$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/6ed6331d-254f-36ef-8e68-79a7778da24e.roa File: 6ed6331d-254f-36ef-8e68-79a7778da24e.roa (raw, json) Hash identifier: G6iS0tePeUr3j32S6vpVPKoCWZEXcS9huS+RaACbTSE= Subject key identifier: 27:D4:FB:96:24:B3:98:4D:75:C6:14:C9:1E:C1:8B:33:06:52:59:52 Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Certificate serial: 010D0C9F4328584ABD4B7FC403903E0B3740A910 Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/6ed6331d-254f-36ef-8e68-79a7778da24e.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 14618 IP address blocks: 157.166.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:7f:c4:03:90:3e:0b:37:40:a9:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=d9362125-70f4-439e-b188-273aa25ae242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bd:e6:e3:ad:bf:b6:a1:2e:23:a6:27:2b:4b: 5e:cd:69:5c:60:5f:15:49:a2:6b:e2:12:55:ad:2e: 08:a7:43:81:10:dc:1d:e2:34:f6:bd:c6:fa:81:c5: 84:40:78:95:e0:06:0f:3a:23:d7:2e:17:3b:3a:f6: 00:0c:e1:1f:85:86:63:d9:7b:6b:68:ed:e8:94:fc: 98:77:80:be:c1:fb:5c:c2:6f:0c:1c:88:1a:d2:92: a0:43:4c:51:96:f0:4b:50:d7:d5:ba:09:21:7c:d6: be:89:66:40:48:87:0f:c6:e8:d5:cd:64:4a:76:42: a6:26:97:6b:fa:34:eb:e3:a9:3f:49:e3:c1:81:3d: b5:38:6c:15:07:95:90:9a:3a:f9:68:18:28:28:5a: bb:87:e5:74:6c:c7:71:5f:f4:71:f4:2d:4e:4d:0f: d4:86:e1:8e:0a:83:4b:22:96:06:f8:98:06:67:db: d5:35:2b:db:a7:45:09:66:54:76:78:ef:d2:53:c2: c9:ad:45:55:ea:e8:ad:ab:3e:5a:96:b1:65:45:ef: 95:ee:45:2a:6e:12:0f:72:00:e3:bd:d5:02:da:31: be:b1:f3:c9:bc:25:68:3c:29:38:d4:c9:25:51:08: de:b7:fc:7a:88:e9:6c:8b:96:88:04:c2:9e:24:47: b5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D4:FB:96:24:B3:98:4D:75:C6:14:C9:1E:C1:8B:33:06:52:59:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/6ed6331d-254f-36ef-8e68-79a7778da24e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl X509v3 Authority Key Identifier: keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer sbgp-ipAddrBlock: critical IPv4: 157.166.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:da:8c:91:b7:c7:8c:e2:a9:85:f8:75:38:08:a7:ec:12:dc: 61:c5:73:c4:c2:10:f7:08:e9:fb:f6:77:83:a5:07:2e:4a:ce: bb:61:00:2c:53:22:8e:57:75:7b:d9:16:2d:25:f5:a2:c8:a7: f9:e5:a2:b4:4b:68:50:e6:60:6e:0d:f2:eb:2b:11:74:a6:cd: 72:1c:e6:c2:ea:3f:50:d8:d9:ed:94:96:f2:3d:43:ae:d3:2b: 4a:a2:1e:e4:c2:fd:2e:f2:86:b7:c0:45:bd:9f:a4:62:f2:85: d7:21:00:a9:fb:4e:d1:3a:e5:11:5f:c5:60:b0:9f:27:6c:88: d3:8d:dc:66:61:30:21:df:c6:74:5d:dc:e1:38:f1:c6:30:4b: e7:25:b8:09:5e:72:e2:39:bd:a7:fa:e2:6c:8a:57:c6:1b:8f: 49:3f:e9:e6:db:95:bf:3f:85:67:47:85:39:23:40:93:9c:7d: f9:7b:df:41:f2:08:05:5b:2c:18:28:03:ee:11:60:17:58:89: 44:3a:2a:96:fa:9f:f1:f4:73:9b:b9:88:9f:d6:1c:a6:0c:92: 66:28:72:d6:c6:d0:a9:54:19:2a:c5:8a:48:93:42:14:e0:f8: 0e:42:a7:07:2a:7f:99:0a:3d:67:26:67:15:c4:e5:21:91:60: a5:dc:66:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S3/EA5A+CzdAqRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZi OTU1MB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk ZDkzNjIxMjUtNzBmNC00MzllLWIxODgtMjczYWEyNWFlMjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL3m462/tqEuI6YnK0tezWlcYF8VSaJr4hJV rS4Ip0OBENwd4jT2vcb6gcWEQHiV4AYPOiPXLhc7OvYADOEfhYZj2XtraO3olPyY d4C+wftcwm8MHIga0pKgQ0xRlvBLUNfVugkhfNa+iWZASIcPxujVzWRKdkKmJpdr +jTr46k/SePBgT21OGwVB5WQmjr5aBgoKFq7h+V0bMdxX/Rx9C1OTQ/UhuGOCoNL IpYG+JgGZ9vVNSvbp0UJZlR2eO/SU8LJrUVV6uitqz5alrFlRe+V7kUqbhIPcgDj vdUC2jG+sfPJvCVoPCk41MklUQjet/x6iOlsi5aIBMKeJEe1iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfU+5Yks5hNdcYUyR7BizMGUllSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDMz NWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvNmVkNjMzMWQtMjU0Zi0z NmVmLThlNjgtNzlhNzc3OGRhMjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQzMzVmYTAtNmMzZi00ODc4LTlm M2YtOTVjNWNlMGZiOTU1Lzc0MzM1ZmEwLTZjM2YtNDg3OC05ZjNmLTk1YzVjZTBm Yjk1NS5jcmwwHwYDVR0jBBgwFoAUc8cjZ4oeUR/cZOb0iBi2CNEe5TEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1 Y2UwZmI5NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnabUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3ajJG3x4ziqYX4dTgIp+wS3GHFc8TCEPcI6fv2d4OlBy5KzrthACxT Io5XdXvZFi0l9aLIp/nlorRLaFDmYG4N8usrEXSmzXIc5sLqP1DY2e2UlvI9Q67T K0qiHuTC/S7yhrfARb2fpGLyhdchAKn7TtE65RFfxWCwnydsiNON3GZhMCHfxnRd 3OE48cYwS+cluAlecuI5vaf64myKV8Ybj0k/6ebblb8/hWdHhTkjQJOcffl730Hy CAVbLBgoA+4RYBdYiUQ6Kpb6n/H0c5u5iJ/WHKYMkmYoctbG0KlUGSrFikiTQhTg +A5Cpwcqf5kKPWcmZxXE5SGRYKXcZjM= -----END CERTIFICATE-----Generated at Wed Aug 6 00:44:20 2025 by rpki-client