$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0f3eac0-d4f4-33d5-8658-eb62ed60b007.roa File: f0f3eac0-d4f4-33d5-8658-eb62ed60b007.roa (raw, json) Hash identifier: oA3e4MxZmoTqZAJW8CSeA9Vn+N5Q9+Hn1Qlwp1pf1Wc= Subject key identifier: 51:A7:F7:87:4F:75:81:23:66:06:E8:B1:0F:7E:F5:96:27:5F:0B:D1 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A7FE0A0B7C6A623EA8B996900 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0f3eac0-d4f4-33d5-8658-eb62ed60b007.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 6167 IP address blocks: 174.214.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:a0:b7:c6:a6:23:ea:8b:99:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=cecc2b88-1ee5-453e-ab7a-78207258897f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b6:ee:3e:12:b6:a0:da:50:d6:36:d1:46:96: 86:79:6e:0a:cc:fa:59:78:06:8f:77:ee:ac:9b:c3: 60:ce:7b:2a:2b:04:a3:96:cd:f7:13:44:cc:78:57: b3:0b:02:39:8d:cc:75:6d:a0:92:af:59:de:5b:68: 27:ec:33:65:bf:df:e0:66:7f:67:4d:85:44:8f:bd: 3e:83:71:40:6c:18:37:e0:c2:89:ac:4a:1d:bb:b3: d6:9e:b5:de:11:de:0e:ec:cc:58:51:1b:e8:6d:0c: 61:5e:ff:41:98:f8:31:bb:90:92:6a:5b:25:ef:58: 97:7d:d4:43:db:c4:ae:fa:41:5f:24:6f:db:cf:ce: 97:8f:90:0b:df:00:88:86:6c:81:52:3c:c4:cb:23: 57:fb:92:f5:82:c9:e6:fe:e9:77:aa:e2:02:e4:00: b9:a4:32:6e:3d:48:e7:a5:9b:26:73:8b:c5:e5:97: 8a:4e:4c:94:86:1c:b5:a7:38:5f:45:1d:34:c4:63: 17:41:6f:7a:69:f6:64:08:f8:43:4f:ae:16:16:37: f2:af:c5:1d:c3:13:04:30:b1:0f:cb:08:ea:41:47: 94:b2:52:d3:51:ef:99:45:3b:95:1b:a0:af:d5:c9: f3:b2:cc:b0:fc:cb:15:ed:05:bd:3a:02:2f:f7:f9: a1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A7:F7:87:4F:75:81:23:66:06:E8:B1:0F:7E:F5:96:27:5F:0B:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f0f3eac0-d4f4-33d5-8658-eb62ed60b007.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.214.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:32:a0:33:9a:e3:7e:a8:10:f8:74:cb:3d:27:cc:db:f4:86: 35:2f:5a:57:c4:ea:c0:5e:f1:ec:4c:73:16:6d:5b:96:f2:33: d0:3e:8d:c7:66:d7:4b:7e:8e:d0:3d:14:ad:2d:19:bc:e7:b1: d1:c4:a0:13:43:48:a5:57:15:d6:be:21:d3:1a:80:e1:3c:6c: c3:02:e8:12:0f:da:c6:59:3a:1c:e3:74:9e:b8:28:78:1e:f1: 31:65:1d:6c:68:c7:a7:03:4d:0d:48:ee:c4:df:8e:f0:8c:58: 14:2a:9f:4b:4e:79:fd:49:00:4a:8e:0e:c9:45:f3:82:d8:d5: 26:90:e5:62:f9:47:99:4a:01:bf:27:fa:46:34:80:11:a4:ac: 10:e8:57:7e:ad:8b:f5:d5:fa:ef:02:df:b5:2e:61:7c:1e:c8: 7b:fb:f2:ae:87:f9:a3:a3:f1:a0:83:47:76:e3:5d:84:db:ef: 2b:32:0d:15:08:19:44:a0:13:a8:08:21:21:48:63:37:40:82: 88:bd:11:52:58:bf:b2:07:43:53:03:60:83:7d:db:19:5b:00: 70:ad:a5:51:aa:d8:c9:56:53:50:b7:80:d9:79:f9:13:2c:0f: 29:60:c4:31:67:ff:9d:26:29:b2:35:62:2b:a1:be:fc:53:5f: 57:bc:7a:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4KC3xqYj6ouZaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk Y2VjYzJiODgtMWVlNS00NTNlLWFiN2EtNzgyMDcyNTg4OTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbbuPhK2oNpQ1jbRRpaGeW4KzPpZeAaPd+6s m8NgznsqKwSjls33E0TMeFezCwI5jcx1baCSr1neW2gn7DNlv9/gZn9nTYVEj70+ g3FAbBg34MKJrEodu7PWnrXeEd4O7MxYURvobQxhXv9BmPgxu5CSalsl71iXfdRD 28Su+kFfJG/bz86Xj5AL3wCIhmyBUjzEyyNX+5L1gsnm/ul3quIC5AC5pDJuPUjn pZsmc4vF5ZeKTkyUhhy1pzhfRR00xGMXQW96afZkCPhDT64WFjfyr8UdwxMEMLEP ywjqQUeUslLTUe+ZRTuVG6Cv1cnzssyw/MsV7QW9OgIv9/mhPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGn94dPdYEjZgbosQ9+9ZYnXwvRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjBmM2VhYzAtZDRmNC0z M2Q1LTg2NTgtZWI2MmVkNjBiMDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrtawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsyoDOa436oEPh0yz0nzNv0hjUvWlfE6sBe8exMcxZtW5byM9A+jcdm 10t+jtA9FK0tGbznsdHEoBNDSKVXFda+IdMagOE8bMMC6BIP2sZZOhzjdJ64KHge 8TFlHWxox6cDTQ1I7sTfjvCMWBQqn0tOef1JAEqODslF84LY1SaQ5WL5R5lKAb8n +kY0gBGkrBDoV36ti/XV+u8C37UuYXweyHv78q6H+aOj8aCDR3bjXYTb7ysyDRUI GUSgE6gIISFIYzdAgoi9EVJYv7IHQ1MDYIN92xlbAHCtpVGq2MlWU1C3gNl5+RMs DylgxDFn/50mKbI1YiuhvvxTX1e8eus= -----END CERTIFICATE-----Generated at Wed Aug 6 13:07:49 2025 by rpki-client