$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c8339e7-51a3-3e7a-b731-7f602bcb1a0c.roa File: 4c8339e7-51a3-3e7a-b731-7f602bcb1a0c.roa (raw, json) Hash identifier: myTnu0YiMHDsn3zHwj01kQwGqpBxRUNITnOfKBSLy2I= Subject key identifier: 13:28:BF:AB:58:B2:7C:17:D6:81:11:B4:ED:B3:A1:30:B4:AF:C4:74 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B8EAD071D1D85180543205780 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c8339e7-51a3-3e7a-b731-7f602bcb1a0c.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 22394 IP address blocks: 174.41.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ad:07:1d:1d:85:18:05:43:20:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=b37ef459-3459-4dc6-8b20-fe2245a5387f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:77:c5:66:b4:85:49:7b:5a:c2:3e:8e:64:c8: 32:67:30:8d:d5:87:30:ac:92:2b:06:c1:c5:6e:87: 00:d4:26:9e:4a:28:a3:86:bb:92:9d:16:38:34:a8: e6:14:ec:1b:1c:1f:68:ba:ec:ef:9c:ed:ee:95:cd: 18:d4:5e:00:59:a6:6a:19:f8:64:c2:4b:4f:c6:17: 63:59:47:76:2a:a9:81:89:28:68:ea:81:1e:9a:eb: 79:fa:17:b8:61:89:9c:f2:bd:09:19:67:4a:81:e5: f8:54:be:09:52:72:45:f4:db:a6:d0:e8:09:2d:ce: db:e1:3e:c3:27:95:ec:72:4a:59:62:97:46:54:ee: 13:eb:7a:12:2c:f3:9c:81:f5:1c:3a:4f:93:42:59: 96:c7:05:5b:6d:08:34:2f:d6:37:79:73:0c:46:cc: 32:38:b4:ba:58:d3:75:f0:0d:be:e7:71:a6:f1:39: 56:7e:10:f4:e9:55:5b:a0:8d:e9:37:20:0f:2c:33: e6:9e:59:83:66:63:4b:61:8e:a0:33:4b:2e:5a:e2: 85:6c:d3:22:96:e5:9e:75:9f:31:26:5e:ad:2c:e1: df:83:7a:86:0c:48:bf:e8:b1:60:88:01:7a:e1:cf: a4:4a:41:8d:af:0d:10:ae:d0:06:da:a7:fe:73:84: 91:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:28:BF:AB:58:B2:7C:17:D6:81:11:B4:ED:B3:A1:30:B4:AF:C4:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4c8339e7-51a3-3e7a-b731-7f602bcb1a0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.41.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:52:cf:60:32:8e:47:74:7a:a4:12:26:99:90:21:fa:06:da: 1c:89:51:ce:6f:be:fb:74:6c:d9:03:83:dd:4c:79:5f:d9:8b: 5c:08:d1:23:56:e4:60:08:c5:65:7e:13:95:e0:e1:dd:b6:b8: ef:dc:f6:42:3b:dc:e2:6d:f7:3d:d5:9f:21:0e:7f:75:67:a7: a6:49:78:a8:24:63:ae:d9:d6:cd:4c:e7:f0:76:9d:a5:46:89: 2d:79:05:a3:b9:e6:5b:46:47:cd:95:a8:43:07:be:ff:0c:4b: 7c:a6:5f:7a:96:2f:5e:de:a6:f7:0f:3f:79:fe:43:7d:3c:16: dd:73:bc:3f:ae:4e:93:4e:bb:93:c1:20:0f:92:31:a8:c3:17: 5e:62:17:98:8a:a6:b5:9f:e7:30:7b:b9:3f:f2:d1:a2:0a:0e: ab:6b:9e:8a:ca:2e:09:e2:77:4b:b7:55:32:4a:82:fc:e6:fc: 0d:93:3f:17:9b:f6:33:2c:6d:fa:26:b6:9c:05:7f:ef:49:3b: 75:ea:3f:1d:1f:e5:c9:07:4e:a3:5e:b6:b9:ea:21:bf:75:cf: 72:3f:6c:7e:64:f8:b4:88:5a:a0:3e:80:df:4b:f7:32:65:cd: ee:68:dd:3f:ba:10:07:3e:43:26:b9:ed:eb:c8:d9:88:0c:20: 99:b7:01:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrQcdHYUYBUMgV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk YjM3ZWY0NTktMzQ1OS00ZGM2LThiMjAtZmUyMjQ1YTUzODdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnfFZrSFSXtawj6OZMgyZzCN1YcwrJIrBsHF bocA1CaeSiijhruSnRY4NKjmFOwbHB9ouuzvnO3ulc0Y1F4AWaZqGfhkwktPxhdj WUd2KqmBiSho6oEemut5+he4YYmc8r0JGWdKgeX4VL4JUnJF9Num0OgJLc7b4T7D J5XsckpZYpdGVO4T63oSLPOcgfUcOk+TQlmWxwVbbQg0L9Y3eXMMRswyOLS6WNN1 8A2+53Gm8TlWfhD06VVboI3pNyAPLDPmnlmDZmNLYY6gM0suWuKFbNMiluWedZ8x Jl6tLOHfg3qGDEi/6LFgiAF64c+kSkGNrw0QrtAG2qf+c4SRAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMov6tYsnwX1oERtO2zoTC0r8R0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGM4MzM5ZTctNTFhMy0z ZTdhLWI3MzEtN2Y2MDJiY2IxYTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrim6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1Sz2Ayjkd0eqQSJpmQIfoG2hyJUc5vvvt0bNkDg91MeV/Zi1wI0SNW 5GAIxWV+E5Xg4d22uO/c9kI73OJt9z3VnyEOf3Vnp6ZJeKgkY67Z1s1M5/B2naVG iS15BaO55ltGR82VqEMHvv8MS3ymX3qWL17epvcPP3n+Q308Ft1zvD+uTpNOu5PB IA+SMajDF15iF5iKprWf5zB7uT/y0aIKDqtrnorKLgnid0u3VTJKgvzm/A2TPxeb 9jMsbfomtpwFf+9JO3XqPx0f5ckHTqNetrnqIb91z3I/bH5k+LSIWqA+gN9L9zJl ze5o3T+6EAc+Qya57evI2YgMIJm3AYw= -----END CERTIFICATE-----Generated at Mon Oct 20 15:32:49 2025 by rpki-client