$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/caca24ff-244e-3f40-b4e1-8a4214624d03.roa File: caca24ff-244e-3f40-b4e1-8a4214624d03.roa (raw, json) Hash identifier: wu16iHJMOBHAR0+Z9ZKQtEGtmUdmIKu7twpff1eHhpI= Subject key identifier: C6:7C:D8:EF:3A:F0:D1:D3:16:18:C3:D7:B3:5E:66:F5:CC:41:3B:33 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A7FE0A2B327BB54F35F062AE8 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/caca24ff-244e-3f40-b4e1-8a4214624d03.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 6167 IP address blocks: 174.216.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:a2:b3:27:bb:54:f3:5f:06:2a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=51ec0204-a5bf-41dc-a70d-bec383128508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a8:9c:88:c4:f8:4d:cd:2f:88:6f:6b:e2:3c: f2:fa:2b:fe:ec:99:84:79:5d:aa:0a:aa:9f:2f:f9: 4d:0b:77:94:23:ef:b4:7a:3b:19:6d:dc:22:c8:d8: e8:c6:2b:d8:17:c7:54:ef:b2:09:01:9d:7f:87:1d: 08:f7:cf:85:e0:38:90:b5:9b:43:53:6b:e9:7c:38: 9b:db:79:14:67:ec:ce:2b:bf:1e:5d:4c:b3:70:c5: cd:2a:f5:53:fa:a0:68:89:ce:24:b8:0d:fc:c8:20: 51:d5:9a:c9:e8:e4:cd:31:52:2d:f2:67:94:b8:e0: 4a:0e:60:59:61:40:07:2c:b0:e5:4d:19:35:87:d9: 84:e9:fd:6d:31:e3:55:76:8d:f7:fa:10:d8:fd:a1: 8e:a3:ff:fe:36:66:bf:cd:4f:0b:da:80:c3:74:2e: 9a:bb:12:12:4e:9f:1e:43:2b:1a:fd:77:e1:9b:b9: 3b:b3:55:c9:37:37:cc:70:61:a8:c0:ee:5d:f3:28: b3:88:1a:72:19:db:a0:90:11:7f:2c:1f:d5:00:58: 05:1b:f7:6b:3b:d4:72:16:6e:95:7d:74:a1:a1:49: f4:71:d8:3e:7e:4c:ab:1f:81:7a:8c:77:19:d7:98: 74:78:95:1b:06:81:9b:0c:4b:59:9f:c3:5e:5c:90: 36:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:7C:D8:EF:3A:F0:D1:D3:16:18:C3:D7:B3:5E:66:F5:CC:41:3B:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/caca24ff-244e-3f40-b4e1-8a4214624d03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.216.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:c6:4a:57:36:b5:c3:52:a7:5c:6b:39:11:da:1e:b8:a8:65: f8:e0:af:4f:7b:2c:66:ff:13:f5:36:3e:b7:6d:d2:ca:1a:46: 32:d9:8c:0a:09:00:4a:02:75:dd:b9:63:ee:29:d5:ff:fb:10: c4:04:88:f5:aa:d9:09:b5:ed:23:14:d6:0a:03:2a:2e:66:c7: d6:00:ca:2b:ae:3d:e8:9e:32:89:e9:1e:f4:95:f5:de:a8:a5: f5:49:5a:e8:96:b2:64:93:eb:b1:f9:57:18:20:6e:39:1e:64: d5:1e:47:84:f0:5a:72:61:d3:ad:57:ac:81:3b:ff:6b:08:3a: 06:52:cc:7f:eb:78:47:f7:ca:aa:58:fc:f8:d8:35:a9:b9:2c: c3:98:09:4b:cb:55:06:b0:a7:45:62:47:6a:bb:b0:40:4b:01: fa:40:62:d7:aa:66:6b:c5:7c:70:c2:70:c3:c7:66:f9:46:bd: 24:6d:ac:9a:34:ed:35:07:a8:49:6a:40:bb:74:de:69:89:4a: 3c:86:bf:d1:20:22:34:55:a9:be:49:22:9b:1a:13:5d:c7:b6: 89:34:a8:e5:22:b0:73:d3:66:2d:4a:6e:33:77:af:53:7e:f7: 17:a0:2f:4e:f8:16:46:2c:d2:7a:f9:25:26:a4:c4:c3:e7:4c: ca:21:c6:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4KKzJ7tU818GKugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk NTFlYzAyMDQtYTViZi00MWRjLWE3MGQtYmVjMzgzMTI4NTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6iciMT4Tc0viG9r4jzy+iv+7JmEeV2qCqqf L/lNC3eUI++0ejsZbdwiyNjoxivYF8dU77IJAZ1/hx0I98+F4DiQtZtDU2vpfDib 23kUZ+zOK78eXUyzcMXNKvVT+qBoic4kuA38yCBR1ZrJ6OTNMVIt8meUuOBKDmBZ YUAHLLDlTRk1h9mE6f1tMeNVdo33+hDY/aGOo//+Nma/zU8L2oDDdC6auxISTp8e Qysa/Xfhm7k7s1XJNzfMcGGowO5d8yiziBpyGdugkBF/LB/VAFgFG/drO9RyFm6V fXShoUn0cdg+fkyrH4F6jHcZ15h0eJUbBoGbDEtZn8NeXJA28wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZ82O868NHTFhjD17NeZvXMQTszMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2FjYTI0ZmYtMjQ0ZS0z ZjQwLWI0ZTEtOGE0MjE0NjI0ZDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrthYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7GSlc2tcNSp1xrORHaHrioZfjgr097LGb/E/U2Prdt0soaRjLZjAoJ AEoCdd25Y+4p1f/7EMQEiPWq2Qm17SMU1goDKi5mx9YAyiuuPeieMonpHvSV9d6o pfVJWuiWsmST67H5VxggbjkeZNUeR4TwWnJh061XrIE7/2sIOgZSzH/reEf3yqpY /PjYNam5LMOYCUvLVQawp0ViR2q7sEBLAfpAYteqZmvFfHDCcMPHZvlGvSRtrJo0 7TUHqElqQLt03mmJSjyGv9EgIjRVqb5JIpsaE13Htok0qOUisHPTZi1KbjN3r1N+ 9xegL074FkYs0nr5JSakxMPnTMohxmc= -----END CERTIFICATE-----Generated at Wed Aug 6 13:19:09 2025 by rpki-client