$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3e9ba061-ed94-3473-abfa-0fa77da6d25c.roa File: 3e9ba061-ed94-3473-abfa-0fa77da6d25c.roa (raw, json) Hash identifier: 44Z8J7homIEbXXyiHHd48ZCkKkHxb/P9esdtmRKw5A8= Subject key identifier: CB:0E:04:84:FF:02:66:3D:A2:07:52:71:33:F6:40:23:94:73:49:50 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B8EAD07D575668F9A70AC6500 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3e9ba061-ed94-3473-abfa-0fa77da6d25c.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 22394 IP address blocks: 174.41.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ad:07:d5:75:66:8f:9a:70:ac:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=fc74a6bd-b548-4584-b858-709879dc7391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d9:54:6b:a0:e3:53:f3:10:e5:7e:fb:2e:95: 1a:42:66:07:f4:59:f7:4f:e9:c0:62:e7:f0:c3:0f: 05:c7:06:d1:19:60:56:93:20:8e:fe:bc:18:a7:b6: 02:80:29:bf:d5:a4:8f:40:4a:6c:bc:c5:3e:99:03: ad:18:6a:0e:c0:3f:99:83:ec:af:d3:58:60:6a:58: 12:50:22:d6:83:0c:54:4b:7e:ef:bd:8f:6b:08:3f: 5e:77:16:43:32:fa:8b:c3:32:1c:28:50:47:aa:ac: 17:e3:fd:23:af:11:91:89:b5:48:ca:0b:86:a0:bc: 09:e1:3a:b5:fb:47:e2:c6:49:ea:13:ee:e1:91:54: 14:ac:1d:f4:e4:37:74:bc:d1:95:f2:16:c7:a5:53: 3d:04:2d:12:f6:20:2c:6b:f1:39:59:74:3e:61:04: 63:4e:fe:b0:b1:ff:a6:94:cb:09:bf:31:c0:37:8d: f8:17:2b:1f:e9:49:00:41:4b:7e:c1:fd:e6:80:ef: 32:6f:df:ee:72:72:0e:ba:47:72:2b:67:90:a5:72: 7c:93:36:18:9a:b1:cb:20:64:fe:9f:b5:10:a2:8d: 19:3f:b8:d8:8d:3b:60:ed:c2:1d:7c:7f:e8:6b:c0: e0:be:b2:6a:5f:93:e7:31:59:9f:02:be:08:89:00: 6e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:0E:04:84:FF:02:66:3D:A2:07:52:71:33:F6:40:23:94:73:49:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3e9ba061-ed94-3473-abfa-0fa77da6d25c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.41.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:04:de:a2:35:06:35:94:ea:ce:99:73:d6:16:91:5a:db:89: 56:09:57:14:6f:56:0e:75:8d:39:cf:56:6f:f9:41:f2:32:be: 84:82:e9:d3:af:7b:13:2a:45:83:b1:9b:7a:0d:5f:ff:d2:2f: ef:87:5b:ce:10:be:df:47:28:cc:3b:78:d1:d1:59:d6:ba:95: c2:68:f0:5f:a6:90:ef:9f:c9:48:d6:26:ca:95:9a:8c:ec:cd: 68:45:df:b5:cb:3f:5c:34:e7:a5:7e:3b:df:1c:0d:79:c1:97: 51:ec:8e:be:72:eb:c2:0c:8f:7c:e7:1d:71:1b:f1:47:ed:0a: 86:b8:0a:78:69:17:f6:90:f0:3c:69:89:ff:9e:4d:89:fa:f7: 12:67:94:c9:8a:b5:34:15:06:fb:52:9e:a0:72:05:24:78:e9: ce:93:3b:d6:e0:0c:7c:65:37:3c:d3:e4:b0:c8:b9:c8:c3:4f: 31:56:70:36:8c:43:ca:17:e3:24:be:ec:6f:5d:0d:e9:02:21: 96:27:93:7e:ab:91:a7:b3:cb:05:ea:6d:00:1b:1b:42:29:0a: 17:e4:2b:98:98:8c:5b:aa:98:d9:2c:66:d7:c7:23:f5:3d:be: c5:5a:84:c0:97:c5:26:20:fd:42:69:d2:42:96:16:9e:dc:be: c5:63:ed:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrQfVdWaPmnCsZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ZmM3NGE2YmQtYjU0OC00NTg0LWI4NTgtNzA5ODc5ZGM3MzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtlUa6DjU/MQ5X77LpUaQmYH9Fn3T+nAYufw ww8FxwbRGWBWkyCO/rwYp7YCgCm/1aSPQEpsvMU+mQOtGGoOwD+Zg+yv01hgalgS UCLWgwxUS37vvY9rCD9edxZDMvqLwzIcKFBHqqwX4/0jrxGRibVIyguGoLwJ4Tq1 +0fixknqE+7hkVQUrB305Dd0vNGV8hbHpVM9BC0S9iAsa/E5WXQ+YQRjTv6wsf+m lMsJvzHAN434Fysf6UkAQUt+wf3mgO8yb9/ucnIOukdyK2eQpXJ8kzYYmrHLIGT+ n7UQoo0ZP7jYjTtg7cIdfH/oa8DgvrJqX5PnMVmfAr4IiQBuEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsOBIT/AmY9ogdScTP2QCOUc0lQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2U5YmEwNjEtZWQ5NC0z NDczLWFiZmEtMGZhNzdkYTZkMjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrimoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwE3qI1BjWU6s6Zc9YWkVrbiVYJVxRvVg51jTnPVm/5QfIyvoSC6dOv exMqRYOxm3oNX//SL++HW84Qvt9HKMw7eNHRWda6lcJo8F+mkO+fyUjWJsqVmozs zWhF37XLP1w056V+O98cDXnBl1Hsjr5y68IMj3znHXEb8UftCoa4CnhpF/aQ8Dxp if+eTYn69xJnlMmKtTQVBvtSnqByBSR46c6TO9bgDHxlNzzT5LDIucjDTzFWcDaM Q8oX4yS+7G9dDekCIZYnk36rkaezywXqbQAbG0IpChfkK5iYjFuqmNksZtfHI/U9 vsVahMCXxSYg/UJp0kKWFp7cvsVj7Us= -----END CERTIFICATE-----Generated at Mon Oct 20 17:54:03 2025 by rpki-client