$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/40c5302c-2184-3178-aba6-e484f415100b.roa File: 40c5302c-2184-3178-aba6-e484f415100b.roa (raw, json) Hash identifier: yigw8EX0lzx4GPanAf0+G7rRxBD5y1mh2Lb9Lp+Ur1o= Subject key identifier: 90:83:7A:AA:70:0D:BE:07:6A:D4:68:18:7D:87:B0:B1:87:E5:F8:2D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B87B22F0726E55C4FE65F53E0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/40c5302c-2184-3178-aba6-e484f415100b.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 6167 IP address blocks: 174.232.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:2f:07:26:e5:5c:4f:e6:5f:53:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=913c2bfd-b91c-4b70-8feb-950cb9e39da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:49:19:62:95:95:8e:28:12:98:0a:b0:1f:7a: 04:ee:25:08:8d:3c:15:e5:40:d8:bf:2a:f6:09:bd: 66:83:c8:97:a1:25:9d:49:c0:70:3b:9d:a9:4f:d4: f1:41:61:cd:3b:c1:a5:0c:45:4f:c7:ca:8f:e0:72: 2b:7f:e0:43:35:53:de:d4:55:3e:57:d2:8c:f0:2c: 5c:8c:7f:ef:70:12:37:bd:b7:c3:3d:d6:c8:09:46: ba:b0:1b:6f:5d:c2:5f:50:5e:bf:a8:d9:2a:a2:90: 61:66:1d:8f:19:a9:95:be:8b:ad:b8:cf:89:c8:58: dd:ad:89:e1:7d:a0:55:b3:62:1b:18:e3:e0:4f:f8: 5c:ba:88:bf:85:0e:cf:ec:d9:56:8c:55:d0:6c:13: b5:07:23:ae:e5:3d:9e:ce:41:ea:e9:01:93:c3:02: 85:d8:e5:d9:0c:ab:5f:dc:1c:fe:25:22:d0:eb:03: 8d:0b:03:0f:f0:10:a1:05:e4:fa:8e:bf:2f:73:dc: fe:64:e2:28:83:94:73:0a:74:69:09:78:49:17:c8: 17:44:76:67:a1:0d:f7:d4:03:52:20:3a:2e:aa:58: 82:29:9f:c0:ca:cc:ad:98:e8:d1:1a:25:42:59:10: 5c:1b:c2:c5:f4:23:b6:0c:6a:e5:1f:58:9a:39:be: a7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:83:7A:AA:70:0D:BE:07:6A:D4:68:18:7D:87:B0:B1:87:E5:F8:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/40c5302c-2184-3178-aba6-e484f415100b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.232.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:80:dc:a5:47:29:f1:6c:a1:89:76:99:cc:0f:2f:4c:1a:21: 89:bb:a7:dc:5b:17:87:d1:af:d7:0d:88:a3:b9:c1:a7:2e:2e: 3a:ca:77:d3:0a:6b:68:5b:16:f6:2d:d1:1a:21:28:b8:8a:1e: 49:b6:69:46:5e:1f:03:cf:ee:a3:f6:00:37:9c:05:f3:72:05: 56:c2:14:fb:79:aa:c7:35:c6:92:26:fb:e3:49:bf:a8:fa:fc: 3f:69:4f:34:24:5e:1b:8e:5e:18:44:b5:2f:a4:5f:de:9d:2b: ab:d8:df:5c:d5:59:26:b1:6d:a4:9e:b5:3f:6a:bc:22:14:5b: 42:ed:f2:27:1b:69:93:11:8e:fc:98:fb:da:09:b6:c9:d2:ca: 94:bf:1a:b8:a7:65:c6:63:f3:dd:3c:63:15:e8:86:7c:14:dd: 10:f5:5d:15:a1:f3:b9:d0:4d:41:45:8f:c7:81:4a:de:2e:b2: 70:9e:22:6d:12:b4:25:e2:47:f9:8a:8b:31:f3:be:08:f2:e2: 7b:3c:07:6d:87:e8:43:83:04:a2:8c:2a:7a:1a:4e:aa:24:94: 91:d7:e4:54:7e:ee:e7:02:54:bc:0f:1d:8b:46:9f:cb:b6:b8: 2a:87:95:2b:1a:3f:02:16:f9:b5:ff:04:a5:99:d8:e1:ba:8e: 4e:49:50:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsi8HJuVcT+ZfU+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk OTEzYzJiZmQtYjkxYy00YjcwLThmZWItOTUwY2I5ZTM5ZGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEkZYpWVjigSmAqwH3oE7iUIjTwV5UDYvyr2 Cb1mg8iXoSWdScBwO52pT9TxQWHNO8GlDEVPx8qP4HIrf+BDNVPe1FU+V9KM8Cxc jH/vcBI3vbfDPdbICUa6sBtvXcJfUF6/qNkqopBhZh2PGamVvoutuM+JyFjdrYnh faBVs2IbGOPgT/hcuoi/hQ7P7NlWjFXQbBO1ByOu5T2ezkHq6QGTwwKF2OXZDKtf 3Bz+JSLQ6wONCwMP8BChBeT6jr8vc9z+ZOIog5RzCnRpCXhJF8gXRHZnoQ331ANS IDouqliCKZ/AysytmOjRGiVCWRBcG8LF9CO2DGrlH1iaOb6nFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCDeqpwDb4HatRoGH2HsLGH5fgtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDBjNTMwMmMtMjE4NC0z MTc4LWFiYTYtZTQ4NGY0MTUxMDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrujuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWA3KVHKfFsoYl2mcwPL0waIYm7p9xbF4fRr9cNiKO5wacuLjrKd9MK a2hbFvYt0RohKLiKHkm2aUZeHwPP7qP2ADecBfNyBVbCFPt5qsc1xpIm++NJv6j6 /D9pTzQkXhuOXhhEtS+kX96dK6vY31zVWSaxbaSetT9qvCIUW0Lt8icbaZMRjvyY +9oJtsnSypS/GrinZcZj8908YxXohnwU3RD1XRWh87nQTUFFj8eBSt4usnCeIm0S tCXiR/mKizHzvgjy4ns8B22H6EODBKKMKnoaTqoklJHX5FR+7ucCVLwPHYtGn8u2 uCqHlSsaPwIW+bX/BKWZ2OG6jk5JUCI= -----END CERTIFICATE-----Generated at Mon Oct 20 17:50:18 2025 by rpki-client