$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/176f61e9-60d7-3c47-990e-8ab480e32177.roa File: 176f61e9-60d7-3c47-990e-8ab480e32177.roa (raw, json) Hash identifier: GkO+iNZMKG5Gpp5Ytfx62j/gOrgTLoqIxnJlN/l8lVk= Subject key identifier: 1B:20:9B:F7:D7:7D:75:0F:BE:86:B0:0C:0F:65:98:3E:C5:D9:02:8B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B87B22FBE681D79DA6B45AB80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/176f61e9-60d7-3c47-990e-8ab480e32177.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 6167 IP address blocks: 174.234.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:2f:be:68:1d:79:da:6b:45:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=a1f1ac5a-ea27-4aa1-ade0-dff11fbb7c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b8:ba:65:f1:19:d0:8c:10:93:7b:94:eb:85: 4b:85:15:1c:16:d9:9f:28:9d:b4:53:d8:7d:c7:8f: c5:37:97:33:99:67:31:3f:b7:ac:95:fc:1a:c2:58: 16:a4:57:14:8c:43:81:22:84:56:c1:fe:9a:3c:29: 5b:24:83:b4:53:a5:e1:31:37:de:73:ee:15:d0:b2: df:31:bf:9c:a1:65:e8:af:53:ba:ba:fe:c9:77:73: 0e:57:c5:0c:02:7f:f4:16:b8:26:ab:36:98:ed:21: 64:69:4d:a8:12:a0:bc:20:84:76:cc:28:f4:56:3b: 7c:a4:6c:96:49:c1:b1:70:de:2c:c0:9a:e2:06:66: ad:c8:09:04:5d:a1:2e:02:d6:c7:ad:c8:05:36:30: 7d:cd:42:a9:85:00:76:50:d1:ee:83:b2:96:ca:9e: 7d:5b:08:27:70:8d:bc:3d:10:b1:63:8a:5d:21:d8: 88:f4:3b:14:03:96:c5:fe:a3:5e:ab:7a:93:f0:ed: 74:7d:ba:84:b1:0f:30:62:f6:af:82:0b:c8:39:7a: 32:a5:33:17:b9:58:57:8d:d0:72:d6:52:9c:6d:c5: a0:c9:bf:89:7d:7a:b5:f4:e8:e4:e1:60:04:ed:f9: 3a:ba:e7:80:3b:a6:42:e5:71:62:de:5a:de:f2:84: ea:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:20:9B:F7:D7:7D:75:0F:BE:86:B0:0C:0F:65:98:3E:C5:D9:02:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/176f61e9-60d7-3c47-990e-8ab480e32177.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.234.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:af:ce:e6:56:48:22:93:2d:f0:10:96:dd:ba:12:87:e1:2c: 23:24:c9:b8:d1:50:f9:e4:bb:39:dc:98:0b:56:47:b1:7d:f1: 83:f1:15:9c:99:b1:2b:01:97:35:4a:68:c5:cb:2c:aa:fc:95: d0:b9:00:d0:a5:ed:17:ad:68:48:1e:fe:07:f0:89:2e:60:69: ee:95:d0:4e:b3:05:92:79:04:2a:ae:65:72:55:80:38:80:87: 6d:b4:92:aa:a0:1b:8b:ad:40:bb:10:b0:1a:28:da:d7:29:30: f5:ee:16:24:20:cb:a4:38:87:1b:43:78:ab:c3:75:57:5c:51: 14:6a:cb:cc:4c:cf:8c:05:32:d7:49:9e:9e:dd:3e:e2:39:e8: fe:e3:01:98:9f:88:63:54:37:90:c1:e1:a8:1d:47:05:2b:8a: d6:33:ce:62:ac:c5:84:fc:32:75:a8:a0:d5:4c:fc:63:49:74: 9d:9c:af:de:30:28:a1:0e:00:c4:8f:d6:6a:39:67:5b:bf:24: c1:25:89:20:9b:77:84:c1:96:d9:da:47:44:8d:79:0f:3a:23: 87:d1:7b:a9:3b:d4:e0:ef:88:25:b0:43:4e:24:1c:0a:52:cf: 34:a1:7e:e2:b2:49:82:89:37:17:ab:a5:18:82:9f:8b:54:7a: 60:2e:1b:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsi++aB152mtFq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk YTFmMWFjNWEtZWEyNy00YWExLWFkZTAtZGZmMTFmYmI3YzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bi6ZfEZ0IwQk3uU64VLhRUcFtmfKJ20U9h9 x4/FN5czmWcxP7eslfwawlgWpFcUjEOBIoRWwf6aPClbJIO0U6XhMTfec+4V0LLf Mb+coWXor1O6uv7Jd3MOV8UMAn/0FrgmqzaY7SFkaU2oEqC8IIR2zCj0Vjt8pGyW ScGxcN4swJriBmatyAkEXaEuAtbHrcgFNjB9zUKphQB2UNHug7KWyp59WwgncI28 PRCxY4pdIdiI9DsUA5bF/qNeq3qT8O10fbqEsQ8wYvavggvIOXoypTMXuVhXjdBy 1lKcbcWgyb+JfXq19Ojk4WAE7fk6uueAO6ZC5XFi3lre8oTqZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBsgm/fXfXUPvoawDA9lmD7F2QKLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTc2ZjYxZTktNjBkNy0z YzQ3LTk5MGUtOGFiNDgwZTMyMTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruqgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmvzuZWSCKTLfAQlt26EofhLCMkybjRUPnkuzncmAtWR7F98YPxFZyZ sSsBlzVKaMXLLKr8ldC5ANCl7RetaEge/gfwiS5gae6V0E6zBZJ5BCquZXJVgDiA h220kqqgG4utQLsQsBoo2tcpMPXuFiQgy6Q4hxtDeKvDdVdcURRqy8xMz4wFMtdJ np7dPuI56P7jAZifiGNUN5DB4agdRwUritYzzmKsxYT8MnWooNVM/GNJdJ2cr94w KKEOAMSP1mo5Z1u/JMEliSCbd4TBltnaR0SNeQ86I4fRe6k71ODviCWwQ04kHApS zzShfuKySYKJNxerpRiCn4tUemAuG/k= -----END CERTIFICATE-----Generated at Mon Oct 20 17:55:55 2025 by rpki-client