$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1cb32344-435b-37b6-86aa-873adbe9c521.roa File: 1cb32344-435b-37b6-86aa-873adbe9c521.roa (raw, json) Hash identifier: NwV8xcz8nFw822TWGDzMlO6MY2X6f3CCHJo+NwmeTIE= Subject key identifier: 0A:98:EC:72:C0:0F:DF:9F:85:AB:F9:79:7F:D0:15:A6:47:A5:D3:13 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B87B2302BE1DC0ECF03BAC5C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1cb32344-435b-37b6-86aa-873adbe9c521.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 6167 IP address blocks: 174.235.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:30:2b:e1:dc:0e:cf:03:ba:c5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=fbffa61a-76ab-43ca-9e10-d17816097f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:58:6f:52:26:fc:a0:5d:ea:ab:c1:a6:5b:db: e2:c6:68:6b:26:50:25:65:b7:9a:f3:f9:d7:f6:73: 16:5a:66:01:65:65:fe:43:8f:b9:4c:53:22:78:4e: 90:8a:31:57:a0:7f:7e:b9:5d:61:b6:bf:8a:24:fd: b7:78:c4:d9:bf:f0:ea:47:b4:f6:03:49:bc:29:21: ab:8f:5e:3f:85:ef:2b:dc:eb:93:d5:a1:22:1f:e2: 98:d2:c5:1d:4b:d7:4b:ef:1f:96:1d:1d:f6:33:4e: e2:5f:b0:c8:87:ed:f9:fb:d8:3e:5d:41:3d:29:b5: f4:7c:4d:99:95:94:06:21:1c:d7:97:33:41:94:34: a0:f5:5a:b5:4b:db:1d:45:34:a2:18:0d:d0:eb:76: ed:9f:e3:b8:5f:31:08:a1:a1:8b:ee:7f:fb:09:0b: e0:d3:60:67:62:9f:8a:9f:18:a2:02:9d:9f:77:e1: 81:c2:12:76:b4:e1:b8:7c:43:11:fa:79:e2:64:ab: d0:b3:61:2e:71:b7:2e:3f:7e:d6:58:53:68:f7:bf: 28:19:fa:d2:e6:4f:bd:6d:d8:85:69:1d:bf:a9:f7: c2:b3:9a:d4:b5:ff:8c:51:6c:9d:ab:8f:e0:d9:6e: 5f:f5:7e:bc:4f:c0:99:7f:7c:9d:ec:7a:cf:26:06: e5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:98:EC:72:C0:0F:DF:9F:85:AB:F9:79:7F:D0:15:A6:47:A5:D3:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1cb32344-435b-37b6-86aa-873adbe9c521.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.235.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:dc:6f:06:14:a7:27:b4:62:f2:3b:b9:63:6c:cb:7f:59:fc: 96:c4:f7:f7:b8:67:d9:9d:50:f0:ef:14:5d:45:ad:e4:49:f9: 31:74:3e:eb:51:23:c1:1a:95:4c:f7:83:4b:49:29:82:41:13: 18:26:21:dd:5a:c7:df:7c:e6:57:78:1f:85:a0:bf:56:97:10: c4:89:c0:c0:fc:04:d1:2f:bb:f1:8a:3f:08:a9:f7:ab:8e:cd: 61:72:7d:26:58:9e:48:29:c7:ca:fa:3b:20:ec:d9:2b:49:ab: b0:85:b1:10:f8:18:f1:a8:6b:91:47:f7:1c:42:ef:bf:97:99: 4d:b9:7c:8c:00:27:e4:61:3a:15:6b:a7:1d:11:7a:71:09:d0: 20:fa:23:9a:60:b9:2f:24:84:9b:8b:ad:4b:7d:a8:8e:c4:8d: 31:34:02:26:ae:cb:7a:9e:cb:88:69:e3:65:e4:98:52:05:3a: 11:b3:cb:db:62:2c:b1:9f:37:93:a7:b9:7a:59:96:b4:64:f4: 10:39:6f:b4:0a:f7:3d:72:f2:1b:11:ce:53:74:d1:6a:fa:37: b2:af:2c:ce:5a:b1:03:2e:7f:2b:15:57:b8:3a:3f:d5:dd:f7: 38:2b:10:a0:d3:ac:0b:b6:2b:d4:c2:f5:19:f4:ec:ab:f7:b5: de:08:4a:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsjAr4dwOzwO6xcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk ZmJmZmE2MWEtNzZhYi00M2NhLTllMTAtZDE3ODE2MDk3ZjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFhvUib8oF3qq8GmW9vixmhrJlAlZbea8/nX 9nMWWmYBZWX+Q4+5TFMieE6QijFXoH9+uV1htr+KJP23eMTZv/DqR7T2A0m8KSGr j14/he8r3OuT1aEiH+KY0sUdS9dL7x+WHR32M07iX7DIh+35+9g+XUE9KbX0fE2Z lZQGIRzXlzNBlDSg9Vq1S9sdRTSiGA3Q63btn+O4XzEIoaGL7n/7CQvg02BnYp+K nxiiAp2fd+GBwhJ2tOG4fEMR+nniZKvQs2EucbcuP37WWFNo978oGfrS5k+9bdiF aR2/qffCs5rUtf+MUWydq4/g2W5f9X68T8CZf3yd7HrPJgbl0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqY7HLAD9+fhav5eX/QFaZHpdMTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWNiMzIzNDQtNDM1Yi0z N2I2LTg2YWEtODczYWRiZTljNTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErusgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK7cbwYUpye0YvI7uWNsy39Z/JbE9/e4Z9mdUPDvFF1FreRJ+TF0PutR I8EalUz3g0tJKYJBExgmId1ax9985ld4H4Wgv1aXEMSJwMD8BNEvu/GKPwip96uO zWFyfSZYnkgpx8r6OyDs2StJq7CFsRD4GPGoa5FH9xxC77+XmU25fIwAJ+RhOhVr px0RenEJ0CD6I5pguS8khJuLrUt9qI7EjTE0Aiauy3qey4hp42XkmFIFOhGzy9ti LLGfN5OnuXpZlrRk9BA5b7QK9z1y8hsRzlN00Wr6N7KvLM5asQMufysVV7g6P9Xd 9zgrEKDTrAu2K9TC9Rn07Kv3td4ISjY= -----END CERTIFICATE-----Generated at Mon Oct 20 12:19:18 2025 by rpki-client