$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dde3be6c-297e-39c4-9a9b-d08952bb11cf.roa File: dde3be6c-297e-39c4-9a9b-d08952bb11cf.roa (raw, json) Hash identifier: cnKPuyZc8JcJfrrZBjrZWhloVt0fUeI6dhBW0EWS6cQ= Subject key identifier: 02:AC:B9:97:8F:AA:52:B3:91:CB:61:3B:4F:15:A2:40:48:5F:CC:A7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AFC1BEAA958E97A17891A1700 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dde3be6c-297e-39c4-9a9b-d08952bb11cf.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 6167 IP address blocks: 174.220.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:ea:a9:58:e9:7a:17:89:1a:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=26e98c49-c43d-4c1f-ba49-3b1255ecfc50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1d:30:f4:ec:e7:52:81:f9:7e:56:8c:21:68: e8:63:5a:37:99:06:f9:f5:af:f5:80:74:ae:ac:5b: 43:ff:28:20:a1:aa:98:c5:47:66:a2:6c:f3:3e:a1: 3d:7b:fe:0d:33:0f:1b:45:67:3a:15:db:19:6b:55: 25:93:c6:6a:3e:ca:68:38:5f:49:14:da:63:f4:d1: 45:86:cb:62:ef:fe:dd:bd:b7:32:6c:68:42:c1:2e: f7:3b:97:90:f5:a6:e9:df:3a:ac:fa:a4:0c:c8:79: 47:59:12:96:7a:69:1c:5c:70:0e:e0:68:bb:5e:e9: e0:88:a6:dc:a1:3f:be:fb:9f:86:4d:6f:29:14:46: cf:16:84:c2:82:7b:75:7b:ef:ef:ef:e1:5a:36:a3: e4:7b:c4:3c:ee:26:42:df:53:16:55:45:23:07:f8: d4:23:58:37:ac:a2:c5:09:09:f5:00:be:66:be:78: ff:1c:59:61:fe:74:cd:22:c7:24:6a:03:06:92:6b: b9:53:bc:17:aa:ca:26:74:00:d8:c5:8f:08:1a:8d: ed:13:4e:b3:e9:69:31:d5:0d:ba:d2:89:00:67:76: 2f:68:c1:bf:77:b9:d6:d4:62:e6:6e:71:df:4b:63: d8:f0:18:02:f0:78:48:af:17:18:06:6a:f7:c1:d9: 4f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AC:B9:97:8F:AA:52:B3:91:CB:61:3B:4F:15:A2:40:48:5F:CC:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dde3be6c-297e-39c4-9a9b-d08952bb11cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.220.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:4a:0d:29:2b:4e:0c:37:48:76:56:29:1b:e0:0b:fc:a2:51: d5:3c:56:b0:d6:1f:f7:0f:41:c9:d3:4d:b8:1c:c4:ff:88:2b: 87:2d:c2:3d:bc:d0:da:f4:b8:06:96:fb:84:f7:48:f3:90:7a: b6:d4:1f:8c:9d:fd:db:1a:1d:dc:8a:2d:ed:fd:64:cf:21:b7: d2:f0:51:a1:d1:cb:84:f0:47:c3:9c:d7:8f:ae:b6:fe:70:e3: 07:77:79:cc:70:14:39:de:0e:b2:5e:87:24:79:cf:5e:7b:e7: 8e:b9:04:51:8d:bc:92:cb:a7:c8:be:7e:fc:60:15:c7:1f:30: 4a:00:e0:98:69:9d:c6:97:cd:fa:1a:53:78:77:9b:5d:0c:d5: 81:db:85:9b:3a:e2:54:00:0c:98:7b:0b:20:0b:59:dd:fd:72: db:42:83:19:f3:3b:03:6f:4f:d3:bd:64:9e:b9:ba:9d:f4:2d: d9:ba:d8:9c:ff:ec:00:2d:eb:4a:2a:f9:4c:6a:97:2e:c0:61: af:38:37:b4:56:5c:09:18:f3:e1:5a:a7:46:38:e5:28:b7:e8: 46:5e:d7:04:11:dc:0c:1c:c0:ab:83:93:4d:d6:e2:5e:e6:aa: 92:91:be:68:67:d1:30:08:bf:58:ab:eb:91:3a:73:a2:72:04: 48:59:1a:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G+qpWOl6F4kaFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk MjZlOThjNDktYzQzZC00YzFmLWJhNDktM2IxMjU1ZWNmYzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR0w9OznUoH5flaMIWjoY1o3mQb59a/1gHSu rFtD/yggoaqYxUdmomzzPqE9e/4NMw8bRWc6FdsZa1Ulk8ZqPspoOF9JFNpj9NFF hsti7/7dvbcybGhCwS73O5eQ9abp3zqs+qQMyHlHWRKWemkcXHAO4Gi7XungiKbc oT+++5+GTW8pFEbPFoTCgnt1e+/v7+FaNqPke8Q87iZC31MWVUUjB/jUI1g3rKLF CQn1AL5mvnj/HFlh/nTNIsckagMGkmu5U7wXqsomdADYxY8IGo3tE06z6Wkx1Q26 0okAZ3YvaMG/d7nW1GLmbnHfS2PY8BgC8HhIrxcYBmr3wdlPTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKsuZePqlKzkcthO08VokBIX8ynMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGRlM2JlNmMtMjk3ZS0z OWM0LTlhOWItZDA4OTUyYmIxMWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApKDSkrTgw3SHZWKRvgC/yiUdU8VrDWH/cPQcnTTbgcxP+IK4ctwj28 0Nr0uAaW+4T3SPOQerbUH4yd/dsaHdyKLe39ZM8ht9LwUaHRy4TwR8Oc14+utv5w 4wd3ecxwFDneDrJehyR5z1575465BFGNvJLLp8i+fvxgFccfMEoA4JhpncaXzfoa U3h3m10M1YHbhZs64lQADJh7CyALWd39cttCgxnzOwNvT9O9ZJ65up30Ldm62Jz/ 7AAt60oq+Uxqly7AYa84N7RWXAkY8+Fap0Y45Si36EZe1wQR3AwcwKuDk03W4l7m qpKRvmhn0TAIv1ir65E6c6JyBEhZGuE= -----END CERTIFICATE-----Generated at Fri Oct 10 17:49:13 2025 by rpki-client