$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/78d8e9a4-1278-3a08-8160-6e8ad139d874.roa File: 78d8e9a4-1278-3a08-8160-6e8ad139d874.roa (raw, json) Hash identifier: lzjAqXSe5VYHDFbq+5Xe22iFZodAcQWmMi/Y2TbuheA= Subject key identifier: B2:0C:DE:4A:BD:F5:25:B5:90:EC:60:09:C6:4F:60:98:A1:01:23:00 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B87B22D3AEF71DA56A058C680 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/78d8e9a4-1278-3a08-8160-6e8ad139d874.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 6167 IP address blocks: 174.229.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:2d:3a:ef:71:da:56:a0:58:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=4c66389f-8f9a-4fff-996b-31428c8733c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:61:95:61:e0:8c:8a:7d:01:ad:bd:91:84:23: a3:7c:40:5d:29:4f:26:3a:e7:7a:0e:9a:24:7b:29: 87:ff:72:07:0a:b4:80:8d:f3:89:34:95:6e:74:61: 80:2c:77:a1:4d:7b:57:5a:90:95:33:7d:39:a3:d0: a1:32:db:48:82:6c:f4:12:23:05:8e:4f:1a:e6:f5: b6:72:4d:94:1a:a7:06:26:6e:06:f0:02:f4:04:ed: a4:38:37:52:7f:a9:b5:30:01:8a:5d:7b:df:da:15: 76:2e:02:6d:d7:6c:6b:4f:cc:d6:0c:b2:d5:6f:78: c0:28:32:6e:ef:45:db:18:12:ce:c8:86:10:ea:85: ef:66:a1:2e:22:4c:59:ec:74:7e:78:90:e0:52:6f: a9:e4:a7:96:b4:2f:56:7b:8e:3d:bc:7d:0e:42:bf: 24:7c:98:22:b6:7c:5e:b2:3c:9b:e6:85:47:6e:aa: 46:02:71:6b:a0:c0:bd:18:61:03:74:78:23:ac:12: e3:dd:72:18:3d:1c:e6:a9:47:5d:93:dd:fd:f6:19: 61:01:fd:20:15:41:d0:33:45:06:fb:65:91:16:42: 05:24:13:05:f2:82:eb:46:3a:2b:60:8e:e7:3d:20: 8e:c5:1f:aa:1c:b9:a5:a9:fb:96:ec:1d:39:2f:a4: a5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:0C:DE:4A:BD:F5:25:B5:90:EC:60:09:C6:4F:60:98:A1:01:23:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/78d8e9a4-1278-3a08-8160-6e8ad139d874.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.229.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:0c:19:f1:7b:01:37:30:7c:9b:56:fa:f7:f1:1d:f9:c9:8f: d0:7e:24:92:a5:69:dd:7b:3b:c8:bd:72:5c:4f:ab:f1:ae:01: 99:32:52:8a:95:90:57:30:36:cc:2e:f2:5a:c6:5c:e9:1c:a6: 5f:59:ce:26:29:e1:24:60:b8:35:eb:03:0f:eb:ea:37:64:d0: c7:9e:26:e0:5d:fe:fa:17:31:ab:f0:e0:36:3f:97:1c:f7:3d: 5a:49:83:0c:fa:7a:23:af:ae:05:59:a8:4c:a6:0b:af:3f:fb: a1:5d:85:ff:6f:6a:b1:cf:a3:69:b7:86:0b:c1:36:37:18:c3: 22:d6:e5:03:84:0e:a6:d6:ab:43:1b:4f:12:17:ae:dc:c7:44: cf:95:ec:77:a4:af:db:40:03:67:18:49:3a:89:7b:d8:45:83: c9:66:90:be:e7:f6:b0:9a:16:11:01:7c:05:21:de:6e:3f:6d: 6c:d3:6c:cb:df:5c:8d:69:dd:83:75:23:d1:c4:74:fb:d2:34: 8b:16:eb:61:34:6a:e1:2d:92:a6:b9:05:b6:95:41:2f:75:3b: 96:a1:9a:a7:b8:45:e9:b1:87:c8:82:5c:45:5f:8b:a0:51:23: af:b9:36:50:5c:a1:27:f6:b9:5e:01:0f:43:43:cb:52:a8:45: f4:a9:9d:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsi0673HaVqBYxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk NGM2NjM4OWYtOGY5YS00ZmZmLTk5NmItMzE0MjhjODczM2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmGVYeCMin0Brb2RhCOjfEBdKU8mOud6Dpok eymH/3IHCrSAjfOJNJVudGGALHehTXtXWpCVM305o9ChMttIgmz0EiMFjk8a5vW2 ck2UGqcGJm4G8AL0BO2kODdSf6m1MAGKXXvf2hV2LgJt12xrT8zWDLLVb3jAKDJu 70XbGBLOyIYQ6oXvZqEuIkxZ7HR+eJDgUm+p5KeWtC9We449vH0OQr8kfJgitnxe sjyb5oVHbqpGAnFroMC9GGEDdHgjrBLj3XIYPRzmqUddk9399hlhAf0gFUHQM0UG +2WRFkIFJBMF8oLrRjorYI7nPSCOxR+qHLmlqfuW7B05L6SlfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIM3kq99SW1kOxgCcZPYJihASMAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzhkOGU5YTQtMTI3OC0z YTA4LTgxNjAtNmU4YWQxMzlkODc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruVQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgMGfF7ATcwfJtW+vfxHfnJj9B+JJKlad17O8i9clxPq/GuAZkyUoqV kFcwNswu8lrGXOkcpl9ZziYp4SRguDXrAw/r6jdk0MeeJuBd/voXMavw4DY/lxz3 PVpJgwz6eiOvrgVZqEymC68/+6Fdhf9varHPo2m3hgvBNjcYwyLW5QOEDqbWq0Mb TxIXrtzHRM+V7Hekr9tAA2cYSTqJe9hFg8lmkL7n9rCaFhEBfAUh3m4/bWzTbMvf XI1p3YN1I9HEdPvSNIsW62E0auEtkqa5BbaVQS91O5ahmqe4Remxh8iCXEVfi6BR I6+5NlBcoSf2uV4BD0NDy1KoRfSpnSU= -----END CERTIFICATE-----Generated at Mon Oct 20 12:19:22 2025 by rpki-client