$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/21d04f0f-5e15-3c83-8d3f-eb6accb5df35.roa File: 21d04f0f-5e15-3c83-8d3f-eb6accb5df35.roa (raw, json) Hash identifier: Bg2Jf/B8xBjk3QX4OEY+O4hna3Wj2O2Hzz7l+/QPXuk= Subject key identifier: C2:EF:D0:25:17:30:95:EA:3A:FC:95:1C:5D:D7:C4:2D:E4:9F:9F:80 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B23319690D7D9F949621E5800 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/21d04f0f-5e15-3c83-8d3f-eb6accb5df35.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 6167 IP address blocks: 174.221.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:96:90:d7:d9:f9:49:62:1e:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=40921d8b-912e-4988-9c96-2ad4f731f41a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:65:98:f3:a4:6d:4e:3f:a4:9a:0c:4f:b1:2b: 74:21:9c:2e:a5:2f:23:e4:61:95:41:09:fd:31:43: 83:b7:bb:f4:11:ec:e2:4b:f1:51:cd:37:ce:dc:d1: 03:3c:d8:a3:58:b5:60:20:46:d2:23:b7:3d:3d:1c: 3d:64:38:e3:bf:34:f3:01:2f:53:f5:42:06:4a:d9: 9c:8c:f9:64:09:15:04:38:01:63:33:44:d8:f9:31: ff:5f:f2:ba:c4:21:94:f1:36:1e:a4:38:ed:d6:9f: ec:20:00:01:73:fb:3b:b7:ea:fc:b8:9a:6e:fa:7a: b1:b6:a8:9c:68:98:74:ab:b8:37:bd:95:2b:b0:f4: 29:89:f7:41:12:96:cf:88:88:ef:04:59:86:1a:fc: 99:d9:5c:20:58:f8:33:4c:4c:d7:91:93:d3:66:c7: ed:b3:ec:76:2f:7d:de:53:a3:2f:04:aa:f7:fb:11: 9c:d9:84:de:96:1b:b8:d5:6d:bb:ec:38:bb:c7:78: 53:03:74:49:df:7a:5e:0c:f3:bd:24:4d:8d:ab:48: d9:e2:23:43:1e:27:b7:b3:a8:70:dc:c3:b9:ad:57: c0:43:b8:aa:f4:a9:e9:3f:78:a8:cf:67:eb:f8:78: 1a:41:ee:42:d3:09:da:4a:29:40:9f:b2:68:38:f6: af:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:EF:D0:25:17:30:95:EA:3A:FC:95:1C:5D:D7:C4:2D:E4:9F:9F:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/21d04f0f-5e15-3c83-8d3f-eb6accb5df35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.221.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:98:ec:f9:4d:29:65:ab:bf:ae:72:ee:b2:3c:8d:a5:30:7a: 04:29:ab:f4:a4:24:41:4d:6e:6f:1c:31:1f:02:65:bc:c9:5a: ad:10:27:2c:a8:20:22:51:9c:fa:e9:ec:4a:e0:ec:c1:d9:69: d0:36:fd:9f:48:e8:ec:ab:70:a3:09:38:34:fe:43:42:55:56: 90:3d:8f:8a:88:6f:b2:73:ad:a0:0a:9b:38:2a:ee:84:e4:fc: 28:27:07:b4:d5:28:9d:2e:75:3a:a7:34:67:dd:ab:79:bd:a9: 6a:0d:a2:7b:26:a7:37:23:98:55:2f:8a:e1:08:43:9e:25:1c: db:be:76:8a:62:10:43:c0:27:47:2b:1e:db:1d:03:63:0d:d4: 9a:23:74:08:88:a3:d8:88:ff:a5:57:89:63:a2:4c:f5:de:5d: 84:69:97:71:08:51:14:8c:17:be:e6:21:1d:01:41:27:14:53: 27:bc:85:44:e6:f6:ff:43:bf:a0:2c:1c:3f:29:19:cd:44:da: 2e:88:a9:96:0e:3f:33:27:57:6e:61:3f:bb:fc:6d:7a:46:90: d9:cc:be:31:65:44:71:0d:9c:b1:ea:b1:b3:4a:81:25:56:a6: 1d:80:07:75:6e:75:71:8f:93:f2:b9:f0:32:88:a6:0b:27:c0: b8:6d:b2:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMZaQ19n5SWIeWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk NDA5MjFkOGItOTEyZS00OTg4LTljOTYtMmFkNGY3MzFmNDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmWY86RtTj+kmgxPsSt0IZwupS8j5GGVQQn9 MUODt7v0EeziS/FRzTfO3NEDPNijWLVgIEbSI7c9PRw9ZDjjvzTzAS9T9UIGStmc jPlkCRUEOAFjM0TY+TH/X/K6xCGU8TYepDjt1p/sIAABc/s7t+r8uJpu+nqxtqic aJh0q7g3vZUrsPQpifdBEpbPiIjvBFmGGvyZ2VwgWPgzTEzXkZPTZsfts+x2L33e U6MvBKr3+xGc2YTelhu41W277Di7x3hTA3RJ33peDPO9JE2Nq0jZ4iNDHie3s6hw 3MO5rVfAQ7iq9KnpP3ioz2fr+HgaQe5C0wnaSilAn7JoOPavJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLv0CUXMJXqOvyVHF3XxC3kn5+AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjFkMDRmMGYtNWUxNS0z YzgzLThkM2YtZWI2YWNjYjVkZjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErt0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmY7PlNKWWrv65y7rI8jaUwegQpq/SkJEFNbm8cMR8CZbzJWq0QJyyo ICJRnPrp7Erg7MHZadA2/Z9I6OyrcKMJODT+Q0JVVpA9j4qIb7JzraAKmzgq7oTk /CgnB7TVKJ0udTqnNGfdq3m9qWoNonsmpzcjmFUviuEIQ54lHNu+dopiEEPAJ0cr HtsdA2MN1JojdAiIo9iI/6VXiWOiTPXeXYRpl3EIURSMF77mIR0BQScUUye8hUTm 9v9Dv6AsHD8pGc1E2i6IqZYOPzMnV25hP7v8bXpGkNnMvjFlRHENnLHqsbNKgSVW ph2AB3VudXGPk/K58DKIpgsnwLhtsq8= -----END CERTIFICATE-----Generated at Sat Oct 11 00:15:36 2025 by rpki-client