$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/58e656d0-1e86-36aa-83c9-58b19e41f6f3.roa File: 58e656d0-1e86-36aa-83c9-58b19e41f6f3.roa (raw, json) Hash identifier: Vl3+yB9xRSZt7dsDj0VzQvVS4f+D1zvEyjEXil5xZgU= Subject key identifier: F1:A4:B5:69:3F:08:D5:0F:86:F5:84:16:80:35:C5:14:33:2C:0F:9C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B87B22AE241E0545404EB0C60 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/58e656d0-1e86-36aa-83c9-58b19e41f6f3.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 6167 IP address blocks: 174.226.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:2a:e2:41:e0:54:54:04:eb:0c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=b103214e-a4dd-4fc7-a637-2688231d9ac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c5:7e:b9:2b:75:77:5f:6b:1f:e9:fa:d0:54: f5:27:84:7a:44:e5:aa:51:78:84:2e:fc:85:5f:e0: 26:9c:43:21:7d:83:b7:7a:27:69:4b:04:c8:32:94: bf:e6:ad:a9:f4:20:ee:41:a9:7e:bb:75:8d:5c:64: d5:6b:75:48:87:37:9a:a4:ec:17:fa:b9:c8:9f:99: a8:ac:50:81:cb:5f:3d:69:44:0b:49:9f:69:5b:a2: c1:0f:82:c1:32:3b:e1:d8:81:1b:64:87:26:50:41: 51:71:5f:3c:3d:f0:2e:bd:84:d1:5f:ca:dd:90:14: 3d:0c:c8:e3:d2:a9:36:87:06:72:f9:24:b6:a8:5f: 58:75:25:93:ef:50:e0:11:bd:18:c9:95:94:a8:2e: c3:ac:6f:d5:8a:95:3a:1f:be:97:e0:bd:62:a4:66: cd:cb:c9:56:47:43:1e:05:b6:51:40:0e:71:c2:be: 07:ef:ac:47:e3:69:1d:0c:7c:92:be:d4:db:e6:48: 8f:e0:d5:6b:09:f5:ad:b0:30:14:07:9e:f4:cd:97: 86:8f:b8:cd:4b:2a:46:32:9d:40:2f:72:8f:b7:30: 69:5f:92:19:ad:aa:97:eb:eb:6e:4b:e5:c6:88:bd: b3:5a:9e:47:10:26:9a:13:50:51:d5:d6:4e:b5:1e: 72:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A4:B5:69:3F:08:D5:0F:86:F5:84:16:80:35:C5:14:33:2C:0F:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/58e656d0-1e86-36aa-83c9-58b19e41f6f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.226.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:0a:8c:67:81:97:5b:9e:10:cd:cc:51:a8:67:1d:b3:b6:02: 23:49:d6:41:a0:31:04:ed:68:53:0d:91:b0:18:3c:4e:1f:34: 82:7e:a2:7c:11:6b:b7:e5:c4:97:42:6a:6f:38:ff:be:f4:fd: 94:28:ca:b6:98:a7:db:ee:fa:bf:15:db:f4:77:69:a2:6c:8f: 67:e7:21:09:ef:fd:08:aa:82:1c:62:e9:2d:ab:4e:da:57:1d: 1a:b2:27:99:fe:3e:37:eb:84:69:49:63:fb:69:f5:b9:14:9d: 64:e1:5e:d5:35:ad:ca:99:ed:53:38:21:a8:9e:79:01:43:a8: 2b:3b:32:fc:42:4d:5e:cc:ad:3a:d5:51:de:d4:07:d6:ea:30: a9:f4:4a:58:2a:bc:2f:79:06:a3:5c:a6:cd:dc:a1:44:60:ef: 6a:62:77:66:ef:32:c9:91:9f:5a:c1:cf:cd:67:f2:4f:6a:60: 74:7a:78:44:64:25:05:20:3d:04:61:a1:43:58:f1:41:fa:0a: 09:3b:46:f0:6d:2d:e9:89:98:9f:26:1c:af:79:75:05:85:00: 5d:be:48:e6:fe:4e:dd:bc:1c:d1:b8:5c:6e:84:d1:fd:61:3e: e5:b7:4c:9a:86:dd:8e:21:88:d5:7a:6a:d5:d4:bc:4b:e6:b6: 43:cd:35:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsiriQeBUVATrDGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk YjEwMzIxNGUtYTRkZC00ZmM3LWE2MzctMjY4ODIzMWQ5YWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcV+uSt1d19rH+n60FT1J4R6ROWqUXiELvyF X+AmnEMhfYO3eidpSwTIMpS/5q2p9CDuQal+u3WNXGTVa3VIhzeapOwX+rnIn5mo rFCBy189aUQLSZ9pW6LBD4LBMjvh2IEbZIcmUEFRcV88PfAuvYTRX8rdkBQ9DMjj 0qk2hwZy+SS2qF9YdSWT71DgEb0YyZWUqC7DrG/VipU6H76X4L1ipGbNy8lWR0Me BbZRQA5xwr4H76xH42kdDHySvtTb5kiP4NVrCfWtsDAUB570zZeGj7jNSypGMp1A L3KPtzBpX5IZraqX6+tuS+XGiL2zWp5HECaaE1BR1dZOtR5yXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGktWk/CNUPhvWEFoA1xRQzLA+cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNThlNjU2ZDAtMWU4Ni0z NmFhLTgzYzktNThiMTllNDFmNmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruKgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4KjGeBl1ueEM3MUahnHbO2AiNJ1kGgMQTtaFMNkbAYPE4fNIJ+onwR a7flxJdCam84/770/ZQoyraYp9vu+r8V2/R3aaJsj2fnIQnv/Qiqghxi6S2rTtpX HRqyJ5n+PjfrhGlJY/tp9bkUnWThXtU1rcqZ7VM4IaieeQFDqCs7MvxCTV7MrTrV Ud7UB9bqMKn0SlgqvC95BqNcps3coURg72pid2bvMsmRn1rBz81n8k9qYHR6eERk JQUgPQRhoUNY8UH6Cgk7RvBtLemJmJ8mHK95dQWFAF2+SOb+Tt28HNG4XG6E0f1h PuW3TJqG3Y4hiNV6atXUvEvmtkPNNeI= -----END CERTIFICATE-----Generated at Mon Oct 20 22:46:00 2025 by rpki-client