$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0bd21e50-fc2a-30b3-8028-4b1efee147a7.roa File: 0bd21e50-fc2a-30b3-8028-4b1efee147a7.roa (raw, json) Hash identifier: o2QQMcg2pEJx2XnEMH2QAHuOBSBeBBba5qYY4kOsw6Q= Subject key identifier: 46:89:A2:F7:33:07:96:56:2C:18:BE:D5:F3:3B:33:2D:0E:E4:B6:43 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B87B234363C91CAB3B463F8C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0bd21e50-fc2a-30b3-8028-4b1efee147a7.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 6167 IP address blocks: 174.240.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:34:36:3c:91:ca:b3:b4:63:f8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=636266ac-fc36-42ae-af53-82333b984f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e6:a6:e4:30:40:2b:0c:5f:39:4d:88:f4:7e: 62:17:0d:a1:14:bc:67:69:22:d1:8d:28:8c:2d:1b: db:ec:0b:ce:6f:3d:1b:c2:0b:6f:d5:f8:02:95:05: 7a:47:7f:9d:96:bc:2d:d8:b4:cd:42:51:c4:75:04: 56:5b:30:ad:90:29:81:4e:ed:92:0d:cd:22:fc:85: c4:12:9d:57:2f:9a:ab:2b:4f:1c:fd:b8:1c:3a:40: 2d:c0:cb:78:e5:da:ea:9c:32:2d:78:2d:f4:56:b4: 11:d3:92:f9:48:0c:5d:de:e5:55:ff:cf:75:b3:5c: 1b:6d:9e:a5:16:20:f7:0b:3c:da:a4:a8:b5:2c:d6: 40:4b:13:e7:fd:94:1e:f7:43:5d:52:31:12:89:c9: 18:ae:3a:28:17:37:a2:7e:da:c6:ae:dd:1a:6f:28: 9a:c7:a2:30:13:5c:7c:0d:2f:fe:57:93:4c:54:90: dc:e8:7f:a4:f4:99:3e:59:8e:23:95:f6:fa:1f:61: 60:85:f4:f1:27:33:0d:20:5e:8f:8d:16:c8:24:79: 86:d1:e7:88:cc:97:79:b0:72:bd:de:0a:dc:6d:91: cc:c9:51:72:e5:28:70:1f:4e:42:a1:64:dd:48:16: be:a6:c0:b3:48:bc:b3:3d:5c:ee:37:54:2e:9f:e7: 24:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:89:A2:F7:33:07:96:56:2C:18:BE:D5:F3:3B:33:2D:0E:E4:B6:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0bd21e50-fc2a-30b3-8028-4b1efee147a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.240.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:9b:a3:c9:28:79:c2:ff:91:b2:46:4e:50:e3:55:71:8c:3f: c1:f6:24:a1:3d:8b:d7:a3:cd:a0:87:df:2f:d8:37:e6:ed:00: 63:b9:fc:ca:be:ed:91:32:07:80:fc:18:a0:70:d3:cc:13:0e: 21:f8:f5:13:6a:9f:6a:d5:65:b9:96:e4:e4:62:38:36:b7:04: 7b:71:bd:ef:a5:a1:d5:e9:2b:14:ff:de:f7:07:0e:42:8c:7e: 90:ac:e7:39:ff:e1:80:0b:99:e7:d4:f9:6a:44:8b:85:f5:16: 5d:cd:1a:d2:c4:c5:1b:12:e5:a9:39:fc:5d:56:db:9f:96:a7: 21:0d:ca:c4:90:ca:90:aa:cc:eb:73:2d:01:d0:a5:fc:51:bb: dc:38:b5:b9:b3:38:09:35:06:9b:8f:5d:b4:19:86:05:e5:85: c5:7f:70:2a:22:19:be:aa:08:9a:55:d4:b8:51:5b:5f:f8:fe: 57:8a:b7:e2:d2:89:7c:e5:94:80:e9:63:6f:76:7c:b0:e8:37: fb:cf:3b:3d:2f:57:4a:c3:f2:5a:83:9e:ae:35:d1:13:93:a6: e3:2a:62:a6:8f:c1:b2:7e:0f:51:3f:da:58:d1:4b:91:81:5f: cb:2e:e1:fa:3f:9d:eb:a9:fc:1c:b6:b6:c8:88:d6:20:a1:70: 36:10:ac:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsjQ2PJHKs7Rj+MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk NjM2MjY2YWMtZmMzNi00MmFlLWFmNTMtODIzMzNiOTg0ZjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOam5DBAKwxfOU2I9H5iFw2hFLxnaSLRjSiM LRvb7AvObz0bwgtv1fgClQV6R3+dlrwt2LTNQlHEdQRWWzCtkCmBTu2SDc0i/IXE Ep1XL5qrK08c/bgcOkAtwMt45drqnDIteC30VrQR05L5SAxd3uVV/891s1wbbZ6l FiD3CzzapKi1LNZASxPn/ZQe90NdUjESickYrjooFzeiftrGrt0abyiax6IwE1x8 DS/+V5NMVJDc6H+k9Jk+WY4jlfb6H2FghfTxJzMNIF6PjRbIJHmG0eeIzJd5sHK9 3grcbZHMyVFy5ShwH05CoWTdSBa+psCzSLyzPVzuN1Qun+ckgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEaJovczB5ZWLBi+1fM7My0O5LZDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGJkMjFlNTAtZmMyYS0z MGIzLTgwMjgtNGIxZWZlZTE0N2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErvBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+bo8koecL/kbJGTlDjVXGMP8H2JKE9i9ejzaCH3y/YN+btAGO5/Mq+ 7ZEyB4D8GKBw08wTDiH49RNqn2rVZbmW5ORiODa3BHtxve+lodXpKxT/3vcHDkKM fpCs5zn/4YALmefU+WpEi4X1Fl3NGtLExRsS5ak5/F1W25+WpyENysSQypCqzOtz LQHQpfxRu9w4tbmzOAk1BpuPXbQZhgXlhcV/cCoiGb6qCJpV1LhRW1/4/leKt+LS iXzllIDpY292fLDoN/vPOz0vV0rD8lqDnq410ROTpuMqYqaPwbJ+D1E/2ljRS5GB X8su4fo/neup/By2tsiI1iChcDYQrEc= -----END CERTIFICATE-----Generated at Mon Oct 20 12:17:30 2025 by rpki-client