$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff0a29fa-b6d0-3702-aed7-4dfb67f71597.roa File: ff0a29fa-b6d0-3702-aed7-4dfb67f71597.roa (raw, json) Hash identifier: 563xb0SA5OsjJDpawQFWxIcamlL76uK93Q8nZS/xfrY= Subject key identifier: 4F:B5:67:9A:AD:72:69:90:BE:D0:94:09:A5:87:C9:A2:BE:64:C7:B4 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AA6F635668F76602FFE7BA240 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff0a29fa-b6d0-3702-aed7-4dfb67f71597.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 6167 IP address blocks: 174.254.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:35:66:8f:76:60:2f:fe:7b:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=5c960ac5-e004-4bc4-b157-3ba8a0598129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:cf:55:73:e9:2f:39:f1:af:d7:b8:ef:77:2c: e8:e0:54:35:f1:91:71:8b:40:99:c4:f1:ef:de:f9: bd:69:64:13:32:34:b7:5b:90:a5:ac:f8:7c:0b:21: dc:c9:3b:6d:f4:c2:85:6f:9f:3e:27:38:f9:15:a0: 0d:ef:55:9b:5a:d1:ff:23:02:fa:b2:e4:f8:eb:c3: 4f:9e:d6:10:c8:ed:0f:96:32:6a:88:07:0f:6a:fe: 72:2c:b4:5d:da:e2:34:68:bf:1e:b0:3c:a0:f6:bd: bf:1a:94:e5:31:57:6b:e8:4f:f2:4e:5b:16:67:98: e6:5d:40:53:96:4a:8e:87:e5:ec:83:e1:61:3b:ae: 3c:42:bb:96:ab:ae:fa:b1:35:b5:96:46:2c:5f:9e: 7c:25:dd:08:c1:88:a0:ef:e3:c3:f2:72:07:53:c2: d0:25:dc:c5:cd:f9:a9:45:bf:0d:b6:58:cf:e7:09: 6a:73:24:d0:60:a4:d1:d3:57:34:63:b6:77:06:78: 9d:7b:66:fd:01:4d:d8:14:85:32:4b:1c:2a:2d:c9: d7:db:2e:4b:be:ba:7c:a5:bf:84:75:c1:9f:2a:92: bc:19:13:8b:6b:c8:e1:25:ba:69:df:e0:e9:4b:dc: 3d:0d:b3:41:72:b2:20:83:c3:e9:4a:c0:d0:65:99: d7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B5:67:9A:AD:72:69:90:BE:D0:94:09:A5:87:C9:A2:BE:64:C7:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff0a29fa-b6d0-3702-aed7-4dfb67f71597.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.254.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:64:04:92:91:30:84:04:24:72:6a:4a:18:90:0b:dd:82:a3: a1:61:4f:ab:ec:ff:c0:a5:6c:84:4c:17:31:f7:c6:e7:03:e9: f6:9c:1d:a4:b8:2b:97:30:1f:32:5a:ec:9b:5d:94:65:42:10: 75:5c:a9:ca:75:22:0f:06:e4:9f:9a:ef:3f:9a:a5:c3:4b:61: 76:5d:32:68:67:bb:95:ba:43:44:97:00:aa:68:e7:1b:d4:51: 5c:01:e2:f7:64:85:f9:35:ef:10:08:12:d6:5b:ed:be:7b:0c: b8:1b:a2:4c:47:3c:18:5b:10:b7:88:d8:9e:e4:01:65:59:89: 11:85:0b:50:b0:6d:4c:17:fd:ae:5d:49:25:fa:fe:6b:5d:22: 33:33:32:53:1e:37:d7:91:14:34:de:3e:a7:99:9c:ee:14:9d: 13:29:f6:16:7c:8e:c2:f5:a9:b3:95:13:4e:34:49:a7:aa:30: fd:02:48:de:5a:f8:a3:c7:1d:9a:c6:5f:8c:70:c0:5f:36:50: 6f:bb:74:ac:02:41:7a:53:69:02:5b:d3:d6:af:39:4a:7c:61: 94:3f:6c:7d:5c:12:21:61:8a:68:dc:58:04:19:d5:b1:fb:ca: 24:8a:fe:b2:79:f8:64:b6:38:d2:2c:35:59:f2:70:f2:0c:39: 34:13:dc:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9jVmj3ZgL/57okAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk NWM5NjBhYzUtZTAwNC00YmM0LWIxNTctM2JhOGEwNTk4MTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh89Vc+kvOfGv17jvdyzo4FQ18ZFxi0CZxPHv 3vm9aWQTMjS3W5ClrPh8CyHcyTtt9MKFb58+Jzj5FaAN71WbWtH/IwL6suT468NP ntYQyO0PljJqiAcPav5yLLRd2uI0aL8esDyg9r2/GpTlMVdr6E/yTlsWZ5jmXUBT lkqOh+Xsg+FhO648QruWq676sTW1lkYsX558Jd0IwYig7+PD8nIHU8LQJdzFzfmp Rb8NtljP5wlqcyTQYKTR01c0Y7Z3Bnide2b9AU3YFIUySxwqLcnX2y5Lvrp8pb+E dcGfKpK8GROLa8jhJbpp3+DpS9w9DbNBcrIgg8PpSsDQZZnX8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+1Z5qtcmmQvtCUCaWHyaK+ZMe0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmYwYTI5ZmEtYjZkMC0z NzAyLWFlZDctNGRmYjY3ZjcxNTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrv4UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChkBJKRMIQEJHJqShiQC92Co6FhT6vs/8ClbIRMFzH3xucD6facHaS4 K5cwHzJa7JtdlGVCEHVcqcp1Ig8G5J+a7z+apcNLYXZdMmhnu5W6Q0SXAKpo5xvU UVwB4vdkhfk17xAIEtZb7b57DLgbokxHPBhbELeI2J7kAWVZiRGFC1CwbUwX/a5d SSX6/mtdIjMzMlMeN9eRFDTePqeZnO4UnRMp9hZ8jsL1qbOVE040SaeqMP0CSN5a +KPHHZrGX4xwwF82UG+7dKwCQXpTaQJb09avOUp8YZQ/bH1cEiFhimjcWAQZ1bH7 yiSK/rJ5+GS2ONIsNVnycPIMOTQT3CY= -----END CERTIFICATE-----Generated at Wed Aug 6 14:12:44 2025 by rpki-client