$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a4dbbb5-282e-3b13-874d-c1c4aba6acb4.roa File: 5a4dbbb5-282e-3b13-874d-c1c4aba6acb4.roa (raw, json) Hash identifier: WIQUpFd1whSZcEwvDldSD24IdCkdcmD+Ok01MiUnOBU= Subject key identifier: 1A:44:76:07:E8:12:0E:1D:90:BB:AE:5D:79:50:A0:55:9E:11:C7:A3 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B609CAEDCC4C42B4143954700 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a4dbbb5-282e-3b13-874d-c1c4aba6acb4.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 6167 IP address blocks: 174.212.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:ae:dc:c4:c4:2b:41:43:95:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=27e87dc2-5e9b-4137-b9ed-fbbb5be8fb34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3a:5f:16:d5:0d:7c:6a:13:90:ae:8b:72:b3: 2a:cf:b0:ad:a0:e8:53:bb:9a:64:ae:bf:aa:cd:84: cf:b8:23:7d:d0:a7:a8:8e:7e:69:59:13:16:b7:68: 05:97:61:64:e5:bf:6d:05:92:ba:60:5b:df:3f:e2: 01:e3:f2:41:b9:ac:52:4b:f7:c6:0d:5a:c4:16:6d: 05:19:d3:35:a9:39:81:36:37:b0:fd:56:d0:8e:77: 87:a1:bc:39:35:b7:9e:47:ba:50:e4:c3:ea:db:92: cd:11:84:5b:9a:f6:7a:26:47:58:a0:8d:5d:cc:a7: da:b0:5e:13:ef:b1:8f:fb:40:a2:71:75:23:48:c0: ba:65:0c:c6:b4:9f:c6:07:2f:c8:29:94:70:d9:1f: 1f:10:d2:6f:dd:05:c0:1a:ed:71:96:4f:60:b2:fe: 6d:5d:de:94:59:83:eb:d5:d7:81:e7:c3:ce:23:a2: fe:95:63:ae:5f:b9:f9:8e:38:e9:6a:c6:d7:3e:27: ee:eb:5c:70:2a:11:ad:42:73:14:3a:f8:ba:5a:e0: da:2b:61:4f:c3:69:46:fa:8d:ff:d0:b4:f1:a0:7a: 91:ab:cb:ad:4e:72:5f:a6:e7:e6:3a:bb:9f:64:de: 0b:dd:d2:91:e9:32:af:f3:59:99:ed:78:2d:99:65: 13:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:44:76:07:E8:12:0E:1D:90:BB:AE:5D:79:50:A0:55:9E:11:C7:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5a4dbbb5-282e-3b13-874d-c1c4aba6acb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.212.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:75:5d:53:54:ef:01:2f:af:d5:b5:92:d5:54:47:9a:6d:08: 87:d1:f6:a1:0f:18:6f:1a:f6:47:09:92:07:39:59:43:65:2b: 0f:27:3b:41:4b:6c:22:37:10:96:7e:71:85:fa:4b:b8:fa:4c: b0:f9:ae:b6:c9:5d:0c:58:34:cf:cd:63:c3:5e:23:e6:f1:38: 31:69:5c:dd:43:83:c7:48:b0:a8:db:a5:cb:03:66:5a:30:8f: 58:7b:bf:14:dd:da:88:9a:8a:b2:df:c8:92:44:2a:a9:c2:40: 58:16:b8:09:fa:74:26:62:36:aa:c3:0e:b7:30:76:78:ca:03: d4:6f:9a:5d:18:b1:6d:ab:35:f8:f3:17:15:f7:b9:8d:62:96: 84:4b:73:94:24:2b:d2:6f:97:4b:43:5b:99:e6:42:c6:e4:2c: 60:2a:fb:bc:e7:20:96:aa:f6:5c:d2:eb:3a:86:17:71:9e:0c: dd:4f:a5:8a:e3:90:d0:fe:9e:a3:6b:ff:cc:fb:d7:3e:37:f3: 53:f1:e8:92:5e:8a:47:64:41:a5:ba:fb:3f:20:b6:a1:a5:59: 6b:90:2b:f7:06:b8:ee:63:58:9e:6a:89:22:b6:81:62:15:a5: bc:dd:a4:13:4e:e6:f9:64:bf:5c:90:78:f4:1c:db:35:b6:f1: 58:77:e2:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnK7cxMQrQUOVRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk MjdlODdkYzItNWU5Yi00MTM3LWI5ZWQtZmJiYjViZThmYjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDpfFtUNfGoTkK6LcrMqz7CtoOhTu5pkrr+q zYTPuCN90Keojn5pWRMWt2gFl2Fk5b9tBZK6YFvfP+IB4/JBuaxSS/fGDVrEFm0F GdM1qTmBNjew/VbQjneHobw5NbeeR7pQ5MPq25LNEYRbmvZ6JkdYoI1dzKfasF4T 77GP+0CicXUjSMC6ZQzGtJ/GBy/IKZRw2R8fENJv3QXAGu1xlk9gsv5tXd6UWYPr 1deB58POI6L+lWOuX7n5jjjpasbXPifu61xwKhGtQnMUOvi6WuDaK2FPw2lG+o3/ 0LTxoHqRq8utTnJfpufmOrufZN4L3dKR6TKv81mZ7XgtmWUT4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpEdgfoEg4dkLuuXXlQoFWeEcejMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWE0ZGJiYjUtMjgyZS0z YjEzLTg3NGQtYzFjNGFiYTZhY2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKB1XVNU7wEvr9W1ktVUR5ptCIfR9qEPGG8a9kcJkgc5WUNlKw8nO0FL bCI3EJZ+cYX6S7j6TLD5rrbJXQxYNM/NY8NeI+bxODFpXN1Dg8dIsKjbpcsDZlow j1h7vxTd2oiairLfyJJEKqnCQFgWuAn6dCZiNqrDDrcwdnjKA9Rvml0YsW2rNfjz FxX3uY1iloRLc5QkK9Jvl0tDW5nmQsbkLGAq+7znIJaq9lzS6zqGF3GeDN1PpYrj kND+nqNr/8z71z4381Px6JJeikdkQaW6+z8gtqGlWWuQK/cGuO5jWJ5qiSK2gWIV pbzdpBNO5vlkv1yQePQc2zW28Vh34mo= -----END CERTIFICATE-----Generated at Mon Oct 20 15:00:48 2025 by rpki-client