$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a4029a1-2046-3c1b-b28c-ef0f3748a400.roa File: 7a4029a1-2046-3c1b-b28c-ef0f3748a400.roa (raw, json) Hash identifier: Kb9yaWo4TeWwxR2cmtnufH+IkjDcUFZoxWvBAxkplnQ= Subject key identifier: B9:98:89:08:E9:BA:91:D3:4A:9E:B8:42:41:4E:FD:C7:48:74:E0:33 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B87B22D4AA9CD3DEEA919E280 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a4029a1-2046-3c1b-b28c-ef0f3748a400.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 6167 IP address blocks: 174.229.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:2d:4a:a9:cd:3d:ee:a9:19:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=86ffd945-b851-4266-a9a8-4e8a46b5bdcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1a:af:df:66:f1:f4:16:74:50:e2:6d:dd:03: a3:5e:68:38:82:f3:04:44:0b:9b:d9:d3:0b:48:80: e8:44:96:e4:cf:85:36:67:2e:43:30:c4:e5:40:d6: 3d:f8:79:40:cf:90:99:f5:97:28:00:e1:51:cb:67: b8:41:cf:68:ab:b1:54:4c:99:f2:c2:e8:77:49:b1: 4a:6e:ac:d5:bc:fe:95:40:08:01:92:b6:95:53:10: a1:82:ee:93:b9:b9:b5:23:48:31:06:16:de:78:54: b0:f7:05:04:72:69:81:7d:39:b5:c5:5a:46:76:9c: 12:27:93:ea:93:b7:08:75:ea:73:27:c8:3d:28:70: 0f:b7:a7:3f:59:25:ae:bd:ef:61:45:b9:10:65:16: 2a:da:49:cc:19:9c:b2:e5:4e:34:64:d1:ab:92:0f: ad:bc:b1:d8:c5:05:a9:6a:4a:fa:75:ac:49:46:19: 29:4f:0c:2e:d6:85:9a:d8:26:d9:f9:2c:7b:56:5f: ee:36:21:99:08:3e:aa:70:e9:bd:19:de:0d:e2:56: d6:64:a2:3b:9f:04:04:b6:08:52:0c:cd:f9:ae:8e: 70:ca:0d:58:35:1f:4e:4e:13:60:51:ab:78:63:1f: ae:41:5e:31:ad:3a:6c:a2:25:8a:bc:22:61:b7:71: ce:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:98:89:08:E9:BA:91:D3:4A:9E:B8:42:41:4E:FD:C7:48:74:E0:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a4029a1-2046-3c1b-b28c-ef0f3748a400.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.229.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:86:2e:c0:b4:fa:6b:fb:90:c0:8b:ea:af:e3:ad:55:6e:1f: 97:1e:83:cc:d0:e1:bb:ea:a9:79:cb:c3:fc:dc:15:34:67:b8: a2:d4:8f:14:aa:c2:59:ed:05:db:9b:be:00:a0:8a:54:eb:c4: b0:56:c6:9c:55:28:79:1c:9d:ee:34:4f:f7:a4:51:ba:c6:58: 2d:76:bd:7f:3f:7f:e8:47:9a:96:9f:63:56:f9:9b:24:21:ea: 4f:31:c5:41:64:c1:fd:5b:4a:93:5d:01:9f:19:01:a3:0c:0a: 38:0a:6b:27:42:17:9b:85:94:1d:33:12:ff:77:1a:b2:36:d1: ce:ab:a3:97:db:0a:06:3c:3a:33:d8:eb:9c:d5:03:b8:49:95: fe:2c:b8:2b:00:04:06:04:70:ce:d5:cf:bc:b5:d7:bc:3b:b8: 80:f2:be:58:fd:59:a5:b9:0f:69:d6:a9:a4:80:d6:e6:91:b8: da:2d:6e:9d:31:f7:26:9c:5a:46:b5:a9:80:b1:3d:17:82:83: ab:3e:8e:f9:fa:95:e5:c4:55:37:47:a3:34:eb:dc:29:f1:e6: 8a:c7:fe:f7:2f:ce:8b:cc:0d:79:86:d9:c8:21:09:e7:09:b3: 05:bd:6d:85:dc:b8:8c:9b:5e:90:aa:df:f8:68:2b:ec:13:09: 36:db:70:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsi1Kqc097qkZ4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk ODZmZmQ5NDUtYjg1MS00MjY2LWE5YTgtNGU4YTQ2YjViZGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxqv32bx9BZ0UOJt3QOjXmg4gvMERAub2dML SIDoRJbkz4U2Zy5DMMTlQNY9+HlAz5CZ9ZcoAOFRy2e4Qc9oq7FUTJnywuh3SbFK bqzVvP6VQAgBkraVUxChgu6Tubm1I0gxBhbeeFSw9wUEcmmBfTm1xVpGdpwSJ5Pq k7cIdepzJ8g9KHAPt6c/WSWuve9hRbkQZRYq2knMGZyy5U40ZNGrkg+tvLHYxQWp akr6daxJRhkpTwwu1oWa2CbZ+Sx7Vl/uNiGZCD6qcOm9Gd4N4lbWZKI7nwQEtghS DM35ro5wyg1YNR9OThNgUat4Yx+uQV4xrTpsoiWKvCJht3HOUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmYiQjpupHTSp64QkFO/cdIdOAzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvN2E0MDI5YTEtMjA0Ni0z YzFiLWIyOGMtZWYwZjM3NDhhNDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGGLsC0+mv7kMCL6q/jrVVuH5ceg8zQ4bvqqXnLw/zcFTRnuKLUjxSq wlntBdubvgCgilTrxLBWxpxVKHkcne40T/ekUbrGWC12vX8/f+hHmpafY1b5myQh 6k8xxUFkwf1bSpNdAZ8ZAaMMCjgKaydCF5uFlB0zEv93GrI20c6ro5fbCgY8OjPY 65zVA7hJlf4suCsABAYEcM7Vz7y117w7uIDyvlj9WaW5D2nWqaSA1uaRuNotbp0x 9yacWka1qYCxPReCg6s+jvn6leXEVTdHozTr3Cnx5orH/vcvzovMDXmG2cghCecJ swW9bYXcuIybXpCq3/hoK+wTCTbbcGY= -----END CERTIFICATE-----Generated at Mon Oct 20 17:50:18 2025 by rpki-client