$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd5e88eb-c85e-35b1-9f06-0a8428c894fc.roa File: bd5e88eb-c85e-35b1-9f06-0a8428c894fc.roa (raw, json) Hash identifier: Z+0exfvgRNhnINiKqdOO4bEBfMCY/dtQW5fki+TO4ZM= Subject key identifier: 3C:0F:D1:60:5A:41:B5:A1:A9:C5:43:BC:CD:A8:CD:0B:F4:87:60:99 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A7FE0AEFA4BE5E16F81AA6E00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd5e88eb-c85e-35b1-9f06-0a8428c894fc.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 6167 IP address blocks: 174.212.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:ae:fa:4b:e5:e1:6f:81:aa:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=0eb24790-bce5-44f7-acea-07c3837040b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3a:fe:66:a4:3c:da:ad:08:0a:37:0b:9a:2d: 85:72:ca:5e:5b:f3:57:a8:04:26:fe:38:5b:bf:d0: 85:a5:92:90:63:72:82:2a:7a:c0:01:bb:a3:6a:7b: e2:b5:e4:af:4e:05:81:a7:46:51:36:bf:68:14:cb: 99:58:96:79:59:78:63:8a:58:62:8f:7c:51:1f:7f: 86:5a:9d:96:54:2f:b7:bb:dd:79:60:cd:e9:1b:cf: 20:0b:7d:17:6a:04:0c:c3:db:ad:ca:ce:73:33:2d: 0a:b0:bb:d0:b0:94:5e:58:5d:ea:5f:a5:87:43:c0: a3:6e:3d:c8:6b:70:15:cf:3a:0c:d5:22:e9:d2:b2: 04:08:a2:19:09:5d:8c:60:b5:e7:5c:ec:7c:6d:9a: b9:3a:30:f8:17:94:5e:2a:46:3f:4d:ab:00:66:b1: 9b:15:a9:56:6d:34:09:c9:79:f3:17:5b:48:7d:a5: 97:65:23:79:88:ec:73:51:fa:04:d3:a0:ab:13:c2: cd:f4:88:f1:39:57:a4:aa:ce:99:62:6a:52:7a:20: d3:4f:31:f2:bd:f9:22:24:b1:21:f9:6b:96:2c:5c: 4d:93:38:c7:a7:1a:e6:e8:fd:cf:a7:fb:2c:d7:f9: 5f:9f:3e:95:a9:93:0c:4e:fe:fe:e3:51:4e:77:cb: 3c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:0F:D1:60:5A:41:B5:A1:A9:C5:43:BC:CD:A8:CD:0B:F4:87:60:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd5e88eb-c85e-35b1-9f06-0a8428c894fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.212.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:5e:db:2e:f0:29:10:fa:a9:87:43:d2:df:c9:89:bf:f3:43: 12:42:84:6b:2e:9d:92:e3:94:5c:6c:36:7d:49:6d:a5:26:a3: e0:de:9c:d3:92:47:e0:91:66:b5:30:66:04:77:64:2d:45:a1: d5:a5:46:25:2d:52:dc:9a:73:bc:0f:ed:8e:49:81:27:02:fc: 13:55:cd:28:cd:34:aa:f1:ff:e9:c0:48:8d:88:97:d1:04:16: f5:98:14:ab:04:82:07:c9:02:54:f1:a6:9f:8e:02:bb:10:63: f6:e7:fc:de:d6:8d:3f:3e:cb:42:7d:23:04:4a:18:69:c9:f0: 2c:3b:55:00:2c:7a:d1:1c:43:36:66:cf:80:e1:5a:a9:11:bf: 18:9c:0c:57:8e:0f:73:e9:b7:94:13:dd:f5:66:a8:1e:04:66: fd:df:42:83:78:39:e7:7f:04:0c:01:34:b5:35:0d:08:3d:b8: aa:f7:80:a5:31:be:61:69:7b:d4:f0:d1:92:a5:eb:c3:b9:17: e8:6f:cf:dd:18:67:cc:96:b2:21:46:9b:ce:ee:46:f1:06:be: 99:44:ad:bd:0f:85:98:ac:06:9d:7b:01:bc:fe:9d:b6:7f:8e: 08:f5:cc:47:a2:b5:2f:6c:2b:67:56:d2:f4:53:c4:47:85:e6: 72:75:9e:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4K76S+Xhb4GqbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk MGViMjQ3OTAtYmNlNS00NGY3LWFjZWEtMDdjMzgzNzA0MGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjr+ZqQ82q0ICjcLmi2FcspeW/NXqAQm/jhb v9CFpZKQY3KCKnrAAbujanviteSvTgWBp0ZRNr9oFMuZWJZ5WXhjilhij3xRH3+G Wp2WVC+3u915YM3pG88gC30XagQMw9utys5zMy0KsLvQsJReWF3qX6WHQ8Cjbj3I a3AVzzoM1SLp0rIECKIZCV2MYLXnXOx8bZq5OjD4F5ReKkY/TasAZrGbFalWbTQJ yXnzF1tIfaWXZSN5iOxzUfoE06CrE8LN9IjxOVekqs6ZYmpSeiDTTzHyvfkiJLEh +WuWLFxNkzjHpxrm6P3Pp/ss1/lfnz6VqZMMTv7+41FOd8s8bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwP0WBaQbWhqcVDvM2ozQv0h2CZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmQ1ZTg4ZWItYzg1ZS0z NWIxLTlmMDYtMGE4NDI4Yzg5NGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrtT4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFe2y7wKRD6qYdD0t/Jib/zQxJChGsunZLjlFxsNn1JbaUmo+DenNOS R+CRZrUwZgR3ZC1FodWlRiUtUtyac7wP7Y5JgScC/BNVzSjNNKrx/+nASI2Il9EE FvWYFKsEggfJAlTxpp+OArsQY/bn/N7WjT8+y0J9IwRKGGnJ8Cw7VQAsetEcQzZm z4DhWqkRvxicDFeOD3Ppt5QT3fVmqB4EZv3fQoN4Oed/BAwBNLU1DQg9uKr3gKUx vmFpe9Tw0ZKl68O5F+hvz90YZ8yWsiFGm87uRvEGvplErb0PhZisBp17Abz+nbZ/ jgj1zEeitS9sK2dW0vRTxEeF5nJ1njA= -----END CERTIFICATE-----Generated at Wed Aug 6 13:02:39 2025 by rpki-client