$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2d651637-1ab6-36b6-9560-3f60fe8d6c8b.roa File: 2d651637-1ab6-36b6-9560-3f60fe8d6c8b.roa (raw, json) Hash identifier: iZTHukyLGmno6/6YgMTIYyOOCg60OFjpBkAb8PIa9Y8= Subject key identifier: 4B:72:EC:4F:28:FA:2B:48:B5:55:C4:09:CB:99:10:7D:41:DD:DF:C0 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B87B23A31AFB76026520ABB00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2d651637-1ab6-36b6-9560-3f60fe8d6c8b.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 6167 IP address blocks: 174.247.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:3a:31:af:b7:60:26:52:0a:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=1fb2bcac-e6ec-4ce4-8a55-d5e317a4db5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:42:c4:da:0b:18:4b:31:ec:9d:cb:c0:e9:ed: de:fc:e2:de:17:c7:a1:22:67:9f:35:fd:43:16:2b: ba:a6:75:b0:1e:aa:ab:fb:42:91:00:fb:45:34:b0: 3e:39:46:13:eb:1b:b9:0c:0f:f5:b3:72:6a:a2:22: 79:c5:49:28:0b:26:82:06:18:be:eb:d5:73:14:5c: 9d:62:16:9a:d8:5b:d6:e0:1e:f9:2d:26:fd:c3:87: 41:f0:31:8e:1b:da:6e:bf:3b:93:5e:dc:25:b6:07: dd:8f:ff:93:5d:bc:91:2b:94:e7:22:f6:c7:a0:e4: 2a:e3:86:d5:eb:f0:9e:2a:ab:59:df:7f:aa:69:f8: e4:7f:c6:44:eb:8f:b6:b3:61:8c:88:9e:f7:4e:04: 2e:63:6c:01:cf:d0:22:56:40:35:51:47:dc:cb:f3: 75:a2:74:75:4f:97:ce:a3:a4:87:bf:7b:c4:6e:72: ba:02:14:b6:2c:e5:1c:12:4d:2d:98:7e:14:32:58: 84:5f:29:d3:82:5c:49:48:a6:14:71:c1:ca:ad:87: d7:8a:7e:4b:72:a6:8c:5f:77:6d:9f:53:fd:98:d5: 80:ac:0d:49:09:9b:2e:8d:b6:a8:d3:45:86:77:2c: 60:34:a7:77:ce:87:c0:42:71:cf:31:ff:ab:01:d7: 8a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:72:EC:4F:28:FA:2B:48:B5:55:C4:09:CB:99:10:7D:41:DD:DF:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2d651637-1ab6-36b6-9560-3f60fe8d6c8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.247.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:35:df:da:1b:62:35:7b:d9:d6:f8:fe:fc:83:b8:0e:45:4b: 05:41:f0:47:b3:9f:be:de:57:61:c9:18:e1:8b:73:10:8f:a6: d5:c3:6a:ce:42:57:e4:dc:7a:b7:06:4e:65:74:99:d8:f5:53: 9f:db:ca:95:c9:7e:01:7f:61:3d:3e:37:39:8b:19:7d:0e:97: 9b:3d:11:33:fb:6b:d8:97:dc:84:a0:be:05:2b:e5:84:54:c2: b9:2b:81:ad:cc:f6:0d:74:77:a4:58:b4:38:35:44:b8:61:8a: 06:2c:2d:9b:a9:4e:f2:8e:8d:4d:90:f0:ed:66:14:1d:c6:de: 58:f4:83:27:dc:96:c1:6a:e8:f0:25:73:35:bf:cf:bb:aa:dc: 47:a2:3d:32:ef:05:ec:80:9c:1b:f0:26:85:b0:ba:39:06:9b: 18:77:83:19:e0:34:6e:2c:44:c6:a1:e8:7e:44:a5:75:31:a4: 9e:36:1e:aa:32:36:12:8c:68:ee:cd:0d:65:5d:cb:a3:63:b1: 7e:cb:82:f9:7b:ea:80:64:26:b1:de:73:ed:95:1c:89:fd:b2: d7:74:dc:39:2e:1c:07:84:9d:f7:5d:32:84:ab:33:cb:fd:6d: 65:6c:ad:d9:cd:59:3b:b4:2f:4f:84:22:5a:be:96:66:e5:4c: df:b2:01:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsjoxr7dgJlIKuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk MWZiMmJjYWMtZTZlYy00Y2U0LThhNTUtZDVlMzE3YTRkYjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgULE2gsYSzHsncvA6e3e/OLeF8ehImefNf1D Fiu6pnWwHqqr+0KRAPtFNLA+OUYT6xu5DA/1s3JqoiJ5xUkoCyaCBhi+69VzFFyd Yhaa2FvW4B75LSb9w4dB8DGOG9puvzuTXtwltgfdj/+TXbyRK5TnIvbHoOQq44bV 6/CeKqtZ33+qafjkf8ZE64+2s2GMiJ73TgQuY2wBz9AiVkA1UUfcy/N1onR1T5fO o6SHv3vEbnK6AhS2LOUcEk0tmH4UMliEXynTglxJSKYUccHKrYfXin5LcqaMX3dt n1P9mNWArA1JCZsujbao00WGdyxgNKd3zofAQnHPMf+rAdeKHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEty7E8o+itItVXECcuZEH1B3d/AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmQ2NTE2MzctMWFiNi0z NmI2LTk1NjAtM2Y2MGZlOGQ2YzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErvfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJA139obYjV72db4/vyDuA5FSwVB8Eezn77eV2HJGOGLcxCPptXDas5C V+TcercGTmV0mdj1U5/bypXJfgF/YT0+NzmLGX0Ol5s9ETP7a9iX3ISgvgUr5YRU wrkrga3M9g10d6RYtDg1RLhhigYsLZupTvKOjU2Q8O1mFB3G3lj0gyfclsFq6PAl czW/z7uq3EeiPTLvBeyAnBvwJoWwujkGmxh3gxngNG4sRMah6H5EpXUxpJ42Hqoy NhKMaO7NDWVdy6NjsX7Lgvl76oBkJrHec+2VHIn9std03DkuHAeEnfddMoSrM8v9 bWVsrdnNWTu0L0+EIlq+lmblTN+yASI= -----END CERTIFICATE-----Generated at Mon Oct 20 17:51:05 2025 by rpki-client