$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/21c8516c-a952-3af0-8873-6303e62cea37.roa File: 21c8516c-a952-3af0-8873-6303e62cea37.roa (raw, json) Hash identifier: u1RSSDCgjRUweK4oDu8EZaOIZqILSnis6HQFZsxEhlc= Subject key identifier: D2:E1:83:86:C4:07:67:0B:6C:7F:1B:6B:B1:B5:53:3A:4C:C4:DA:CB Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B609CA67CC4FE85F611712F80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/21c8516c-a952-3af0-8873-6303e62cea37.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 6167 IP address blocks: 174.219.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:a6:7c:c4:fe:85:f6:11:71:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=52e75965-1879-4201-b25c-7f63c3ca634f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6e:28:99:f2:78:a8:ef:81:91:3c:9f:be:ea: 41:b8:d0:7a:91:ab:55:27:b2:d3:90:aa:c2:9c:8a: ec:85:6a:46:bf:8b:a1:66:0d:a1:36:25:2e:f1:1f: 81:2d:dd:82:ca:c2:2a:b5:ff:a5:53:ef:1c:58:f2: 7b:dc:e2:32:40:b2:64:11:85:a1:e1:f2:e8:00:ab: 1f:eb:1e:fa:52:fa:07:65:a6:af:b8:2e:7f:63:c4: 45:9d:7b:c2:6c:f6:a4:e6:34:32:05:05:14:bb:cf: 95:2a:db:e1:93:47:c4:cf:d8:2a:4a:10:71:6a:32: ee:fc:88:30:46:d5:65:ff:33:5b:e5:4d:51:91:87: 5b:be:c4:7c:af:07:f3:5d:92:36:de:21:c2:cd:79: a3:b2:fa:ad:d9:f2:a0:c9:2d:f8:85:5e:3d:60:fd: 6d:d2:72:f0:f5:e5:19:fb:23:fc:e9:1b:59:ae:b8: 9b:50:c4:e4:02:e5:12:25:43:47:46:e6:38:7c:2a: 6e:18:ea:ec:a3:c9:42:77:a0:3a:32:b3:cf:e6:47: ce:2a:c5:46:f0:7e:00:66:d9:a3:46:d3:3b:d7:45: 7f:0b:84:ba:3b:3d:d1:92:ed:07:29:48:5a:9d:f5: 2f:55:46:2a:e0:6f:74:4a:09:33:24:05:96:a5:d2: 38:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E1:83:86:C4:07:67:0B:6C:7F:1B:6B:B1:B5:53:3A:4C:C4:DA:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/21c8516c-a952-3af0-8873-6303e62cea37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.219.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:3d:0a:d9:a5:d6:13:98:ba:ae:cf:e0:d8:09:f9:c8:a3:7b: d0:7c:21:c7:9d:29:d1:fb:2b:b4:11:24:9d:47:f5:88:f3:7a: f6:83:6c:28:fe:b6:dc:ef:a2:22:76:13:f4:78:e8:cd:a3:8e: a0:ef:dd:8d:e8:ac:57:1f:35:4b:d0:f5:0b:88:1a:b9:ba:ce: 28:8e:da:d8:84:56:b1:01:4a:8f:fb:c6:38:0e:74:ca:56:99: ed:b8:05:00:44:c2:92:27:ba:1c:b0:80:c9:48:7b:ee:4f:c0: 61:2c:f8:20:f1:08:a1:29:b9:fa:52:02:e6:09:d8:85:bd:68: 19:b3:e9:69:4a:57:6c:18:fd:fe:0c:79:d5:f4:d8:5d:d8:c6: 5e:a6:fc:fb:4d:48:4e:ce:8a:3f:13:a3:55:25:5b:e9:86:96: da:c8:25:c7:11:ff:c8:14:dd:3c:83:f1:b9:60:a8:a4:2e:c1: a7:a2:a0:cc:b9:94:49:35:6a:f2:ec:c5:b3:44:be:04:5e:e2: 95:0f:32:63:79:16:e2:93:b6:09:18:70:88:02:02:be:44:0d: 36:51:ea:4d:38:65:72:f2:b1:b4:44:1a:c1:b7:1a:c0:69:0f: e0:91:a9:d8:e6:4b:ab:37:2d:81:29:6c:3f:2d:d4:cb:ab:91: e1:e8:a4:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnKZ8xP6F9hFxL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk NTJlNzU5NjUtMTg3OS00MjAxLWIyNWMtN2Y2M2MzY2E2MzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkG4omfJ4qO+BkTyfvupBuNB6katVJ7LTkKrC nIrshWpGv4uhZg2hNiUu8R+BLd2CysIqtf+lU+8cWPJ73OIyQLJkEYWh4fLoAKsf 6x76UvoHZaavuC5/Y8RFnXvCbPak5jQyBQUUu8+VKtvhk0fEz9gqShBxajLu/Igw RtVl/zNb5U1RkYdbvsR8rwfzXZI23iHCzXmjsvqt2fKgyS34hV49YP1t0nLw9eUZ +yP86RtZrribUMTkAuUSJUNHRuY4fCpuGOrso8lCd6A6MrPP5kfOKsVG8H4AZtmj RtM710V/C4S6Oz3Rku0HKUhanfUvVUYq4G90SgkzJAWWpdI4dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLhg4bEB2cLbH8ba7G1UzpMxNrLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjFjODUxNmMtYTk1Mi0z YWYwLTg4NzMtNjMwM2U2MmNlYTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrtvQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADA9Ctml1hOYuq7P4NgJ+cije9B8IcedKdH7K7QRJJ1H9YjzevaDbCj+ ttzvoiJ2E/R46M2jjqDv3Y3orFcfNUvQ9QuIGrm6ziiO2tiEVrEBSo/7xjgOdMpW me24BQBEwpInuhywgMlIe+5PwGEs+CDxCKEpufpSAuYJ2IW9aBmz6WlKV2wY/f4M edX02F3Yxl6m/PtNSE7Oij8To1UlW+mGltrIJccR/8gU3TyD8blgqKQuwaeioMy5 lEk1avLsxbNEvgRe4pUPMmN5FuKTtgkYcIgCAr5EDTZR6k04ZXLysbREGsG3GsBp D+CRqdjmS6s3LYEpbD8t1MurkeHopLA= -----END CERTIFICATE-----Generated at Fri Oct 10 19:58:24 2025 by rpki-client