$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/587d980a-d94c-3bef-a823-4608fb7bf8e0.roa File: 587d980a-d94c-3bef-a823-4608fb7bf8e0.roa (raw, json) Hash identifier: vpT2CPLMMbmq3ppFHEQyvij0tvPskpU/5JNAO4zaN+c= Subject key identifier: B0:47:1E:DD:A8:03:2A:BE:5D:7E:8D:3A:A7:3F:F0:37:56:29:ED:70 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B87B23658AABA81367721C940 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/587d980a-d94c-3bef-a823-4608fb7bf8e0.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 6167 IP address blocks: 174.242.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:36:58:aa:ba:81:36:77:21:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=f9c5e1b1-0e5d-4a4e-a5fe-3cb2c606c467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ee:c4:71:7d:cd:c8:e2:8f:14:3b:02:4c:d4: 17:7b:94:07:53:87:ed:cf:f6:20:ab:4e:06:50:3f: 52:1a:0d:5f:89:ea:92:ac:bd:84:80:1e:cc:83:93: c4:d0:10:16:b4:4a:47:e7:c7:9c:f9:d3:50:bc:57: 0c:a5:c1:38:b0:0b:be:fd:d7:e7:6e:15:11:a0:aa: d8:9c:7e:4b:1b:83:46:83:fa:22:65:03:10:2f:67: fe:58:cc:3d:a8:55:f3:35:25:02:51:e1:8c:92:85: 65:b6:66:ba:ef:76:ff:91:c5:3e:e2:31:de:11:28: f8:30:72:a2:a5:9a:69:33:af:8c:f6:be:ed:60:78: 8d:77:a6:5a:50:94:e9:96:fd:8d:7d:9d:04:92:47: df:15:92:3b:e6:78:59:b0:d6:73:36:1b:01:d7:5c: 3c:db:20:f3:83:8a:97:a5:de:b6:a5:19:e5:4d:6d: fa:bd:4e:a5:79:e2:37:4d:61:29:e0:1e:bd:f0:34: c2:7f:26:bf:19:a9:5f:e2:3d:e2:5d:30:66:8b:7c: 96:d8:ef:21:88:c6:4f:f3:5d:f9:44:20:b9:74:7c: 59:df:01:1c:64:fa:77:29:0e:ae:31:14:41:80:bc: ea:06:eb:d5:2f:58:ca:23:1c:d7:ea:66:4b:eb:9f: 3d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:47:1E:DD:A8:03:2A:BE:5D:7E:8D:3A:A7:3F:F0:37:56:29:ED:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/587d980a-d94c-3bef-a823-4608fb7bf8e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.242.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:a4:d4:34:5d:3b:20:ea:4f:2a:9c:6f:79:2b:58:9c:45:58: d7:ad:25:12:72:39:0b:6d:2c:63:c5:f4:59:94:da:b5:93:76: 97:c8:4d:59:cf:29:37:10:2b:0e:03:ff:be:0a:d9:7f:57:c7: 4f:04:dc:e0:1c:aa:df:d2:ff:1e:a2:9a:0d:8f:9b:74:7b:8a: 0e:2d:3e:fe:8d:3c:57:41:b6:24:0a:55:dd:11:a1:d6:ec:77: 19:fc:d0:03:29:6b:17:f4:f6:cd:c6:9f:3d:1a:5f:25:c9:6f: 54:97:25:13:5e:7d:52:ca:97:7d:31:77:5a:42:06:af:84:43: d3:90:2e:b7:46:7e:7e:35:c0:45:b5:df:32:3f:24:29:3b:6b: e4:a8:25:14:2e:58:a1:5c:db:65:4b:f3:04:e3:2b:82:a3:4c: 03:84:fc:89:8a:90:f9:df:99:e2:45:1e:d0:f7:0d:ad:2e:81: e3:f5:79:d6:be:1e:73:7c:9e:b7:50:86:0d:97:cf:ab:f7:30: e8:65:5a:01:67:cb:ed:c5:de:82:60:1d:45:17:c2:16:bf:fc: b2:4d:f1:21:2a:4c:5e:65:9f:37:f0:1e:ae:d2:06:3c:60:41: 08:71:35:ec:8a:4c:cc:0e:9e:23:69:20:b5:b6:d7:15:24:5d: b0:ef:8e:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsjZYqrqBNnchyUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk ZjljNWUxYjEtMGU1ZC00YTRlLWE1ZmUtM2NiMmM2MDZjNDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte7EcX3NyOKPFDsCTNQXe5QHU4ftz/Ygq04G UD9SGg1fieqSrL2EgB7Mg5PE0BAWtEpH58ec+dNQvFcMpcE4sAu+/dfnbhURoKrY nH5LG4NGg/oiZQMQL2f+WMw9qFXzNSUCUeGMkoVltma673b/kcU+4jHeESj4MHKi pZppM6+M9r7tYHiNd6ZaUJTplv2NfZ0EkkffFZI75nhZsNZzNhsB11w82yDzg4qX pd62pRnlTW36vU6leeI3TWEp4B698DTCfya/Galf4j3iXTBmi3yW2O8hiMZP8135 RCC5dHxZ3wEcZPp3KQ6uMRRBgLzqBuvVL1jKIxzX6mZL6589pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBHHt2oAyq+XX6NOqc/8DdWKe1wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTg3ZDk4MGEtZDk0Yy0z YmVmLWE4MjMtNDYwOGZiN2JmOGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrvIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOk1DRdOyDqTyqcb3krWJxFWNetJRJyOQttLGPF9FmU2rWTdpfITVnP KTcQKw4D/74K2X9Xx08E3OAcqt/S/x6img2Pm3R7ig4tPv6NPFdBtiQKVd0Rodbs dxn80AMpaxf09s3Gnz0aXyXJb1SXJRNefVLKl30xd1pCBq+EQ9OQLrdGfn41wEW1 3zI/JCk7a+SoJRQuWKFc22VL8wTjK4KjTAOE/ImKkPnfmeJFHtD3Da0ugeP1eda+ HnN8nrdQhg2Xz6v3MOhlWgFny+3F3oJgHUUXwha//LJN8SEqTF5lnzfwHq7SBjxg QQhxNeyKTMwOniNpILW21xUkXbDvjtU= -----END CERTIFICATE-----Generated at Mon Oct 20 15:07:29 2025 by rpki-client