$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa9a9eee-80ed-3e48-ba02-bfc0e1ae3779.roa File: aa9a9eee-80ed-3e48-ba02-bfc0e1ae3779.roa (raw, json) Hash identifier: n5fzxwfAeuEG5ylP2JQtBrn5Zetbzxgwv8GD96Ji6kk= Subject key identifier: A5:26:C3:BC:AC:E3:60:8D:05:4B:25:9E:33:47:B9:BB:A2:B0:0D:D2 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584A612B20B6B613D6A15C721690 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa9a9eee-80ed-3e48-ba02-bfc0e1ae3779.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 6167 IP address blocks: 174.239.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:20:b6:b6:13:d6:a1:5c:72:16:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=46624dc5-e377-4e90-886e-9419609a90a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e7:7d:83:ce:3a:79:df:63:6d:9f:71:9e:8e: e4:49:20:ac:31:da:a1:9a:ab:64:62:9d:72:e5:33: 5b:57:46:09:40:b7:47:7d:16:da:d9:ec:cb:83:20: e1:27:a0:c9:04:39:07:55:0c:ec:c8:50:96:50:18: 6c:d9:1c:5b:a3:e3:4f:b5:07:b2:66:ba:a2:c3:cf: 81:ed:6e:fe:43:e1:98:52:dd:f4:89:cf:56:fe:34: 1b:ae:2a:81:ee:b4:04:fc:64:64:5b:9d:79:ca:56: be:b2:11:4a:e4:8b:2a:e4:ca:f8:ab:34:db:e2:d7: 14:37:62:10:04:fd:c5:5c:ea:5f:2c:7d:f0:20:3d: a4:19:e1:c9:24:08:7c:b9:3e:ed:8c:ea:ac:ec:2b: 83:e0:1a:54:38:9a:cc:db:01:c7:2e:6c:29:1f:3f: ff:77:c5:d1:30:5e:68:b6:a3:e8:2c:86:6a:fd:21: b9:25:4c:80:0c:75:0b:71:a8:3b:07:a9:1e:8a:82: c3:52:88:8d:dc:fb:7f:3c:23:d9:71:cb:54:69:c2: 0e:18:86:ce:a6:0b:55:ef:fb:cf:34:38:01:f4:cd: f5:51:54:89:80:a5:b6:c2:a9:08:fc:aa:63:47:b6: b3:f5:7d:9b:c4:7a:c6:b3:b2:6f:78:fe:4b:55:d3: 7b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:26:C3:BC:AC:E3:60:8D:05:4B:25:9E:33:47:B9:BB:A2:B0:0D:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa9a9eee-80ed-3e48-ba02-bfc0e1ae3779.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.239.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:cf:8e:92:74:a3:0f:0e:a3:bf:98:38:22:ad:f5:69:b2:94: 80:a3:7d:06:78:56:08:62:78:d6:02:a4:ea:a3:c0:e9:6d:c4: 55:b6:14:f9:b6:03:8b:0a:be:9d:65:b2:27:fa:d3:7c:cb:98: 93:ba:61:bf:a7:ec:96:2c:c1:0f:a7:b4:aa:29:62:82:75:62: 8b:23:e0:e8:82:a6:be:a7:cb:ec:bc:56:3b:75:9b:7b:67:85: b3:94:0c:12:ec:c6:48:45:77:68:c8:35:ab:c5:96:f0:21:7f: 78:86:f0:33:a6:16:b3:f0:25:da:08:97:30:cb:56:a1:f7:a8: 3d:7f:94:e5:07:45:58:e1:c8:2d:34:6c:11:bb:3c:f9:b6:aa: 0f:6a:9c:b5:1b:c3:4f:e6:7b:69:fa:9a:7d:ef:f2:72:28:85: 8f:70:65:56:ad:3a:1f:a2:53:b1:9f:08:ba:65:8e:f6:09:03: 6b:f3:c4:5b:a0:32:67:6d:6b:bb:3b:7a:82:30:af:62:4f:42: 90:e0:9a:97:4b:9d:36:d0:ae:f7:12:10:e2:f2:08:00:32:37: e0:7a:ca:41:82:92:03:ee:f7:fc:a8:c7:b6:64:e5:ee:94:81: b7:99:d7:00:5b:23:a3:ad:b4:60:d9:8b:01:1c:04:99:cc:68: 62:4a:3e:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKyC2thPWoVxyFpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk NDY2MjRkYzUtZTM3Ny00ZTkwLTg4NmUtOTQxOTYwOWE5MGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+d9g846ed9jbZ9xno7kSSCsMdqhmqtkYp1y 5TNbV0YJQLdHfRba2ezLgyDhJ6DJBDkHVQzsyFCWUBhs2Rxbo+NPtQeyZrqiw8+B 7W7+Q+GYUt30ic9W/jQbriqB7rQE/GRkW515yla+shFK5Isq5Mr4qzTb4tcUN2IQ BP3FXOpfLH3wID2kGeHJJAh8uT7tjOqs7CuD4BpUOJrM2wHHLmwpHz//d8XRMF5o tqPoLIZq/SG5JUyADHULcag7B6keioLDUoiN3Pt/PCPZcctUacIOGIbOpgtV7/vP NDgB9M31UVSJgKW2wqkI/KpjR7az9X2bxHrGs7JveP5LVdN70QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUmw7ys42CNBUslnjNHubuisA3SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWE5YTllZWUtODBlZC0z ZTQ4LWJhMDItYmZjMGUxYWUzNzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEru+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfPjpJ0ow8Oo7+YOCKt9WmylICjfQZ4VghieNYCpOqjwOltxFW2FPm2 A4sKvp1lsif603zLmJO6Yb+n7JYswQ+ntKopYoJ1Yosj4OiCpr6ny+y8Vjt1m3tn hbOUDBLsxkhFd2jINavFlvAhf3iG8DOmFrPwJdoIlzDLVqH3qD1/lOUHRVjhyC00 bBG7PPm2qg9qnLUbw0/me2n6mn3v8nIohY9wZVatOh+iU7GfCLpljvYJA2vzxFug Mmdta7s7eoIwr2JPQpDgmpdLnTbQrvcSEOLyCAAyN+B6ykGCkgPu9/yox7Zk5e6U gbeZ1wBbI6OttGDZiwEcBJnMaGJKPpo= -----END CERTIFICATE-----Generated at Wed Jul 9 21:10:57 2025 by rpki-client