$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e543a0b-cd49-373a-8853-83c45c8f4dcb.roa File: 5e543a0b-cd49-373a-8853-83c45c8f4dcb.roa (raw, json) Hash identifier: gw1daQFsRDiKfYdmt0tQyN/PCKdlBtohqN0O6YSJdpE= Subject key identifier: 18:EE:1B:87:C7:3A:78:23:DC:00:09:87:E2:CF:FA:B6:5F:EF:32:22 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B87B2328375E263594ACE9C00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e543a0b-cd49-373a-8853-83c45c8f4dcb.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 6167 IP address blocks: 174.238.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:32:83:75:e2:63:59:4a:ce:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=453dfdcd-1a29-438d-b77a-a32b0862f1b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b0:b7:d4:ef:09:07:21:28:dd:15:ce:35:68: 7b:e5:e1:56:27:43:43:a4:83:e6:14:d8:9b:17:69: 1a:79:66:4c:66:4a:c9:62:56:32:55:ae:b5:e7:c2: 9a:73:0b:07:54:66:cd:a7:f9:b9:78:3e:9d:1e:57: fd:33:10:05:5c:3e:01:86:49:d4:ad:d4:fb:dc:33: ed:9c:61:e9:2a:d3:87:1b:e3:73:f4:11:1c:9c:ef: 36:1d:dd:d6:7c:89:ed:7d:2f:99:c8:76:26:0b:d7: 8a:b3:24:94:f4:c5:75:b6:62:b6:b3:66:92:01:90: 9b:27:18:b3:89:ea:e2:91:68:50:31:5c:2c:88:c9: 03:b1:41:2a:4a:5e:84:70:f6:19:f3:b3:43:20:8c: fa:e7:6c:b9:d9:f3:0d:4c:9c:70:35:9f:53:a9:88: c2:05:dc:8b:bd:81:9f:12:2c:63:e8:7b:25:61:0d: 11:ef:2a:6a:ea:fd:04:a5:db:a7:56:60:72:47:ee: 0b:ed:8f:01:2c:a1:df:6e:cc:1d:1c:71:69:16:d2: 82:97:e5:25:6d:ff:d7:65:af:63:63:ce:97:c6:80: a5:95:5b:7e:47:5c:a3:90:b3:2e:bc:23:b6:fc:74: b8:1e:bb:be:71:15:58:c3:7e:b8:b8:fe:b5:fd:22: f6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:EE:1B:87:C7:3A:78:23:DC:00:09:87:E2:CF:FA:B6:5F:EF:32:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5e543a0b-cd49-373a-8853-83c45c8f4dcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.238.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:a1:74:ac:cc:4e:64:8c:73:74:0a:e0:7c:81:e0:86:33:a8: 54:31:6d:56:90:17:f1:d3:0e:15:74:8e:b7:23:b7:1b:d0:70: 98:ca:21:0c:c2:34:13:a7:33:93:d6:77:41:c2:e7:79:45:9d: d2:93:eb:85:73:27:65:e7:b3:b9:59:8e:47:cb:9a:38:3d:1f: d9:77:a4:c0:18:0e:77:d3:b8:d1:d4:91:6e:16:f9:24:61:fd: 15:c6:15:d3:3b:81:b4:8b:3d:9a:d5:09:12:1e:f1:ec:cb:fb: 93:10:2d:f0:f8:cc:d4:09:5b:99:17:5e:ce:17:12:2d:02:3f: 03:78:fe:ab:f1:4c:e1:f6:44:d6:a2:b8:24:fe:d0:6f:36:31: a8:46:55:27:82:f5:33:c4:11:32:65:11:6d:f2:3c:26:75:16: 69:ce:e8:b3:e9:00:0e:26:28:1a:d4:c5:9e:9d:9c:03:8a:62: 58:c5:3f:b3:4e:53:34:78:97:4d:67:60:78:11:d7:c3:9d:d0: 3b:9e:7e:1b:30:01:3a:5f:da:56:ed:f4:5c:15:e8:15:33:48: e5:fd:a7:10:77:6c:27:2d:d8:02:9d:c2:f1:aa:46:dc:fd:be: f2:5b:60:a1:31:4d:c6:39:fd:8b:fb:9a:f3:8a:a2:01:f1:7f: 15:f1:af:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsjKDdeJjWUrOnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk NDUzZGZkY2QtMWEyOS00MzhkLWI3N2EtYTMyYjA4NjJmMWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbC31O8JByEo3RXONWh75eFWJ0NDpIPmFNib F2kaeWZMZkrJYlYyVa6158KacwsHVGbNp/m5eD6dHlf9MxAFXD4BhknUrdT73DPt nGHpKtOHG+Nz9BEcnO82Hd3WfIntfS+ZyHYmC9eKsySU9MV1tmK2s2aSAZCbJxiz ierikWhQMVwsiMkDsUEqSl6EcPYZ87NDIIz652y52fMNTJxwNZ9TqYjCBdyLvYGf Eixj6HslYQ0R7ypq6v0EpdunVmByR+4L7Y8BLKHfbswdHHFpFtKCl+Ulbf/XZa9j Y86XxoCllVt+R1yjkLMuvCO2/HS4Hru+cRVYw364uP61/SL2cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjuG4fHOngj3AAJh+LP+rZf7zIiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWU1NDNhMGItY2Q0OS0z NzNhLTg4NTMtODNjNDVjOGY0ZGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCru4YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqhdKzMTmSMc3QK4HyB4IYzqFQxbVaQF/HTDhV0jrcjtxvQcJjKIQzC NBOnM5PWd0HC53lFndKT64VzJ2Xns7lZjkfLmjg9H9l3pMAYDnfTuNHUkW4W+SRh /RXGFdM7gbSLPZrVCRIe8ezL+5MQLfD4zNQJW5kXXs4XEi0CPwN4/qvxTOH2RNai uCT+0G82MahGVSeC9TPEETJlEW3yPCZ1FmnO6LPpAA4mKBrUxZ6dnAOKYljFP7NO UzR4l01nYHgR18Od0DuefhswATpf2lbt9FwV6BUzSOX9pxB3bCct2AKdwvGqRtz9 vvJbYKExTcY5/Yv7mvOKogHxfxXxr+E= -----END CERTIFICATE-----Generated at Mon Oct 20 15:22:49 2025 by rpki-client