$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f58f675a-938f-3f6d-abeb-fdacf7c41fff.roa File: f58f675a-938f-3f6d-abeb-fdacf7c41fff.roa (raw, json) Hash identifier: Wc84TCCrohhL++kulIGjfoA4BCGV2XaHLum1C8338yE= Subject key identifier: 56:40:97:48:4B:BC:02:3D:2A:E1:56:FC:D0:DF:4D:B4:BB:32:31:1E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A7FE09A8E46819259581E8D80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f58f675a-938f-3f6d-abeb-fdacf7c41fff.roa Signing time: Sun 13 Jul 2025 01:00:50 +0000 ROA not before: Sun 13 Jul 2025 01:00:50 +0000 ROA not after: Sat 11 Oct 2025 01:00:50 +0000 asID: 6167 IP address blocks: 174.201.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7f:e0:9a:8e:46:81:92:59:58:1e:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 13 01:00:50 2025 GMT Not After : Oct 11 01:00:50 2025 GMT Subject: CN=f336701f-1384-410d-9678-effc8702d98f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3a:ab:f7:4f:ff:85:fb:58:f2:fc:85:d1:fd: 8b:08:6b:01:9b:d8:46:ec:c4:38:1f:1d:7a:af:64: 86:04:13:48:14:48:ca:de:28:2e:cb:f3:24:2d:9c: 57:8d:64:ee:b9:be:39:2b:56:32:2f:eb:8d:91:e8: e1:d9:81:f4:69:fb:21:9a:b0:f0:d2:9b:d3:a3:e5: 8b:99:ce:dc:55:15:27:17:14:c2:6a:37:ed:20:4e: 35:1f:da:5b:06:97:59:f5:3a:be:ef:99:70:91:17: 17:26:7d:83:a7:95:88:4f:66:47:49:7b:2f:27:1f: 3d:e1:eb:cf:2f:2c:c6:a7:66:06:85:ea:de:f6:44: 72:0c:7a:95:33:8d:3a:60:02:ad:d4:ff:3e:67:bc: 5b:0f:91:0c:76:0a:bd:41:f5:be:00:ed:f4:4c:00: 7d:f0:9a:b4:7e:1d:b3:8e:4b:8a:f8:b2:40:4f:0e: 7e:42:04:87:29:67:0d:e5:51:4a:ce:20:ff:f6:dc: ec:96:3b:81:4e:ec:17:10:62:51:e6:41:0c:6a:25: 14:05:cd:44:c1:bb:c7:71:6b:b2:76:eb:be:13:66: d9:3a:6c:1a:52:b5:1f:2a:eb:0d:90:3a:14:0c:d0: dd:a3:7d:bc:84:47:a8:fc:43:a1:15:99:45:5c:78: 28:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:40:97:48:4B:BC:02:3D:2A:E1:56:FC:D0:DF:4D:B4:BB:32:31:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f58f675a-938f-3f6d-abeb-fdacf7c41fff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.201.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:29:e1:3e:8a:43:6a:bb:ea:ee:07:63:9a:18:0e:6f:dd:8b: ca:b9:44:fa:a6:b7:09:4b:94:f9:9d:b5:36:d6:39:d7:c1:bd: 5a:61:9f:ee:9c:0c:e1:6c:4a:1f:5d:8e:27:0d:a8:c9:e4:42: 51:d7:51:ef:e4:5d:8a:17:3f:b8:78:e8:3d:ba:47:74:dd:0d: 4a:23:5b:ee:46:40:30:88:e6:c5:80:3a:0d:23:23:8e:92:32: 12:b2:1a:64:b4:92:f8:0e:da:9a:14:ad:b5:f5:b1:eb:be:22: 67:26:84:09:1d:8f:4b:c5:9f:72:af:b0:58:5e:7d:27:02:00: b0:94:50:f4:82:7a:80:ab:cf:1c:0a:3f:0e:ce:54:50:54:2d: 7b:dd:b0:a2:06:22:11:bf:90:63:e6:d2:2d:cb:c2:d5:b4:7a: a6:8c:e0:e4:59:46:83:be:46:52:79:d7:0c:16:5b:95:c1:da: 30:1a:f9:39:8d:c4:24:b1:43:9f:ce:24:1b:51:18:4d:b8:09: c6:f9:fb:25:d6:7d:9b:f9:5e:c8:48:e6:b9:4f:e5:01:77:f0: e4:d9:1d:cd:5a:4c:74:74:cb:62:2c:a9:ac:8e:66:bc:4e:4b: bf:28:0b:9e:99:53:30:15:57:3f:bf:b6:b7:2b:29:17:63:47: c9:43:6a:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp/4JqORoGSWVgejYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcxMzAxMDA1MFoXDTI1MTAxMTAxMDA1MFowLzEtMCsGA1UEAxMk ZjMzNjcwMWYtMTM4NC00MTBkLTk2NzgtZWZmYzg3MDJkOThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zqr90//hftY8vyF0f2LCGsBm9hG7MQ4Hx16 r2SGBBNIFEjK3iguy/MkLZxXjWTuub45K1YyL+uNkejh2YH0afshmrDw0pvTo+WL mc7cVRUnFxTCajftIE41H9pbBpdZ9Tq+75lwkRcXJn2Dp5WIT2ZHSXsvJx894evP LyzGp2YGhere9kRyDHqVM406YAKt1P8+Z7xbD5EMdgq9QfW+AO30TAB98Jq0fh2z jkuK+LJATw5+QgSHKWcN5VFKziD/9tzsljuBTuwXEGJR5kEMaiUUBc1EwbvHcWuy duu+E2bZOmwaUrUfKusNkDoUDNDdo328hEeo/EOhFZlFXHgoBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZAl0hLvAI9KuFW/NDfTbS7MjEeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjU4ZjY3NWEtOTM4Zi0z ZjZkLWFiZWItZmRhY2Y3YzQxZmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErsmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMp4T6KQ2q76u4HY5oYDm/di8q5RPqmtwlLlPmdtTbWOdfBvVphn+6c DOFsSh9djicNqMnkQlHXUe/kXYoXP7h46D26R3TdDUojW+5GQDCI5sWAOg0jI46S MhKyGmS0kvgO2poUrbX1seu+ImcmhAkdj0vFn3KvsFhefScCALCUUPSCeoCrzxwK Pw7OVFBULXvdsKIGIhG/kGPm0i3LwtW0eqaM4ORZRoO+RlJ51wwWW5XB2jAa+TmN xCSxQ5/OJBtRGE24Ccb5+yXWfZv5XshI5rlP5QF38OTZHc1aTHR0y2IsqayOZrxO S78oC56ZUzAVVz+/trcrKRdjR8lDao0= -----END CERTIFICATE-----Generated at Wed Aug 6 05:27:41 2025 by rpki-client