$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fa422b1-6c2f-3cdd-941e-11db0b48a6be.roa File: 3fa422b1-6c2f-3cdd-941e-11db0b48a6be.roa (raw, json) Hash identifier: x79W+R/1FZhv7LnD9zaDkomeLZCF1s0kaCnZNZOVg6k= Subject key identifier: 5D:02:8E:1D:17:D9:93:EE:72:70:60:67:39:1A:E7:23:9F:29:AA:CA Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B87B22F9C3F3BBAA5F050E000 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fa422b1-6c2f-3cdd-941e-11db0b48a6be.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 6167 IP address blocks: 174.234.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:2f:9c:3f:3b:ba:a5:f0:50:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=bb092f7f-d78b-4bc1-915f-aa02f774dc56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:01:a0:a9:d6:b5:ff:42:cb:f7:0e:3b:b8:3c: d3:a3:05:ac:2d:9a:f9:07:83:eb:d4:b5:27:94:32: f7:b5:40:99:e9:2f:c5:06:61:9e:9f:39:09:1f:26: f2:93:c3:96:8d:4e:4e:6f:27:65:e9:25:27:9e:5b: f1:cf:c0:56:91:bd:7a:17:71:c8:a5:c7:32:a0:20: c4:89:23:41:c3:5b:8e:8d:63:d4:00:68:5e:7d:8f: c6:07:ed:35:67:7a:53:e8:e9:4c:7b:e4:23:4f:d9: cb:a8:02:97:05:f4:fe:81:07:84:23:31:db:24:81: 4d:f7:dc:4c:c8:6b:a9:77:00:1d:1a:9f:b8:ed:f9: 2a:34:e0:7b:ec:2e:41:2a:d7:a2:e8:22:61:be:06: 1f:41:57:97:07:6e:f8:cf:fc:47:40:f0:7b:67:58: 16:d6:87:07:7a:59:6c:00:ca:65:dd:fd:d2:72:b4: 8f:bd:2e:21:c4:be:5b:3f:f9:88:30:2a:8f:93:29: 9f:db:6b:32:43:26:2a:5b:77:28:95:ef:d0:a0:5c: 74:00:f0:e0:10:8c:ed:f1:8d:b8:80:85:cf:f3:db: 0e:04:b1:e4:62:8b:d7:4c:0a:89:2d:5a:cd:a6:2e: 62:47:52:81:84:6a:b5:e8:65:f9:0e:0f:a0:8e:e4: 82:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:02:8E:1D:17:D9:93:EE:72:70:60:67:39:1A:E7:23:9F:29:AA:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fa422b1-6c2f-3cdd-941e-11db0b48a6be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.234.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:69:9a:7c:26:c3:c2:6f:42:a9:fe:e5:8e:88:3d:8f:0c:e8: aa:a1:9d:18:7c:93:43:24:dc:65:a5:c6:6b:b8:94:d4:be:30: 9d:61:53:65:58:84:31:15:ba:30:ea:6c:8f:ee:ef:d1:37:fe: ad:16:04:10:d9:e7:c6:75:34:e5:5a:e7:8f:2c:6a:39:2d:a3: 75:99:eb:06:ae:52:42:99:22:09:7f:15:7a:57:13:d8:e8:9f: 6b:db:51:60:e3:36:99:5f:68:0f:fb:9c:69:5f:df:11:a9:e5: 8a:e9:28:25:3b:27:53:b0:51:41:d5:4c:3d:15:b4:08:f3:8a: 18:9a:1b:04:72:26:05:dd:81:a3:1c:39:f0:73:fe:d0:76:4f: bc:7d:c6:9a:10:ed:83:ac:55:e2:ef:09:4c:5c:c4:06:68:b1: 62:cd:ee:e4:e5:e8:7c:c7:54:5d:af:2c:21:63:78:f0:c7:c9: 54:9c:9d:09:d5:ae:56:3c:e4:27:2c:f1:84:7e:31:ee:bb:56: 3a:25:db:23:e8:0a:ef:8b:bc:4d:24:5c:d2:d3:2e:a0:41:6b: 4f:1a:d6:28:60:b3:39:7c:4e:0a:37:09:74:d3:a2:a0:3d:2a: 7b:80:1d:e5:ec:07:fd:37:6b:89:70:51:6a:4c:7f:0b:00:37: ce:2b:ea:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsi+cPzu6pfBQ4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk YmIwOTJmN2YtZDc4Yi00YmMxLTkxNWYtYWEwMmY3NzRkYzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugGgqda1/0LL9w47uDzTowWsLZr5B4Pr1LUn lDL3tUCZ6S/FBmGenzkJHybyk8OWjU5Obydl6SUnnlvxz8BWkb16F3HIpccyoCDE iSNBw1uOjWPUAGhefY/GB+01Z3pT6OlMe+QjT9nLqAKXBfT+gQeEIzHbJIFN99xM yGupdwAdGp+47fkqNOB77C5BKtei6CJhvgYfQVeXB274z/xHQPB7Z1gW1ocHells AMpl3f3ScrSPvS4hxL5bP/mIMCqPkymf22syQyYqW3cole/QoFx0APDgEIzt8Y24 gIXP89sOBLHkYovXTAqJLVrNpi5iR1KBhGq16GX5Dg+gjuSCPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0Cjh0X2ZPucnBgZzka5yOfKarKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2ZhNDIyYjEtNmMyZi0z Y2RkLTk0MWUtMTFkYjBiNDhhNmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVpmnwmw8JvQqn+5Y6IPY8M6KqhnRh8k0Mk3GWlxmu4lNS+MJ1hU2VY hDEVujDqbI/u79E3/q0WBBDZ58Z1NOVa548sajkto3WZ6wauUkKZIgl/FXpXE9jo n2vbUWDjNplfaA/7nGlf3xGp5YrpKCU7J1OwUUHVTD0VtAjzihiaGwRyJgXdgaMc OfBz/tB2T7x9xpoQ7YOsVeLvCUxcxAZosWLN7uTl6HzHVF2vLCFjePDHyVScnQnV rlY85Ccs8YR+Me67Vjol2yPoCu+LvE0kXNLTLqBBa08a1ihgszl8Tgo3CXTToqA9 KnuAHeXsB/03a4lwUWpMfwsAN84r6ng= -----END CERTIFICATE-----Generated at Mon Oct 20 17:51:01 2025 by rpki-client