$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3abac57a-acbf-36e5-86d0-4b174393283c.roa File: 3abac57a-acbf-36e5-86d0-4b174393283c.roa (raw, json) Hash identifier: nlYuvSqXGv4Miccc8o25hsCMygX42zgZKJdJFslR7EY= Subject key identifier: 98:20:C4:AD:7D:B3:97:5D:2C:A9:39:54:3D:A3:4E:3E:3D:CE:27:AD Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B87B2316880FF0E9265334180 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3abac57a-acbf-36e5-86d0-4b174393283c.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 6167 IP address blocks: 174.236.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:31:68:80:ff:0e:92:65:33:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=1195e6f2-63d8-449d-9eae-1359bb5e66ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:17:8f:7b:51:c0:2d:bb:46:d4:fd:30:c7:50: b5:59:c7:d7:fa:cc:35:7a:b4:5c:85:f0:6b:cf:f3: 72:f0:53:41:57:4b:38:6f:64:3a:95:c1:0a:95:47: 0e:a0:da:ce:db:41:db:80:3b:52:ee:f0:8c:a0:35: 2b:3a:13:03:3a:2b:9d:3e:c5:77:20:92:45:8c:d9: 31:14:92:b3:e6:47:f6:79:50:d8:e5:b9:f9:ed:a7: c3:aa:48:78:cb:68:54:13:2d:b0:e5:a9:dd:e2:68: 57:84:cd:4e:5f:12:2a:cd:dc:5f:b3:2a:a4:04:8d: 78:17:08:e5:e0:73:8c:3c:2f:63:50:97:66:0c:bb: ec:33:9d:c5:2d:a6:e1:11:07:38:62:51:f4:a7:4c: 56:9e:d6:90:a2:c1:d4:d7:d7:f9:35:d1:2f:0d:c2: 36:bb:be:af:c3:36:d2:d5:e3:2c:51:ea:46:62:29: 24:8d:18:21:9f:b9:e5:f1:f5:aa:bb:e9:a5:21:a9: c3:3d:fd:b6:8a:cc:e8:89:16:49:3d:74:c1:6e:fc: a4:6b:ad:3b:33:d7:f8:b0:82:84:10:7b:bb:5f:db: 64:02:91:73:47:1f:cc:e3:ab:f6:75:3b:f3:e9:64: 0e:bc:17:a9:8b:30:f3:b4:fe:1a:93:0e:34:6c:1e: 4f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:20:C4:AD:7D:B3:97:5D:2C:A9:39:54:3D:A3:4E:3E:3D:CE:27:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3abac57a-acbf-36e5-86d0-4b174393283c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.236.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:a0:3e:5b:44:66:8d:83:6a:7d:b7:e4:4c:df:40:71:26:58: 29:0f:64:b5:63:f0:ba:fd:73:55:72:2a:a3:b3:b3:6c:ee:6e: 7c:86:61:34:f1:20:cd:18:49:7e:b8:5e:a0:af:fe:b6:de:f9: 3f:7d:a8:31:80:ef:62:67:33:a3:55:58:33:b1:5c:f6:a3:0e: 04:b4:6c:5d:e7:ed:e1:fa:63:91:06:68:b0:22:e8:89:ab:5d: 26:e1:2c:10:9b:19:7e:36:0b:5a:c8:61:a0:2c:b8:46:f1:ac: 72:57:b0:07:b4:e5:8f:57:c3:12:ca:d5:84:9e:0a:e3:38:54: e3:d1:b6:00:15:46:f0:7e:83:70:ff:ed:82:68:22:20:9f:36: c9:fb:54:2a:9a:2e:7e:7b:b4:c3:4e:1b:44:f1:3b:ad:b6:13: 4f:0b:9b:63:c5:05:db:da:10:94:4f:79:b5:39:b7:9b:92:80: 9a:31:b1:7e:d0:fd:1a:3d:c9:d8:16:48:ea:d0:27:47:bf:bc: 56:6b:88:e0:a1:af:f3:46:fe:f7:f1:91:14:79:52:bb:00:cd: f0:b2:a3:5e:43:e8:cb:4d:2a:e9:d7:1a:6a:b7:80:c8:b0:6a: 6b:ae:df:51:87:20:09:75:3a:69:a0:99:b9:7d:95:72:10:e6: 5a:82:59:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsjFogP8OkmUzQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk MTE5NWU2ZjItNjNkOC00NDlkLTllYWUtMTM1OWJiNWU2NmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxePe1HALbtG1P0wx1C1WcfX+sw1erRchfBr z/Ny8FNBV0s4b2Q6lcEKlUcOoNrO20HbgDtS7vCMoDUrOhMDOiudPsV3IJJFjNkx FJKz5kf2eVDY5bn57afDqkh4y2hUEy2w5and4mhXhM1OXxIqzdxfsyqkBI14Fwjl 4HOMPC9jUJdmDLvsM53FLabhEQc4YlH0p0xWntaQosHU19f5NdEvDcI2u76vwzbS 1eMsUepGYikkjRghn7nl8fWqu+mlIanDPf22iszoiRZJPXTBbvyka607M9f4sIKE EHu7X9tkApFzRx/M46v2dTvz6WQOvBepizDztP4akw40bB5PuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJggxK19s5ddLKk5VD2jTj49zietMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2FiYWM1N2EtYWNiZi0z NmU1LTg2ZDAtNGIxNzQzOTMyODNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCruyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSgPltEZo2Dan235EzfQHEmWCkPZLVj8Lr9c1VyKqOzs2zubnyGYTTx IM0YSX64XqCv/rbe+T99qDGA72JnM6NVWDOxXPajDgS0bF3n7eH6Y5EGaLAi6Imr XSbhLBCbGX42C1rIYaAsuEbxrHJXsAe05Y9XwxLK1YSeCuM4VOPRtgAVRvB+g3D/ 7YJoIiCfNsn7VCqaLn57tMNOG0TxO622E08Lm2PFBdvaEJRPebU5t5uSgJoxsX7Q /Ro9ydgWSOrQJ0e/vFZriOChr/NG/vfxkRR5UrsAzfCyo15D6MtNKunXGmq3gMiw amuu31GHIAl1Ommgmbl9lXIQ5lqCWeY= -----END CERTIFICATE-----Generated at Mon Oct 20 15:10:01 2025 by rpki-client