$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/863b8460-0b8b-341b-be6a-14d1f411776e.roa File: 863b8460-0b8b-341b-be6a-14d1f411776e.roa (raw, json) Hash identifier: GZu4GVjuKH2zIRxe+hrriW4H8w7O0XKmKjeFocEX8d8= Subject key identifier: 4E:8A:CF:86:18:03:C2:CD:F0:46:1E:CF:7D:74:C8:B4:A1:2C:06:97 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B87B225D3B78A581FF3C6E1E0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/863b8460-0b8b-341b-be6a-14d1f411776e.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 6167 IP address blocks: 174.232.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:25:d3:b7:8a:58:1f:f3:c6:e1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=e849a450-d51f-4301-8827-b4fdad456f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8e:c6:2b:e6:59:f7:e6:d8:1f:8a:99:b1:f2: d5:b2:f5:3d:4f:96:d4:ab:f4:e1:ee:5d:b7:d3:4b: 54:4b:e1:d2:ef:b1:a0:c8:bf:36:ac:40:a3:80:0a: c0:2e:4b:fb:9e:44:d0:18:91:c8:d8:9b:6c:f8:a7: 57:04:ad:56:f0:31:d6:41:f1:4b:6f:6c:2f:34:09: 45:37:8d:91:5d:8b:30:43:72:60:7a:b9:7f:6a:26: ca:8f:47:e5:3f:05:e3:b9:a9:e4:c9:81:cd:7c:63: 04:44:27:88:49:8d:42:c0:14:8e:d6:05:3d:d4:98: 13:76:a7:79:96:84:ae:f0:ee:82:a8:10:c1:9e:52: 12:8f:46:20:aa:cf:bb:2a:38:ef:9d:dc:3f:dc:9f: c3:de:fa:b3:10:87:2c:f5:dd:01:c9:f4:6e:71:37: ba:e8:83:44:6e:a6:59:db:08:4d:e4:de:30:94:80: f5:1a:70:ad:38:44:c6:7f:62:92:e7:c3:0c:84:4a: 4b:2e:51:ba:46:f9:3d:91:d2:d6:41:2b:b2:28:a4: 74:d0:cb:bc:ea:34:bb:41:d3:2b:b4:f3:cd:b5:aa: 07:28:2b:a4:92:24:d7:bb:69:e4:82:1b:0b:55:56: 15:f9:8e:69:49:67:a2:7f:79:3a:aa:50:26:66:fc: e7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:8A:CF:86:18:03:C2:CD:F0:46:1E:CF:7D:74:C8:B4:A1:2C:06:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/863b8460-0b8b-341b-be6a-14d1f411776e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.232.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:be:16:55:85:33:d3:69:31:1a:90:43:5d:f2:d6:2b:22:5a: aa:5f:08:01:9c:66:46:71:18:f1:49:4e:d2:fb:fa:48:ed:06: d6:52:93:8a:f6:59:68:3e:ba:e8:c8:d0:6e:fd:9e:f8:49:9d: 11:61:77:4b:cf:f3:12:7a:be:b1:81:34:ed:76:3e:9a:6b:75: c9:c4:45:e8:86:f7:eb:83:76:eb:5d:a3:43:07:f9:95:3b:d2: f5:c0:5b:d7:27:69:81:d3:94:57:fd:11:d0:d8:0a:b0:2f:ae: 90:4d:17:71:06:98:94:4d:5b:85:c7:7b:49:4c:4c:d6:d3:78: b7:f4:9f:07:c5:db:62:c2:6e:f4:c4:19:be:ab:75:ed:0f:ba: d2:61:c7:4a:f1:fb:e5:78:a1:ed:4f:73:32:95:70:76:3d:97: 7e:0c:32:8b:64:73:5c:ad:11:6c:1d:14:6b:57:27:32:7d:71: 76:b5:4e:03:67:4f:37:f1:12:bc:da:61:32:a7:31:26:4a:7e: e5:99:98:da:7c:a0:df:e5:b2:91:a3:41:94:d2:c0:08:b9:00: 6a:92:1c:1c:41:63:91:d8:75:95:c3:ad:db:38:35:4b:de:60: a0:0f:80:19:d3:df:57:e0:12:78:8a:a5:47:b7:9e:2b:f0:be: 21:86:4c:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsiXTt4pYH/PG4eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk ZTg0OWE0NTAtZDUxZi00MzAxLTg4MjctYjRmZGFkNDU2ZjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm47GK+ZZ9+bYH4qZsfLVsvU9T5bUq/Th7l23 00tUS+HS77GgyL82rECjgArALkv7nkTQGJHI2Jts+KdXBK1W8DHWQfFLb2wvNAlF N42RXYswQ3Jgerl/aibKj0flPwXjuankyYHNfGMERCeISY1CwBSO1gU91JgTdqd5 loSu8O6CqBDBnlISj0Ygqs+7Kjjvndw/3J/D3vqzEIcs9d0ByfRucTe66INEbqZZ 2whN5N4wlID1GnCtOETGf2KS58MMhEpLLlG6Rvk9kdLWQSuyKKR00Mu86jS7QdMr tPPNtaoHKCukkiTXu2nkghsLVVYV+Y5pSWeif3k6qlAmZvznrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6Kz4YYA8LN8EYez310yLShLAaXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODYzYjg0NjAtMGI4Yi0z NDFiLWJlNmEtMTRkMWY0MTE3NzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBruiIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKq+FlWFM9NpMRqQQ13y1isiWqpfCAGcZkZxGPFJTtL7+kjtBtZSk4r2 WWg+uujI0G79nvhJnRFhd0vP8xJ6vrGBNO12PpprdcnEReiG9+uDdutdo0MH+ZU7 0vXAW9cnaYHTlFf9EdDYCrAvrpBNF3EGmJRNW4XHe0lMTNbTeLf0nwfF22LCbvTE Gb6rde0PutJhx0rx++V4oe1PczKVcHY9l34MMotkc1ytEWwdFGtXJzJ9cXa1TgNn TzfxErzaYTKnMSZKfuWZmNp8oN/lspGjQZTSwAi5AGqSHBxBY5HYdZXDrds4NUve YKAPgBnT31fgEniKpUe3nivwviGGTIw= -----END CERTIFICATE-----Generated at Mon Oct 20 12:18:52 2025 by rpki-client