$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0438900c-039e-3fc8-9a9f-0af3e8d14e25.roa File: 0438900c-039e-3fc8-9a9f-0af3e8d14e25.roa (raw, json) Hash identifier: uJfed0sttcaocbk+sSc0meZSr1jCQxN6nokGRYfuDtM= Subject key identifier: 47:B1:E3:78:9B:E8:DA:1E:8C:8D:C8:EB:31:2D:31:8F:74:71:ED:DC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B87B2399FDD6236AE60EE0C80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0438900c-039e-3fc8-9a9f-0af3e8d14e25.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 6167 IP address blocks: 174.247.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:39:9f:dd:62:36:ae:60:ee:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=38785781-cabe-42eb-8e10-26054a2119fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a1:5e:ea:30:83:bc:b5:16:dc:20:ef:0e:cf: 4d:45:87:92:aa:17:cb:43:ba:60:a1:0c:ee:2f:52: f5:5b:8a:31:bc:f1:1f:00:ea:9a:8c:ab:09:93:99: 33:0c:cf:3c:03:77:5c:ee:c4:3d:8f:a6:d6:8a:48: c8:38:b4:1c:1f:f0:f6:0d:ac:53:5a:5a:d1:f7:4b: a0:1c:ef:95:10:4c:2f:e7:12:00:5e:73:17:6b:2e: 2f:9e:87:4d:1e:78:fb:ba:f2:84:2c:55:e0:0c:28: 14:9c:0d:bb:b1:41:24:be:f5:43:d1:a8:0a:bf:16: 81:d0:5d:62:52:90:30:1a:e6:2f:b2:4c:da:4b:4e: 66:03:10:0a:34:bd:94:9f:eb:80:30:35:54:85:1f: 5d:4e:15:29:67:38:77:b9:e2:c1:13:33:f5:6c:52: 06:d9:64:eb:e5:50:57:45:3e:ce:0c:f9:e6:68:4a: e4:f8:7c:27:28:37:9f:b7:ad:f5:97:e8:87:9d:f0: 6c:cc:03:7f:4b:7c:26:e9:c3:50:12:ed:02:68:d4: 32:35:95:8e:7e:6f:29:a5:05:13:63:88:56:14:0a: 45:db:64:1e:07:c8:af:f5:20:6d:cc:3f:8f:eb:10: 9d:48:81:86:e6:ed:03:1e:07:10:b8:40:20:fd:19: 29:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B1:E3:78:9B:E8:DA:1E:8C:8D:C8:EB:31:2D:31:8F:74:71:ED:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0438900c-039e-3fc8-9a9f-0af3e8d14e25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.247.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:0a:5b:83:27:a2:f9:85:4e:c9:02:fd:d0:62:2d:20:08:40: e9:68:6d:22:47:36:20:c0:c1:dd:bc:cf:c3:7e:b3:62:1c:91: fb:42:d1:26:c9:a6:4e:57:1e:4e:7e:96:27:e8:af:71:86:e7: e8:2c:5e:14:ec:93:23:8a:6e:9b:98:66:73:09:ca:0e:8d:24: 71:2a:05:54:eb:b1:2d:71:c3:06:b2:b5:97:ec:7d:47:6d:a5: d6:65:73:4f:17:96:bb:70:0c:11:b8:53:77:9d:9b:6e:81:90: be:75:dc:00:5b:33:3e:1c:33:01:28:48:7b:02:cd:51:f4:ed: 96:17:7a:08:38:a8:87:55:be:16:a4:05:e4:f7:52:f9:d8:25: 30:be:3f:7f:1d:6a:a2:ed:e4:3f:9c:63:cd:07:09:a0:1d:49: 27:d2:5d:bb:8b:e8:69:d3:a8:a2:76:7f:35:d1:12:85:88:f7: d7:55:03:bd:31:db:e4:3c:fe:74:8c:9d:f8:b1:2f:5a:9f:1c: 11:49:88:e0:d9:c4:01:47:69:eb:31:e9:ce:71:0a:fb:15:62: ab:29:36:3c:df:71:b4:3d:40:ec:b9:44:78:db:9d:8d:17:ac: 82:2c:95:2b:e7:49:97:92:2d:0c:37:86:20:61:4b:82:18:5a: 9c:a1:72:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsjmf3WI2rmDuDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk Mzg3ODU3ODEtY2FiZS00MmViLThlMTAtMjYwNTRhMjExOWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKFe6jCDvLUW3CDvDs9NRYeSqhfLQ7pgoQzu L1L1W4oxvPEfAOqajKsJk5kzDM88A3dc7sQ9j6bWikjIOLQcH/D2DaxTWlrR90ug HO+VEEwv5xIAXnMXay4vnodNHnj7uvKELFXgDCgUnA27sUEkvvVD0agKvxaB0F1i UpAwGuYvskzaS05mAxAKNL2Un+uAMDVUhR9dThUpZzh3ueLBEzP1bFIG2WTr5VBX RT7ODPnmaErk+HwnKDeft631l+iHnfBszAN/S3wm6cNQEu0CaNQyNZWOfm8ppQUT Y4hWFApF22QeB8iv9SBtzD+P6xCdSIGG5u0DHgcQuEAg/RkpFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEex43ib6NoejI3I6zEtMY90ce3cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDQzODkwMGMtMDM5ZS0z ZmM4LTlhOWYtMGFmM2U4ZDE0ZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrvc4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwKW4MnovmFTskC/dBiLSAIQOlobSJHNiDAwd28z8N+s2IckftC0SbJ pk5XHk5+lifor3GG5+gsXhTskyOKbpuYZnMJyg6NJHEqBVTrsS1xwwaytZfsfUdt pdZlc08XlrtwDBG4U3edm26BkL513ABbMz4cMwEoSHsCzVH07ZYXegg4qIdVvhak BeT3UvnYJTC+P38daqLt5D+cY80HCaAdSSfSXbuL6GnTqKJ2fzXREoWI99dVA70x 2+Q8/nSMnfixL1qfHBFJiODZxAFHaesx6c5xCvsVYqspNjzfcbQ9QOy5RHjbnY0X rIIslSvnSZeSLQw3hiBhS4IYWpyhckU= -----END CERTIFICATE-----Generated at Mon Oct 20 16:54:45 2025 by rpki-client