$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5a41d72-de62-31af-a776-d58ec1ef355b.roa File: d5a41d72-de62-31af-a776-d58ec1ef355b.roa (raw, json) Hash identifier: hDu2MP+khKSVUfe9r1yjOPeeINTiuh6NLdkk9Atssl8= Subject key identifier: FA:97:CE:98:66:FF:4D:D2:FA:8B:B4:F9:23:CC:8F:72:09:23:75:F7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AB7B631E26E3D85EFE4053380 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5a41d72-de62-31af-a776-d58ec1ef355b.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 6167 IP address blocks: 174.209.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:31:e2:6e:3d:85:ef:e4:05:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=8c58105d-7d54-42bf-9ccd-d4f14219827d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:26:0c:e6:88:23:c4:6b:45:d3:7c:db:ff:c1: 9b:7c:c7:bc:e6:2c:14:2f:bc:dc:82:44:2f:b8:57: 05:be:24:56:52:8e:5f:a0:b4:1a:24:e0:96:82:83: 44:20:1a:b8:91:fa:dd:1b:df:ce:9c:0b:0d:3b:b4: 0c:bc:bd:85:48:25:57:ba:4b:92:e1:d5:a9:5b:ca: c1:3a:aa:b3:bc:08:eb:ec:a3:9f:59:33:c1:66:bd: 9b:5c:a5:8d:ed:64:8f:bb:b4:d7:c6:bc:71:0d:80: 96:73:86:1f:17:2c:fe:fb:ab:b9:44:36:b6:ac:4d: 6e:95:38:c5:3a:50:29:ff:9e:20:53:ba:e1:cd:2e: 8d:a5:53:fc:19:a1:b4:70:d7:eb:52:53:06:5e:9e: 81:0b:b3:a3:2e:1d:a3:43:d6:33:4e:53:b7:6b:bc: d5:99:b9:a2:10:3e:77:bc:d7:7b:49:8c:e8:e4:33: cb:42:ae:fa:2c:ad:67:3c:d3:02:ac:91:56:18:3c: 72:7f:79:48:7a:98:51:22:99:06:da:f2:21:77:96: 34:76:93:d0:aa:1b:11:0d:28:4d:77:58:62:1e:06: 3e:cd:7e:fa:3c:f9:98:43:ec:a8:f8:1b:39:f7:db: 6b:d9:d0:71:64:ae:73:df:4d:94:bd:80:d3:6e:3c: b4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:97:CE:98:66:FF:4D:D2:FA:8B:B4:F9:23:CC:8F:72:09:23:75:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5a41d72-de62-31af-a776-d58ec1ef355b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.209.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:50:03:af:f4:a4:5b:62:6d:2c:48:1f:4f:2a:fb:73:be:dc: e0:80:1c:32:16:fc:1c:7b:40:02:4f:30:56:3e:13:41:ca:89: 3d:1e:82:e0:06:09:a9:db:21:8b:31:9b:99:10:d4:b5:cb:ea: be:93:ea:60:f2:d8:17:a6:18:74:fc:c4:5c:8e:6b:f0:ab:f0: 1a:87:99:1f:25:11:12:ac:1f:61:7d:8a:fe:68:42:12:0d:3c: 1f:73:06:20:a1:03:16:77:10:2f:7f:12:46:5e:b6:4e:b8:ee: 04:16:75:03:bf:11:4a:2a:cc:ee:83:5f:d5:19:d7:d1:cf:3a: 5d:44:f6:7a:be:d5:10:80:ca:36:14:72:f4:2b:8a:6b:9c:cb: 4b:2f:16:ea:0d:89:05:0b:e0:2b:54:06:24:39:da:e9:bb:c5: 91:31:73:96:e5:a4:98:b6:58:5d:54:58:20:14:bf:35:fd:d5: c1:d5:8a:f9:b8:b6:98:fe:7a:39:ac:03:80:cc:b6:f1:99:50: 25:06:7d:5f:71:ef:5a:d7:14:3f:3a:c8:3d:9a:47:92:c2:f3: 04:35:e1:26:80:1e:82:ee:cb:39:f4:9d:e0:55:8e:99:d6:17: 9a:c4:d5:78:98:3d:99:23:13:6c:50:f8:a5:75:5e:4d:d2:1e: 57:16:5d:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq3tjHibj2F7+QFM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk OGM1ODEwNWQtN2Q1NC00MmJmLTljY2QtZDRmMTQyMTk4MjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiYM5ogjxGtF03zb/8GbfMe85iwUL7zcgkQv uFcFviRWUo5foLQaJOCWgoNEIBq4kfrdG9/OnAsNO7QMvL2FSCVXukuS4dWpW8rB OqqzvAjr7KOfWTPBZr2bXKWN7WSPu7TXxrxxDYCWc4YfFyz++6u5RDa2rE1ulTjF OlAp/54gU7rhzS6NpVP8GaG0cNfrUlMGXp6BC7OjLh2jQ9YzTlO3a7zVmbmiED53 vNd7SYzo5DPLQq76LK1nPNMCrJFWGDxyf3lIephRIpkG2vIhd5Y0dpPQqhsRDShN d1hiHgY+zX76PPmYQ+yo+Bs599tr2dBxZK5z302UvYDTbjy0nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqXzphm/03S+ou0+SPMj3IJI3X3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDVhNDFkNzItZGU2Mi0z MWFmLWE3NzYtZDU4ZWMxZWYzNTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK5QA6/0pFtibSxIH08q+3O+3OCAHDIW/Bx7QAJPMFY+E0HKiT0eguAG CanbIYsxm5kQ1LXL6r6T6mDy2BemGHT8xFyOa/Cr8BqHmR8lERKsH2F9iv5oQhIN PB9zBiChAxZ3EC9/EkZetk647gQWdQO/EUoqzO6DX9UZ19HPOl1E9nq+1RCAyjYU cvQrimucy0svFuoNiQUL4CtUBiQ52um7xZExc5blpJi2WF1UWCAUvzX91cHVivm4 tpj+ejmsA4DMtvGZUCUGfV9x71rXFD86yD2aR5LC8wQ14SaAHoLuyzn0neBVjpnW F5rE1XiYPZkjE2xQ+KV1Xk3SHlcWXT4= -----END CERTIFICATE-----Generated at Fri Aug 8 10:20:25 2025 by rpki-client