$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/30a1a7b7-a84c-356a-a268-00fd65e48fa4.roa File: 30a1a7b7-a84c-356a-a268-00fd65e48fa4.roa (raw, json) Hash identifier: Kbz9k58aGfTeQ/xKBtbC+1OMH7nT3kfpXrpU1mTWvA4= Subject key identifier: C7:D1:E5:E9:A4:B3:13:46:1A:C2:2D:01:E1:4F:F7:15:7A:FA:8E:80 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B609C97F572463864FD4BF400 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/30a1a7b7-a84c-356a-a268-00fd65e48fa4.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 6167 IP address blocks: 174.201.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:97:f5:72:46:38:64:fd:4b:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=ce7d36b6-037f-4f1d-9569-dc91a1e16f49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9f:26:0f:9a:08:b9:2c:d9:af:a1:60:5d:c2: 72:5c:56:e0:5e:61:48:1f:1d:6a:b1:01:41:be:b7: b0:d5:ab:68:b1:a6:3c:01:7a:d4:c1:74:9f:de:ba: 5f:49:ee:00:65:2a:fe:e9:d9:98:19:21:16:e4:ca: b9:45:68:a5:dd:1b:48:f0:8f:22:51:8d:4a:2d:5f: 9e:cb:36:ba:26:0c:33:97:97:b2:e5:a9:08:c8:bf: 3d:43:5d:ec:a9:63:25:df:ca:ed:2e:14:57:3c:3f: 99:df:63:e2:77:7e:9b:1d:a3:06:61:41:89:12:03: d8:30:97:38:ec:89:3e:04:48:6d:e0:9f:82:85:dc: 0e:c4:1a:93:ad:92:ad:6e:e5:86:41:78:00:1f:22: 15:e5:83:20:60:0e:ab:a9:59:32:27:44:fe:bd:0a: c1:69:c2:8b:45:9c:4a:61:88:a3:bb:a6:f1:c8:f3: e7:47:88:a7:c8:89:bf:1f:a0:ba:7d:ab:20:5d:c8: 2e:cc:73:f8:d2:af:b2:77:b5:fa:2c:00:a4:79:aa: 13:9a:8c:11:07:46:0e:31:9f:85:ea:77:0c:dd:66: 17:28:cc:b3:fb:ad:6f:94:dc:0e:60:f6:eb:98:78: f8:28:a8:9f:57:b7:63:5a:19:19:f2:91:70:2e:db: fb:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D1:E5:E9:A4:B3:13:46:1A:C2:2D:01:E1:4F:F7:15:7A:FA:8E:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/30a1a7b7-a84c-356a-a268-00fd65e48fa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.201.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:3c:c6:1e:f5:e2:35:23:fc:4c:6d:cf:9e:78:dc:5f:b6:e1: 7c:40:32:ac:84:d8:7e:6f:23:02:3c:19:cd:be:f4:54:3c:01: 18:6d:fa:22:37:d6:3e:28:a3:a8:f3:3e:6b:33:60:f2:5a:6f: 8a:47:ae:4f:af:65:f2:19:c0:11:61:85:33:be:5f:47:3d:93: 17:2b:22:17:ff:71:f4:b3:98:72:ee:80:29:df:96:91:70:9a: 4f:a7:08:cf:f8:67:a4:ca:ec:16:72:22:73:3f:d9:53:75:ef: 12:fd:93:21:1a:af:60:5c:00:2e:09:65:06:89:bf:a7:db:50: ab:3f:04:ff:17:e6:f5:76:44:ac:c7:66:ff:cc:77:50:fa:e2: 79:ec:40:9d:cb:d8:4d:16:0c:42:a7:3b:b0:be:54:a5:76:21: 12:9c:2e:f9:cf:c1:f3:49:94:b7:80:38:53:31:84:39:18:cc: c6:08:83:b9:50:05:ba:59:1a:22:86:a6:26:be:38:b7:65:40: fb:3e:41:e6:0d:4a:16:3c:90:5e:ed:a7:42:ad:11:5c:98:28: b3:67:04:af:c5:dd:99:77:96:19:e8:3f:02:50:95:98:8d:93: 7e:49:8c:7c:4b:62:b3:44:5e:c9:b7:ce:58:12:3b:1e:01:18: 8b:27:75:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnJf1ckY4ZP1L9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk Y2U3ZDM2YjYtMDM3Zi00ZjFkLTk1NjktZGM5MWExZTE2ZjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq58mD5oIuSzZr6FgXcJyXFbgXmFIHx1qsQFB vrew1atosaY8AXrUwXSf3rpfSe4AZSr+6dmYGSEW5Mq5RWil3RtI8I8iUY1KLV+e yza6Jgwzl5ey5akIyL89Q13sqWMl38rtLhRXPD+Z32Pid36bHaMGYUGJEgPYMJc4 7Ik+BEht4J+ChdwOxBqTrZKtbuWGQXgAHyIV5YMgYA6rqVkyJ0T+vQrBacKLRZxK YYiju6bxyPPnR4inyIm/H6C6fasgXcguzHP40q+yd7X6LACkeaoTmowRB0YOMZ+F 6ncM3WYXKMyz+61vlNwOYPbrmHj4KKifV7djWhkZ8pFwLtv7HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfR5emksxNGGsItAeFP9xV6+o6AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzBhMWE3YjctYTg0Yy0z NTZhLWEyNjgtMDBmZDY1ZTQ4ZmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErsmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG08xh714jUj/Extz5543F+24XxAMqyE2H5vIwI8Gc2+9FQ8ARht+iI3 1j4oo6jzPmszYPJab4pHrk+vZfIZwBFhhTO+X0c9kxcrIhf/cfSzmHLugCnflpFw mk+nCM/4Z6TK7BZyInM/2VN17xL9kyEar2BcAC4JZQaJv6fbUKs/BP8X5vV2RKzH Zv/Md1D64nnsQJ3L2E0WDEKnO7C+VKV2IRKcLvnPwfNJlLeAOFMxhDkYzMYIg7lQ BbpZGiKGpia+OLdlQPs+QeYNShY8kF7tp0KtEVyYKLNnBK/F3Zl3lhnoPwJQlZiN k35JjHxLYrNEXsm3zlgSOx4BGIsndeY= -----END CERTIFICATE-----Generated at Mon Oct 20 12:04:56 2025 by rpki-client