$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29e073aa-41d2-31ef-9ace-816befecc596.roa File: 29e073aa-41d2-31ef-9ace-816befecc596.roa (raw, json) Hash identifier: qjciDLwh0P1cDx0mrpC1h2VT2VX90zcOz4IP+fIYfFM= Subject key identifier: 66:69:CA:65:EA:10:5B:9C:65:3A:46:EC:09:4C:C3:25:BD:BB:11:CE Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B87B23187697FD9EFAB4C3F80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29e073aa-41d2-31ef-9ace-816befecc596.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 6167 IP address blocks: 174.236.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:31:87:69:7f:d9:ef:ab:4c:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=ef76de13-bc19-4f5f-86cf-ddb1f9941cf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:83:2d:d5:11:fb:38:3b:59:ea:e7:29:95:72: e7:40:e9:88:1e:9c:0c:bc:ee:05:f7:65:01:2e:57: 43:f1:28:e8:1e:a1:b7:ab:5a:46:33:47:ce:a0:c6: 47:f3:42:81:f2:b0:cf:73:9b:94:61:63:c1:fb:d3: 1e:49:24:8a:91:59:19:23:e4:a9:3b:aa:4b:ba:14: ee:fe:e1:df:0f:dd:e5:c8:24:a8:d2:37:02:cd:ce: 74:c3:09:d0:00:9e:42:f4:66:a8:32:1a:c4:7f:3a: 92:d3:d1:14:de:e2:49:93:2b:58:bc:77:61:48:a3: 9c:31:e4:ee:9d:08:e7:f2:96:81:03:88:75:57:3d: a0:6d:d3:cd:5f:a2:1e:b2:42:51:1b:84:77:0f:37: 96:1b:45:ca:77:27:2e:14:80:d3:94:08:aa:2c:ad: f7:a1:55:24:5c:1b:f1:53:a4:3c:47:91:f8:8e:0b: 2f:54:e2:61:e1:21:eb:5e:b9:9d:31:47:a5:5b:21: 39:78:6d:0c:9f:14:ef:f4:d5:ae:8d:d5:4d:40:f6: ae:24:c4:ff:b5:3a:70:0c:f7:4d:0f:63:79:2e:6a: f7:84:08:c1:02:03:c2:0b:55:d6:24:1a:02:2a:ee: 0f:8b:01:1a:d4:d3:28:0f:f4:78:c5:47:e8:84:60: ee:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:69:CA:65:EA:10:5B:9C:65:3A:46:EC:09:4C:C3:25:BD:BB:11:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29e073aa-41d2-31ef-9ace-816befecc596.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.236.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:46:ce:0d:e8:5c:39:d1:20:28:7d:1e:39:0e:01:61:77:10: 49:58:ee:a3:6e:b3:ba:c7:88:8b:65:97:d4:c8:9e:40:e1:97: dc:c2:ae:01:04:16:a5:c7:93:c0:b5:73:77:95:ad:5e:63:2b: 80:5c:39:50:3f:ec:79:35:0f:66:f8:c2:e2:2f:8a:50:5e:bf: 3e:f1:4b:0f:5c:cb:b2:1e:91:9b:8f:b0:c7:38:ac:86:35:be: 44:41:3c:74:38:be:6a:f8:e7:e5:96:ce:26:99:14:2a:1c:17: 23:41:68:4d:03:32:ce:8a:78:68:9b:81:3a:76:fe:c6:74:06: 66:a1:31:de:be:89:23:a5:1f:82:ee:3f:b5:a2:a5:5b:9a:5c: f2:64:35:31:b9:ef:12:43:a0:db:d8:05:fc:79:03:75:72:26: 92:32:f2:db:39:a5:1c:59:5d:b0:eb:98:fb:91:89:bb:63:68: 73:2e:10:21:f9:db:c8:cf:14:35:05:82:e3:86:70:60:c3:01: e9:19:64:ef:a2:68:d2:36:78:9f:df:58:07:eb:c2:c7:7e:8d: 50:18:8b:3c:61:82:cc:8c:66:b3:05:85:9e:22:64:22:22:6f: 00:a8:2b:b3:93:14:95:2a:44:64:33:1c:b7:42:f6:59:11:35: 8b:54:13:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsjGHaX/Z76tMP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk ZWY3NmRlMTMtYmMxOS00ZjVmLTg2Y2YtZGRiMWY5OTQxY2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIMt1RH7ODtZ6ucplXLnQOmIHpwMvO4F92UB LldD8SjoHqG3q1pGM0fOoMZH80KB8rDPc5uUYWPB+9MeSSSKkVkZI+SpO6pLuhTu /uHfD93lyCSo0jcCzc50wwnQAJ5C9GaoMhrEfzqS09EU3uJJkytYvHdhSKOcMeTu nQjn8paBA4h1Vz2gbdPNX6IeskJRG4R3DzeWG0XKdycuFIDTlAiqLK33oVUkXBvx U6Q8R5H4jgsvVOJh4SHrXrmdMUelWyE5eG0MnxTv9NWujdVNQPauJMT/tTpwDPdN D2N5Lmr3hAjBAgPCC1XWJBoCKu4PiwEa1NMoD/R4xUfohGDu4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZpymXqEFucZTpG7AlMwyW9uxHOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjllMDczYWEtNDFkMi0z MWVmLTlhY2UtODE2YmVmZWNjNTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCruyIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFGzg3oXDnRICh9HjkOAWF3EElY7qNus7rHiItll9TInkDhl9zCrgEE FqXHk8C1c3eVrV5jK4BcOVA/7Hk1D2b4wuIvilBevz7xSw9cy7IekZuPsMc4rIY1 vkRBPHQ4vmr45+WWziaZFCocFyNBaE0DMs6KeGibgTp2/sZ0BmahMd6+iSOlH4Lu P7WipVuaXPJkNTG57xJDoNvYBfx5A3VyJpIy8ts5pRxZXbDrmPuRibtjaHMuECH5 28jPFDUFguOGcGDDAekZZO+iaNI2eJ/fWAfrwsd+jVAYizxhgsyMZrMFhZ4iZCIi bwCoK7OTFJUqRGQzHLdC9lkRNYtUE/s= -----END CERTIFICATE-----Generated at Mon Oct 20 15:43:36 2025 by rpki-client