F:D4:E4:4E:BD:39:AC:8B:F2:A7:82:0F:D8:72:D5:85:4A:A6:70 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AADF12DAD9002B3B4A56B8980 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8d0b7e6-9134-305a-be9d-e61521a42886.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 22394 IP address blocks: 174.41.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:2d:ad:90:02:b3:b4:a5:6b:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=babeba11-67ad-48dc-9984-f05a052529f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0e:6d:20:69:f1:1d:f8:83:89:88:ad:48:1f: be:05:34:e5:0d:34:98:80:cd:f5:53:4e:94:0c:6e: a4:1b:ef:5a:a6:7a:da:8f:89:67:8a:8a:84:5a:66: c4:e0:4f:43:68:31:15:ac:53:8c:08:6a:ec:38:a9: c4:05:ac:49:79:17:32:97:7b:f3:1b:26:e2:f3:fa: 28:8d:5a:4f:47:90:d5:e1:ee:16:49:81:f3:d9:f2: fb:fd:cc:f2:4b:6f:47:40:a5:aa:64:68:87:3b:47: 67:c4:a8:68:e8:f5:b5:ec:85:a0:9c:23:33:b6:a1: 14:e6:8f:14:ee:9d:3f:89:ac:36:a0:ea:6c:39:b6: 06:b7:98:19:5f:80:19:f3:e4:c0:bb:f9:dd:a1:e8: 82:a8:0b:a8:bd:75:5f:04:67:d7:a0:34:18:4f:4d: 61:78:c1:37:ee:63:fe:c1:34:d9:24:b0:1d:31:82: bf:1d:7f:be:3d:06:b6:74:ca:0e:3a:2b:ae:90:69: 79:3b:3e:4b:91:ca:af:bf:b8:ea:a4:f6:b0:c1:8e: 86:32:fd:b7:b5:62:3a:d5:a1:d6:ca:b6:c3:c6:d9: be:c5:9b:ba:68:84:35:cc:fb:86:2a:d0:51:b5:25: 74:90:0f:07:78:df:8d:64:c7:25:a1:c7:90:a7:69: 9c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:0F:D4:E4:4E:BD:39:AC:8B:F2:A7:82:0F:D8:72:D5:85:4A:A6:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8d0b7e6-9134-305a-be9d-e61521a42886.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.41.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:1a:c9:af:9d:f3:22:47:dc:75:f8:bd:83:53:d6:2e:d2:e3: b9:5b:5a:47:de:b5:02:10:e2:52:65:16:05:62:76:94:c6:f8: 67:12:d2:cb:90:02:59:db:dd:f5:d6:3c:8f:f6:2a:88:ef:80: e0:88:d7:c4:51:d5:79:80:07:d7:e3:5a:16:c0:e7:77:50:61: ca:ca:0d:3c:78:12:05:2e:5b:b3:15:38:d2:45:76:c0:5a:b1: 2e:b0:ec:e4:4f:6e:28:e6:d4:b8:9b:51:17:a8:a7:8d:4e:24: 2e:27:eb:62:60:23:80:21:fe:63:8e:c2:b4:b7:2b:89:20:71: 0d:a5:28:93:e2:69:5b:f4:5b:d2:77:9a:ca:f8:4f:e3:47:db: b7:e5:fd:cb:81:20:b9:21:5e:b6:a9:49:6f:53:da:5f:f1:34: 56:65:f2:44:98:ad:3f:cf:b8:19:05:3d:fc:29:bd:01:ce:47: 05:41:3b:e8:5a:76:c4:56:73:ef:a9:65:69:8c:b0:1a:dd:de: 82:6a:c7:e1:03:21:4b:bf:53:ab:99:e5:ef:9c:31:ed:c2:56: b1:34:39:c8:a9:e9:33:3a:75:07:f9:83:9e:85:29:02:38:0e: f9:58:a0:1d:3c:96:83:74:ad:2f:ec:b8:76:70:8d:37:35:3b: cf:d5:bc:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8S2tkAKztKVriYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk YmFiZWJhMTEtNjdhZC00OGRjLTk5ODQtZjA1YTA1MjUyOWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ5tIGnxHfiDiYitSB++BTTlDTSYgM31U06U DG6kG+9apnraj4lnioqEWmbE4E9DaDEVrFOMCGrsOKnEBaxJeRcyl3vzGybi8/oo jVpPR5DV4e4WSYHz2fL7/czyS29HQKWqZGiHO0dnxKho6PW17IWgnCMztqEU5o8U 7p0/iaw2oOpsObYGt5gZX4AZ8+TAu/ndoeiCqAuovXVfBGfXoDQYT01heME37mP+ wTTZJLAdMYK/HX++PQa2dMoOOiuukGl5Oz5Lkcqvv7jqpPawwY6GMv23tWI61aHW yrbDxtm+xZu6aIQ1zPuGKtBRtSV0kA8HeN+NZMcloceQp2mcRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH0P1OROvTmsi/Kngg/YctWFSqZwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYThkMGI3ZTYtOTEzNC0z MDVhLWJlOWQtZTYxNTIxYTQyODg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrimKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkaya+d8yJH3HX4vYNT1i7S47lbWkfetQIQ4lJlFgVidpTG+GcS0suQ Alnb3fXWPI/2KojvgOCI18RR1XmAB9fjWhbA53dQYcrKDTx4EgUuW7MVONJFdsBa sS6w7ORPbijm1LibUReop41OJC4n62JgI4Ah/mOOwrS3K4kgcQ2lKJPiaVv0W9J3 msr4T+NH27fl/cuBILkhXrapSW9T2l/xNFZl8kSYrT/PuBkFPfwpvQHORwVBO+ha dsRWc++pZWmMsBrd3oJqx+EDIUu/U6uZ5e+cMe3CVrE0Ocip6TM6dQf5g56FKQI4 DvlYoB08loN0rS/suHZwjTc1O8/VvAY= -----END CERTIFICATE-----Generated at Sat Aug 9 10:35:22 2025 by rpki-client