$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e861dea-d72b-3bf3-9b96-dbcbc0114a08.roa File: 2e861dea-d72b-3bf3-9b96-dbcbc0114a08.roa (raw, json) Hash identifier: C+Vd8PlHxS5aLfPYGLmiprLrC6RFMveW0kdoB2BIEFk= Subject key identifier: 05:E7:45:EA:B4:C9:A6:E9:3C:F6:DA:4A:74:30:E6:CE:B5:84:2D:66 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B87B22563019C41E0ED48CD00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e861dea-d72b-3bf3-9b96-dbcbc0114a08.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 6167 IP address blocks: 174.231.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:25:63:01:9c:41:e0:ed:48:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=e9d99c94-3fad-4f76-bdc0-6370b6d2ed54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:30:c4:43:5e:52:32:57:8c:50:da:d8:14:16: 77:b1:44:02:a0:dc:0d:f7:fb:4e:29:dd:40:e4:96: aa:45:9c:e4:2c:eb:74:3e:f1:f2:97:69:4c:a1:33: 86:e8:45:02:c5:3d:ed:00:0d:39:be:bb:e5:7c:00: 58:87:63:fd:f2:2f:37:e7:1b:99:ef:e2:29:a5:34: db:60:5f:df:64:09:e3:fa:5b:ac:37:b8:9e:6d:9d: c0:f6:81:52:7f:2f:34:dc:d8:cf:b7:1d:1d:c7:dc: 94:80:55:2a:3e:ec:e2:e4:6e:87:ca:29:21:51:09: 21:86:2b:c6:55:b1:fb:25:d9:e4:a0:eb:d2:fb:90: 89:82:c1:f6:12:f6:55:97:ae:5b:fc:62:85:80:3a: bc:a5:af:60:27:4e:5e:70:1a:2b:f0:4a:0d:37:0f: f2:de:89:2a:df:64:d1:12:3d:34:b6:90:36:a4:90: ab:25:7f:c2:c3:88:5c:83:b3:04:72:3a:75:10:5c: c0:fa:a2:f4:b6:8b:25:5b:2d:52:9b:79:c4:2f:b2: 05:b4:6f:c8:80:ee:31:9f:71:59:ec:5b:23:e4:04: cd:5c:87:28:e4:e5:74:99:c2:d4:7c:ec:67:ae:f6: f0:10:24:75:b8:df:23:d3:29:d7:6b:3a:eb:55:49: 21:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E7:45:EA:B4:C9:A6:E9:3C:F6:DA:4A:74:30:E6:CE:B5:84:2D:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e861dea-d72b-3bf3-9b96-dbcbc0114a08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.231.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:2d:74:db:8c:84:9d:38:56:e0:97:44:3b:d7:41:cc:88:1b: 71:b6:f0:7c:2b:90:00:7f:94:3c:ac:d1:27:fa:00:44:5e:a3: 13:ec:8e:82:f1:2b:63:ca:16:2e:f3:18:2e:a5:60:45:4e:b9: de:91:48:07:9f:22:d8:05:75:2d:45:cd:47:66:a2:21:91:1e: 4c:2d:59:0c:c9:02:5b:f0:18:6c:f8:c7:6f:53:9f:0b:f8:35: d3:ae:2a:d7:56:60:44:bc:80:d0:3d:f4:b6:4d:2a:dd:fa:84: 74:a8:74:d8:96:d0:08:68:cd:7b:14:ba:8e:d5:69:93:dc:9d: 60:9c:06:09:c7:04:03:25:7c:20:ce:fa:79:32:fe:6f:23:d0: b8:0d:7f:d2:7e:ac:1b:d8:ae:3f:30:d9:2b:e4:1a:fd:4c:8f: 14:b5:76:c8:84:89:43:9e:a1:8b:31:65:3f:1e:c7:5b:4b:0c: f5:e5:76:96:6c:1b:2d:af:d3:ff:92:cb:ae:67:c0:06:d6:cf: f6:92:e0:fd:af:8f:f5:da:e0:c4:02:30:ac:89:bc:7b:c4:bc: b2:eb:69:60:53:e0:8c:a1:94:82:70:c2:73:3d:41:77:62:38: 39:ed:1a:fd:41:b9:19:ed:a8:e9:af:72:86:7a:00:aa:76:06: a5:3f:9f:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsiVjAZxB4O1IzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk ZTlkOTljOTQtM2ZhZC00Zjc2LWJkYzAtNjM3MGI2ZDJlZDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizDEQ15SMleMUNrYFBZ3sUQCoNwN9/tOKd1A 5JaqRZzkLOt0PvHyl2lMoTOG6EUCxT3tAA05vrvlfABYh2P98i835xuZ7+IppTTb YF/fZAnj+lusN7iebZ3A9oFSfy803NjPtx0dx9yUgFUqPuzi5G6HyikhUQkhhivG VbH7JdnkoOvS+5CJgsH2EvZVl65b/GKFgDq8pa9gJ05ecBor8EoNNw/y3okq32TR Ej00tpA2pJCrJX/Cw4hcg7MEcjp1EFzA+qL0toslWy1Sm3nEL7IFtG/IgO4xn3FZ 7Fsj5ATNXIco5OV0mcLUfOxnrvbwECR1uN8j0ynXazrrVUkhXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXnReq0yabpPPbaSnQw5s61hC1mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmU4NjFkZWEtZDcyYi0z YmYzLTliOTYtZGJjYmMwMTE0YTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBruf8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEtdNuMhJ04VuCXRDvXQcyIG3G28HwrkAB/lDys0Sf6AEReoxPsjoLx K2PKFi7zGC6lYEVOud6RSAefItgFdS1FzUdmoiGRHkwtWQzJAlvwGGz4x29Tnwv4 NdOuKtdWYES8gNA99LZNKt36hHSodNiW0AhozXsUuo7VaZPcnWCcBgnHBAMlfCDO +nky/m8j0LgNf9J+rBvYrj8w2SvkGv1MjxS1dsiEiUOeoYsxZT8ex1tLDPXldpZs Gy2v0/+Sy65nwAbWz/aS4P2vj/Xa4MQCMKyJvHvEvLLraWBT4IyhlIJwwnM9QXdi ODntGv1BuRntqOmvcoZ6AKp2BqU/n2Q= -----END CERTIFICATE-----Generated at Mon Oct 20 16:54:32 2025 by rpki-client