$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d96665b-8db9-3935-87ba-b42c94b9324c.roa File: 4d96665b-8db9-3935-87ba-b42c94b9324c.roa (raw, json) Hash identifier: 3e4x43MhZw2H3GLisut9LsbB7etCNYD0bWv5Ln17n/w= Subject key identifier: 43:D7:6B:0D:A8:F1:38:65:6D:F8:F1:C5:CF:E4:52:E5:BB:76:49:00 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B87B2345E55E560CE1A40F140 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d96665b-8db9-3935-87ba-b42c94b9324c.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 6167 IP address blocks: 174.240.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:34:5e:55:e5:60:ce:1a:40:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=6a5a8c31-4704-459c-8584-eaef2c2fbfdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fd:09:4a:4c:eb:1c:37:5f:b5:8d:a6:7b:38: e3:f8:ef:a3:ab:cd:a6:c4:59:7a:56:50:35:e3:cc: a1:d3:93:90:a8:36:ab:f1:6f:15:f3:53:f7:b8:21: 20:a6:9f:a3:ee:cc:e8:16:00:66:10:f3:b3:90:30: c9:8f:f5:cf:3d:dc:e0:20:11:9f:68:74:e5:06:4e: 9b:97:99:a2:57:8a:71:79:ff:03:9b:9e:dd:ba:40: 13:00:a4:ef:b5:90:b3:1f:cf:ad:c6:bc:a9:12:54: 10:20:1c:63:d8:aa:c5:61:2c:2b:35:08:c1:8c:b6: 45:df:41:d8:7b:18:75:47:1e:06:30:57:c2:f3:e7: bd:7d:5c:9a:27:e7:5c:c2:0b:01:fd:b7:14:f3:ca: 9d:3e:98:56:d5:24:14:1c:d5:97:9c:44:fb:50:96: dc:98:f7:0b:fa:c9:64:2e:90:42:45:ef:f1:d8:d4: 26:fe:87:21:36:9a:06:08:b3:36:0e:59:02:ed:77: eb:9e:6b:9c:66:39:8e:b0:0f:b1:1a:37:06:6f:5b: 05:5e:83:e9:79:74:91:22:a7:6d:45:14:3f:5b:6b: c3:90:e6:fa:a8:78:51:7e:7e:c9:9b:23:23:cd:c4: 5d:a7:e4:5c:54:41:7b:06:73:bd:07:fc:c2:ff:a4: cb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D7:6B:0D:A8:F1:38:65:6D:F8:F1:C5:CF:E4:52:E5:BB:76:49:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4d96665b-8db9-3935-87ba-b42c94b9324c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.240.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:99:04:99:83:28:74:7d:43:74:99:22:63:4e:60:d9:b2:47: 00:c2:9a:20:c6:fe:e5:19:33:c5:93:77:d0:d3:cf:38:f6:0e: 0a:68:e5:3f:e1:13:63:8c:14:c4:d0:a7:45:de:7b:22:99:3f: 83:23:6e:e8:ba:96:5e:97:c1:61:61:c7:59:c0:ca:41:c6:f4: d3:ed:c5:c1:32:46:56:82:60:40:09:13:a9:6e:d0:fe:b6:de: d8:56:12:c3:6a:eb:fd:1a:b4:69:51:00:7f:42:66:37:60:a7: 2f:68:9e:fc:32:4a:db:26:ed:0f:aa:06:3b:2b:e6:3b:a7:df: b4:d5:1a:65:e7:18:7f:f8:e6:54:a8:c1:12:db:e5:f2:87:aa: d8:0e:65:76:3a:b9:cb:64:a7:19:ff:12:db:24:be:1e:13:78: ef:10:2f:ed:78:36:18:cd:1d:7f:57:4c:4c:af:11:97:a2:27: e2:73:0b:ed:d9:38:80:87:1a:a3:d1:e1:9c:48:dd:09:c6:91: dd:7c:59:c3:45:0a:34:8a:d0:ab:3e:0e:e2:25:d7:12:26:dd: 9a:c1:1c:02:a5:b4:f8:e6:5f:84:29:32:e7:e5:25:92:fb:ba: 10:47:98:4f:11:b8:5f:52:62:30:b8:bc:cc:7a:eb:2f:14:f8: 64:ed:2f:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsjReVeVgzhpA8UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk NmE1YThjMzEtNDcwNC00NTljLTg1ODQtZWFlZjJjMmZiZmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjP0JSkzrHDdftY2mezjj+O+jq82mxFl6VlA1 48yh05OQqDar8W8V81P3uCEgpp+j7szoFgBmEPOzkDDJj/XPPdzgIBGfaHTlBk6b l5miV4pxef8Dm57dukATAKTvtZCzH8+txrypElQQIBxj2KrFYSwrNQjBjLZF30HY exh1Rx4GMFfC8+e9fVyaJ+dcwgsB/bcU88qdPphW1SQUHNWXnET7UJbcmPcL+slk LpBCRe/x2NQm/ochNpoGCLM2DlkC7XfrnmucZjmOsA+xGjcGb1sFXoPpeXSRIqdt RRQ/W2vDkOb6qHhRfn7JmyMjzcRdp+RcVEF7BnO9B/zC/6TLyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPXaw2o8Thlbfjxxc/kUuW7dkkAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGQ5NjY2NWItOGRiOS0z OTM1LTg3YmEtYjQyYzk0YjkzMjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErvBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKyZBJmDKHR9Q3SZImNOYNmyRwDCmiDG/uUZM8WTd9DTzzj2Dgpo5T/h E2OMFMTQp0XeeyKZP4Mjbui6ll6XwWFhx1nAykHG9NPtxcEyRlaCYEAJE6lu0P62 3thWEsNq6/0atGlRAH9CZjdgpy9onvwyStsm7Q+qBjsr5jun37TVGmXnGH/45lSo wRLb5fKHqtgOZXY6uctkpxn/Etskvh4TeO8QL+14NhjNHX9XTEyvEZeiJ+JzC+3Z OICHGqPR4ZxI3QnGkd18WcNFCjSK0Ks+DuIl1xIm3ZrBHAKltPjmX4QpMuflJZL7 uhBHmE8RuF9SYjC4vMx66y8U+GTtL3I= -----END CERTIFICATE-----Generated at Mon Oct 20 17:56:13 2025 by rpki-client