$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2174cb4-5bc9-34d2-a3a6-78ebafcd56ea.roa File: d2174cb4-5bc9-34d2-a3a6-78ebafcd56ea.roa (raw, json) Hash identifier: e8pEVmLZ5Jf6kpD/lf7gtFY2h+z+4Yys0hGl7qxamHY= Subject key identifier: 6A:DE:C4:0B:EF:77:B6:0F:2B:17:18:9F:9B:98:96:48:97:39:E1:59 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AA6F631F0C29D5BD8CD871CC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2174cb4-5bc9-34d2-a3a6-78ebafcd56ea.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 6167 IP address blocks: 174.231.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:31:f0:c2:9d:5b:d8:cd:87:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=11681a52-a38a-4c13-9fa6-00fa5cdc8c69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:36:1d:e4:90:c8:65:52:ab:63:95:a5:90:85: fa:26:6b:01:bf:74:74:28:1b:37:60:b4:25:b5:04: 84:ca:ea:98:68:a5:62:ca:f0:9c:4d:2b:22:cd:bf: 9e:15:fb:7a:03:d4:5a:25:29:4d:1b:60:8d:bc:c0: 0b:d0:25:a3:10:be:1f:5f:91:12:62:d9:7a:2b:07: 4a:89:3d:bf:46:64:de:d7:73:34:65:b3:2d:68:37: 27:87:5b:c2:13:c9:4b:7a:8a:7a:dc:3a:f5:f3:9b: 53:a8:f9:b8:c2:97:14:aa:80:70:62:4c:86:29:7b: 38:b9:4b:d6:20:bd:4b:01:56:b7:4b:1c:12:fe:a4: bb:f2:23:59:81:26:94:35:22:0c:83:f0:06:48:79: a0:de:8e:db:3e:40:f1:d9:28:59:ab:ba:c3:fb:b9: b8:a5:8c:03:3d:40:35:dd:81:ae:38:0f:98:97:09: e4:90:ca:e5:02:23:cc:4a:05:15:14:b4:af:b4:21: 75:a5:85:45:8a:dd:1c:2c:c8:74:2c:47:15:07:7a: 03:cb:05:9d:01:03:f4:34:51:8e:19:19:f4:ad:a1: 43:88:21:bd:b6:99:a7:cb:61:05:5c:88:2d:db:66: 9f:0c:ba:78:df:e4:84:89:90:e7:83:ba:3f:b8:3a: de:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:DE:C4:0B:EF:77:B6:0F:2B:17:18:9F:9B:98:96:48:97:39:E1:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2174cb4-5bc9-34d2-a3a6-78ebafcd56ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.231.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:31:ce:99:de:03:a7:4d:19:1a:bd:d4:b7:fe:32:20:89:39: e6:04:f0:1a:b0:29:91:2e:70:6a:dc:1f:9d:83:61:6e:33:29: d3:ce:44:d0:2e:37:f8:4b:2e:4e:00:a0:98:70:70:a9:09:31: a5:59:6c:94:8b:c1:bf:37:c5:b0:44:c8:05:cb:80:44:49:21: 34:37:db:fd:27:74:85:56:6a:0a:ea:63:c4:a1:81:47:92:d6: a4:a8:c6:7e:93:7c:c4:21:55:9a:48:98:d7:d5:0d:3b:94:10: 58:1e:cc:64:62:45:3a:1a:f0:24:bc:d9:3f:44:16:b1:f6:9c: d3:d8:4c:c7:8a:b8:7e:f8:3b:c0:ad:98:df:a4:ca:a4:c6:c3: 8b:df:85:18:4e:14:2c:a0:30:6a:87:e1:e7:76:84:88:01:53: 91:6d:35:97:af:de:56:40:48:73:f9:0b:b6:0c:a2:fa:8c:4b: 4b:a8:e7:9a:73:a8:dc:00:00:f2:48:fb:36:d9:80:3c:04:a6: d4:62:7b:38:df:53:23:d0:6c:3e:2a:1a:76:20:24:16:23:24: 3f:eb:c2:0f:f4:97:cc:98:54:5a:b8:89:f0:e0:26:36:d9:bd: 87:ee:e1:57:36:aa:78:be:e6:f1:6a:77:57:3a:08:03:9f:5d: 7b:82:4c:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9jHwwp1b2M2HHMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk MTE2ODFhNTItYTM4YS00YzEzLTlmYTYtMDBmYTVjZGM4YzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDYd5JDIZVKrY5WlkIX6JmsBv3R0KBs3YLQl tQSEyuqYaKViyvCcTSsizb+eFft6A9RaJSlNG2CNvMAL0CWjEL4fX5ESYtl6KwdK iT2/RmTe13M0ZbMtaDcnh1vCE8lLeop63Dr185tTqPm4wpcUqoBwYkyGKXs4uUvW IL1LAVa3SxwS/qS78iNZgSaUNSIMg/AGSHmg3o7bPkDx2ShZq7rD+7m4pYwDPUA1 3YGuOA+YlwnkkMrlAiPMSgUVFLSvtCF1pYVFit0cLMh0LEcVB3oDywWdAQP0NFGO GRn0raFDiCG9tpmny2EFXIgt22afDLp43+SEiZDng7o/uDreKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrexAvvd7YPKxcYn5uYlkiXOeFZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDIxNzRjYjQtNWJjOS0z NGQyLWEzYTYtNzhlYmFmY2Q1NmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBruf4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADExzpneA6dNGRq91Lf+MiCJOeYE8BqwKZEucGrcH52DYW4zKdPORNAu N/hLLk4AoJhwcKkJMaVZbJSLwb83xbBEyAXLgERJITQ32/0ndIVWagrqY8ShgUeS 1qSoxn6TfMQhVZpImNfVDTuUEFgezGRiRToa8CS82T9EFrH2nNPYTMeKuH74O8Ct mN+kyqTGw4vfhRhOFCygMGqH4ed2hIgBU5FtNZev3lZASHP5C7YMovqMS0uo55pz qNwAAPJI+zbZgDwEptRiezjfUyPQbD4qGnYgJBYjJD/rwg/0l8yYVFq4ifDgJjbZ vYfu4Vc2qni+5vFqd1c6CAOfXXuCTHE= -----END CERTIFICATE-----Generated at Wed Aug 6 12:39:02 2025 by rpki-client