$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29e455bc-6c46-31c4-ba8a-dc3fa4cc9220.roa File: 29e455bc-6c46-31c4-ba8a-dc3fa4cc9220.roa (raw, json) Hash identifier: M5lveSFkFaWJa0AluGp7aBJBFZ4jQIYIymr4rm9lfZQ= Subject key identifier: 32:8A:35:55:60:EA:3E:D4:5E:AF:D3:DC:3D:72:72:BE:00:AA:5E:15 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B87B229D81CB505AD60FC6280 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29e455bc-6c46-31c4-ba8a-dc3fa4cc9220.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 6167 IP address blocks: 174.203.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:29:d8:1c:b5:05:ad:60:fc:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=c00c2437-7c97-45b7-a549-97f014a126f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:14:7e:5d:1b:f9:ad:dc:be:b9:1f:68:61:17: b2:4e:27:e9:fd:c7:fe:76:c3:01:ca:47:b6:e3:02: 76:90:46:bb:1c:86:71:63:cf:01:5c:55:52:2c:cd: 25:f2:59:de:a9:6c:2c:04:71:fc:78:ac:5f:ee:1d: d0:20:55:b7:f7:f6:76:77:ed:cc:8f:87:30:c2:8f: 35:8b:da:af:cf:91:fa:44:b7:7a:18:99:8f:0b:f9: 47:08:48:ea:6f:2a:e5:15:25:a8:de:f1:27:e7:c7: e7:9f:5f:45:18:a3:a4:6f:1b:f2:88:3c:f7:86:57: 90:41:be:13:3a:7c:82:48:29:54:e8:d4:c7:52:e0: 0e:90:e8:e9:50:8f:08:70:f6:f0:d0:e7:cc:2d:50: 3d:4c:ca:2b:f8:92:90:4a:a6:66:c1:9a:17:e1:1c: f9:e3:1e:02:fb:f5:e9:c4:f6:a7:36:cd:6c:cf:e4: 3b:3c:69:e4:57:92:af:f0:00:c2:80:96:f2:9c:33: 2c:a1:e3:ef:3f:e6:17:bb:61:b1:83:36:c6:e4:eb: 4f:a3:ae:74:e4:f7:e9:a7:48:48:63:de:ac:b5:82: 97:c1:c5:7b:96:b6:0d:ee:40:fd:a0:ed:6c:53:bc: 2f:23:bd:d4:ff:36:e6:41:15:1b:08:72:28:93:d2: 36:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:8A:35:55:60:EA:3E:D4:5E:AF:D3:DC:3D:72:72:BE:00:AA:5E:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29e455bc-6c46-31c4-ba8a-dc3fa4cc9220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.203.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:ec:d2:c8:f9:c6:7c:86:ff:cd:24:f5:ff:d3:e1:10:a4:7e: 4b:9a:a1:3b:99:c4:93:b6:28:45:8f:93:8e:dc:03:a5:c1:7e: 9a:1a:bd:f8:31:fe:c7:b3:99:b6:e9:99:e6:2d:f1:dc:ca:02: a1:e4:60:84:2c:ea:47:a9:07:39:18:de:3e:92:ff:fe:7a:65: c5:4e:b6:cb:39:b4:3b:e8:b6:ce:5c:65:0d:75:f5:f5:58:c6: 2a:6a:3c:2a:ec:4b:c3:af:a1:56:73:d4:f5:4c:1f:85:7b:79: 96:e4:b7:c2:cb:3b:c6:21:56:81:54:f9:b0:13:39:ad:a4:da: 6e:6d:06:a8:02:01:50:37:18:2b:ac:50:26:59:45:b8:cd:42: 2f:a0:09:fa:b3:be:84:24:69:bf:11:98:68:c3:24:e8:80:aa: 6b:d9:ae:0d:c0:11:9c:a6:2e:75:8f:04:a4:78:5c:02:0e:86: 2b:cb:a3:06:64:ed:5e:15:24:9a:af:c0:11:58:5b:c4:cb:bb: 20:2f:09:ab:bd:7c:a8:ff:c5:01:a7:4d:4f:e4:67:0a:90:79: a6:e0:ef:11:2e:68:04:d4:2e:6f:f5:05:81:b9:9d:3f:2c:b3: a3:fa:82:ca:43:1c:9b:31:c4:9e:7b:d6:ab:17:a9:a7:2b:7d: ca:43:f1:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsinYHLUFrWD8YoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk YzAwYzI0MzctN2M5Ny00NWI3LWE1NDktOTdmMDE0YTEyNmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBR+XRv5rdy+uR9oYReyTifp/cf+dsMByke2 4wJ2kEa7HIZxY88BXFVSLM0l8lneqWwsBHH8eKxf7h3QIFW39/Z2d+3Mj4cwwo81 i9qvz5H6RLd6GJmPC/lHCEjqbyrlFSWo3vEn58fnn19FGKOkbxvyiDz3hleQQb4T OnyCSClU6NTHUuAOkOjpUI8IcPbw0OfMLVA9TMor+JKQSqZmwZoX4Rz54x4C+/Xp xPanNs1sz+Q7PGnkV5Kv8ADCgJbynDMsoePvP+YXu2GxgzbG5OtPo6505Pfpp0hI Y96stYKXwcV7lrYN7kD9oO1sU7wvI73U/zbmQRUbCHIok9I2EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKKNVVg6j7UXq/T3D1ycr4Aql4VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjllNDU1YmMtNmM0Ni0z MWM0LWJhOGEtZGMzZmE0Y2M5MjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrsugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPs0sj5xnyG/80k9f/T4RCkfkuaoTuZxJO2KEWPk47cA6XBfpoavfgx /sezmbbpmeYt8dzKAqHkYIQs6kepBzkY3j6S//56ZcVOtss5tDvots5cZQ119fVY xipqPCrsS8OvoVZz1PVMH4V7eZbkt8LLO8YhVoFU+bATOa2k2m5tBqgCAVA3GCus UCZZRbjNQi+gCfqzvoQkab8RmGjDJOiAqmvZrg3AEZymLnWPBKR4XAIOhivLowZk 7V4VJJqvwBFYW8TLuyAvCau9fKj/xQGnTU/kZwqQeabg7xEuaATULm/1BYG5nT8s s6P6gspDHJsxxJ571qsXqacrfcpD8cc= -----END CERTIFICATE-----Generated at Mon Oct 20 12:17:43 2025 by rpki-client