$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3009c64-2fab-3ff2-b72b-d41eaf495385.roa File: d3009c64-2fab-3ff2-b72b-d41eaf495385.roa (raw, json) Hash identifier: nRIM5CGo+m8Edknw62BbpRFmtS9GDzbWSDy3ipmCkS8= Subject key identifier: E4:FA:A6:23:9B:49:93:32:5D:33:6A:88:9B:40:E7:69:F8:66:59:B0 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AA6F64586A920A46F550F1F00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3009c64-2fab-3ff2-b72b-d41eaf495385.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 6167 IP address blocks: 174.249.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:45:86:a9:20:a4:6f:55:0f:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=a5c4717a-d262-4fe2-b818-51714d2a6523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:20:42:47:c5:08:b2:63:93:5e:b5:5c:f6:c4: 2e:4f:05:c4:d4:c6:31:f7:0e:15:af:32:6c:e5:1b: a9:df:28:89:cf:de:f7:ad:a6:9f:39:41:e9:30:9d: ad:73:8e:4b:c8:cd:87:d4:e3:99:c5:d7:ef:04:7e: 7d:3f:23:7f:5e:a1:a0:91:4b:3e:1f:c8:6c:5b:a7: 2a:56:5b:a4:e1:c3:d7:86:18:9f:7c:1e:cb:95:c4: 6c:46:cd:89:ae:34:c1:6f:fa:aa:45:b9:9b:6f:f1: cc:4c:38:60:17:12:a7:8c:88:86:30:9f:41:97:65: 03:b0:64:14:49:85:da:96:2f:9a:e5:b7:f6:df:b1: 41:fc:f0:77:68:6d:2d:bb:68:5f:6e:6a:dc:3e:67: 30:8f:05:2d:01:55:7d:a8:72:97:31:9f:53:19:0e: 00:cb:5e:75:f3:6f:48:f0:1d:e8:d6:88:61:ea:cd: 0e:8c:b4:b8:69:62:95:ca:f3:df:40:cb:d9:18:2f: 8a:bb:be:17:7c:a1:64:e9:3b:bc:8c:06:46:45:28: 94:9e:9d:6c:15:ae:6f:21:90:85:12:d3:5c:62:4f: 42:ef:6f:7b:10:18:8c:2d:38:2f:6e:21:38:28:43: b1:0b:39:e7:5b:08:9c:c4:c7:3f:78:37:2c:e9:a5: 8d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:FA:A6:23:9B:49:93:32:5D:33:6A:88:9B:40:E7:69:F8:66:59:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3009c64-2fab-3ff2-b72b-d41eaf495385.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.249.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:00:98:2e:34:b1:50:14:04:6e:dd:46:cc:c8:2d:b1:70:f5: cc:d8:fd:6c:f9:e7:e4:b9:44:24:5b:4e:ab:2b:7f:76:6a:29: 89:d1:c1:c5:f0:20:4e:5d:da:3a:49:0b:74:92:f6:3c:8b:66: f7:76:a2:88:d8:a7:37:a1:ae:3b:d2:82:3c:ea:b7:47:cc:61: ed:b4:8f:17:ba:d8:9c:77:00:19:4f:f0:5c:02:72:62:7b:37: 6a:60:55:23:77:68:ff:99:04:b3:21:91:8f:ee:de:ce:30:35: 62:f1:c0:16:04:71:9b:26:88:a0:25:7e:cc:3b:e5:21:82:37: 2b:a6:21:de:25:fa:f3:e2:c3:d8:df:c0:97:ff:ce:c4:a6:43: aa:34:a5:62:af:09:0f:e8:ca:d6:6c:01:31:30:75:35:93:1f: 6f:7d:73:cc:3c:b2:67:a8:40:4a:cb:58:10:59:ca:12:96:36: b7:77:07:12:bf:22:73:56:26:ab:54:93:bb:4c:b9:b2:3e:1e: d1:22:42:76:ed:e8:37:49:01:1e:83:28:79:d5:39:8a:f6:4b: 58:90:9d:34:8f:b5:ba:5d:c1:36:99:4c:bb:be:c0:91:8c:4b: 15:23:1f:3a:a3:ec:2a:5b:77:d7:33:c9:f5:de:63:21:29:a8: f8:5e:8f:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9kWGqSCkb1UPHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk YTVjNDcxN2EtZDI2Mi00ZmUyLWI4MTgtNTE3MTRkMmE2NTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviBCR8UIsmOTXrVc9sQuTwXE1MYx9w4VrzJs 5Rup3yiJz973raafOUHpMJ2tc45LyM2H1OOZxdfvBH59PyN/XqGgkUs+H8hsW6cq Vluk4cPXhhiffB7LlcRsRs2JrjTBb/qqRbmbb/HMTDhgFxKnjIiGMJ9Bl2UDsGQU SYXali+a5bf237FB/PB3aG0tu2hfbmrcPmcwjwUtAVV9qHKXMZ9TGQ4Ay151829I 8B3o1ohh6s0OjLS4aWKVyvPfQMvZGC+Ku74XfKFk6Tu8jAZGRSiUnp1sFa5vIZCF EtNcYk9C7297EBiMLTgvbiE4KEOxCznnWwicxMc/eDcs6aWNNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOT6piObSZMyXTNqiJtA52n4ZlmwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDMwMDljNjQtMmZhYi0z ZmYyLWI3MmItZDQxZWFmNDk1Mzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrvk4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoAmC40sVAUBG7dRszILbFw9czY/Wz55+S5RCRbTqsrf3ZqKYnRwcXw IE5d2jpJC3SS9jyLZvd2oojYpzehrjvSgjzqt0fMYe20jxe62Jx3ABlP8FwCcmJ7 N2pgVSN3aP+ZBLMhkY/u3s4wNWLxwBYEcZsmiKAlfsw75SGCNyumId4l+vPiw9jf wJf/zsSmQ6o0pWKvCQ/oytZsATEwdTWTH299c8w8smeoQErLWBBZyhKWNrd3BxK/ InNWJqtUk7tMubI+HtEiQnbt6DdJAR6DKHnVOYr2S1iQnTSPtbpdwTaZTLu+wJGM SxUjHzqj7Cpbd9czyfXeYyEpqPhej+A= -----END CERTIFICATE-----Generated at Thu Aug 7 02:04:06 2025 by rpki-client