$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/680bdc9e-af9a-3874-ad92-de1c2d071939.roa File: 680bdc9e-af9a-3874-ad92-de1c2d071939.roa (raw, json) Hash identifier: Czx/KqK+KCHiHz3+D4FOnp/FIniCgqIlclCjnfwSZ8Y= Subject key identifier: 03:4D:45:99:1C:3B:EA:6B:9D:14:F6:D2:69:AF:98:3B:DD:A7:FF:A4 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B87B22FB049ED70808382D920 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/680bdc9e-af9a-3874-ad92-de1c2d071939.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 6167 IP address blocks: 174.234.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:2f:b0:49:ed:70:80:83:82:d9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=f11fbf9b-a8f6-4ff0-9e0a-1b9901e72c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:36:89:ed:05:27:6f:69:6d:06:3e:77:da:58: b7:05:35:4a:32:2d:97:70:24:f5:85:e9:ae:e9:8b: a9:13:e3:2f:2c:85:0f:45:4d:09:6f:12:6e:ab:67: 3a:52:08:f3:dc:80:76:c3:e6:d9:2d:79:d2:29:65: 11:80:18:7b:e4:0f:45:0c:50:de:f7:38:9a:97:e8: 9e:e8:f3:01:f1:82:84:da:40:b1:6e:f7:19:0b:04: a8:a0:e6:bc:75:8e:53:77:d2:32:68:64:ec:7d:16: aa:03:7c:9e:0d:7c:bf:27:79:1c:35:dd:c8:bd:86: da:ef:37:d7:37:3f:9b:9c:86:a0:53:56:44:8e:20: 46:38:1b:69:46:56:93:17:9b:75:38:f3:d6:eb:2d: da:97:b0:09:16:33:a1:fc:0f:23:95:cc:98:25:f2: cf:f3:1e:a4:78:02:e9:ca:f0:20:dd:cf:7d:22:4a: 2c:a0:74:82:ab:ce:c3:b2:86:32:7c:6c:a4:8e:58: 02:9d:30:c6:ff:a1:ad:f5:28:ad:5b:51:f9:2d:0d: 61:04:c6:73:7b:b0:40:f3:d3:fe:da:01:16:cb:ef: bb:00:85:ec:4e:82:19:b0:3b:01:b9:65:2c:ba:91: d2:6b:00:2b:95:e7:3b:45:dd:4c:7c:fc:25:00:12: b3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:4D:45:99:1C:3B:EA:6B:9D:14:F6:D2:69:AF:98:3B:DD:A7:FF:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/680bdc9e-af9a-3874-ad92-de1c2d071939.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.234.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:5a:29:fb:13:a7:bb:4a:d2:bd:54:c3:c3:f3:4c:11:1f:89: af:02:09:af:de:8d:02:8e:78:53:67:23:5a:d5:56:77:01:15: a3:7f:15:84:e7:e2:71:cd:14:49:57:23:10:9f:0a:84:f8:00: ff:ca:4c:7a:e1:05:68:73:43:e3:ec:c5:99:21:38:f5:8e:19: ba:0e:7c:4a:2c:88:a5:1e:9a:e3:15:16:53:7f:16:2d:31:1d: d2:27:ce:ec:f2:a5:94:19:be:23:27:3c:ac:74:43:33:9f:de: 1f:7d:a5:95:76:64:fc:b1:80:b1:21:cf:ce:ae:66:48:22:43: aa:26:c7:0d:8e:43:58:fd:1e:36:e5:80:2a:21:23:8a:d4:05: fe:37:df:8d:b1:04:81:86:fe:03:c0:fa:f7:f1:d1:b9:53:cf: 2a:44:d0:aa:79:48:05:a9:06:fd:29:a4:ff:0a:00:aa:30:4d: e7:f4:6d:bc:77:ab:25:5c:83:3e:30:98:c4:ac:b3:b8:08:0d: ad:65:c7:7e:da:98:6d:6e:38:92:a4:d5:a3:fe:ff:d6:ea:79: aa:8c:a7:2c:71:f9:79:e8:f3:d6:d3:81:00:92:93:03:66:58: f7:1d:08:17:39:0d:96:79:a8:be:93:3c:60:7d:1d:e3:dc:4e: f1:a3:89:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsi+wSe1wgIOC2SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk ZjExZmJmOWItYThmNi00ZmYwLTllMGEtMWI5OTAxZTcyYzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjaJ7QUnb2ltBj532li3BTVKMi2XcCT1hemu 6YupE+MvLIUPRU0JbxJuq2c6Ugjz3IB2w+bZLXnSKWURgBh75A9FDFDe9zial+ie 6PMB8YKE2kCxbvcZCwSooOa8dY5Td9IyaGTsfRaqA3yeDXy/J3kcNd3IvYba7zfX Nz+bnIagU1ZEjiBGOBtpRlaTF5t1OPPW6y3al7AJFjOh/A8jlcyYJfLP8x6keALp yvAg3c99IkosoHSCq87DsoYyfGykjlgCnTDG/6Gt9SitW1H5LQ1hBMZze7BA89P+ 2gEWy++7AIXsToIZsDsBuWUsupHSawArlec7Rd1MfPwlABKz3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANNRZkcO+prnRT20mmvmDvdp/+kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjgwYmRjOWUtYWY5YS0z ODc0LWFkOTItZGUxYzJkMDcxOTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlaKfsTp7tK0r1Uw8PzTBEfia8CCa/ejQKOeFNnI1rVVncBFaN/FYTn 4nHNFElXIxCfCoT4AP/KTHrhBWhzQ+PsxZkhOPWOGboOfEosiKUemuMVFlN/Fi0x HdInzuzypZQZviMnPKx0QzOf3h99pZV2ZPyxgLEhz86uZkgiQ6omxw2OQ1j9Hjbl gCohI4rUBf43342xBIGG/gPA+vfx0blTzypE0Kp5SAWpBv0ppP8KAKowTef0bbx3 qyVcgz4wmMSss7gIDa1lx37amG1uOJKk1aP+/9bqeaqMpyxx+Xno89bTgQCSkwNm WPcdCBc5DZZ5qL6TPGB9HePcTvGjiYg= -----END CERTIFICATE-----Generated at Mon Oct 20 12:19:09 2025 by rpki-client