$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/86dc25b6-c200-364d-94a1-eaf3cedcc702.roa File: 86dc25b6-c200-364d-94a1-eaf3cedcc702.roa (raw, json) Hash identifier: D4Glypvw2zJk1gPVRLMmXBDcRG6hjg330kFOfMs3CR4= Subject key identifier: D3:1E:EF:BF:9F:32:41:6C:8B:D1:91:37:B2:3A:BD:B8:2F:B0:FE:C2 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B87B2287C9ED20759AD0BFE40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/86dc25b6-c200-364d-94a1-eaf3cedcc702.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 6167 IP address blocks: 174.251.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:28:7c:9e:d2:07:59:ad:0b:fe:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=49adff22-3c6e-4cc9-bf17-11a08a6fc594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3e:43:8b:b2:d5:70:43:83:09:25:5c:53:39: aa:71:e9:32:db:9d:cf:f2:a1:b9:85:18:fb:cb:a9: 26:1c:99:3b:98:4c:9c:63:c6:98:13:85:2e:43:92: ba:ae:38:38:dc:8c:75:b5:5a:77:7f:52:11:5d:99: 79:4e:d6:70:bf:9a:f2:fc:fc:d4:99:a9:3f:f4:8a: f5:7b:4d:b7:f7:29:0e:a7:96:cb:23:1f:57:7f:dc: b3:ce:8f:a0:e4:cb:ba:e7:b5:dd:3e:94:76:5b:6b: 1a:21:8c:46:3f:f6:5a:60:8d:40:1d:93:a5:93:57: 31:76:ca:10:8b:19:bf:67:18:ab:45:70:09:95:09: 67:09:a5:6e:ca:db:b1:4f:a1:80:e4:55:f1:ab:a3: 2a:32:cd:c0:0d:b7:64:83:a3:81:51:7c:a6:ea:16: 5f:52:9d:05:fc:9f:6e:da:e2:1c:23:b7:69:a5:40: 25:45:0d:28:55:6d:c8:f1:3d:4e:f1:84:bc:dd:d8: 6c:e4:81:0c:ce:77:07:e0:8f:b9:cf:34:b2:07:e5: 2b:66:35:fc:33:d1:c3:9b:e8:00:c0:ad:25:44:6a: 20:73:06:4b:8e:60:0b:47:e8:2d:c1:df:81:ea:5d: 5e:f3:7c:7f:15:54:40:e8:d8:20:6a:63:ef:f7:cb: 6a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1E:EF:BF:9F:32:41:6C:8B:D1:91:37:B2:3A:BD:B8:2F:B0:FE:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/86dc25b6-c200-364d-94a1-eaf3cedcc702.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.251.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:75:d3:55:bb:e8:7c:25:c2:6b:70:ef:70:da:8b:18:c1:13: 2a:f1:f9:ff:c1:6d:3e:89:b5:c2:29:ed:ef:83:32:87:4d:c0: a7:15:d6:5e:3c:da:53:9b:6f:48:d2:77:c4:2d:ca:90:8f:b3: 47:2a:52:0a:25:43:02:27:42:48:aa:78:52:8d:f1:56:01:37: 2c:4b:1b:f7:5a:4b:bc:f0:6f:f7:89:52:e2:56:b3:21:af:f2: 29:dd:55:b8:af:a7:04:3b:0f:62:fd:42:d9:f1:eb:c3:81:3f: ad:25:db:9d:a1:4d:a8:c0:e6:bf:bc:9b:5d:46:40:e5:31:2a: 9c:73:bd:98:f1:44:b8:9c:33:ca:4d:8c:3f:a2:d6:4f:0a:18: d8:c8:d3:c9:bd:4a:96:aa:cc:6f:28:9f:02:e9:a5:ae:31:da: c8:0e:f0:e8:02:8a:cd:4c:23:0e:75:ab:8b:b6:c4:1c:1d:08: 9a:cf:ca:8b:2d:94:f2:17:c8:d9:88:a8:ae:15:0b:a8:bc:07: 45:da:69:92:4c:89:23:56:4e:fd:1d:75:af:86:2e:f7:4a:82: 77:d0:c8:3b:8d:91:98:63:0a:35:dc:1b:de:8c:b7:6f:b7:74: a4:4a:f8:e3:2a:02:a9:2c:da:43:1e:bd:af:2b:ed:8c:76:17: 0c:cc:83:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsih8ntIHWa0L/kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk NDlhZGZmMjItM2M2ZS00Y2M5LWJmMTctMTFhMDhhNmZjNTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz5Di7LVcEODCSVcUzmqceky253P8qG5hRj7 y6kmHJk7mEycY8aYE4UuQ5K6rjg43Ix1tVp3f1IRXZl5TtZwv5ry/PzUmak/9Ir1 e0239ykOp5bLIx9Xf9yzzo+g5Mu657XdPpR2W2saIYxGP/ZaYI1AHZOlk1cxdsoQ ixm/ZxirRXAJlQlnCaVuytuxT6GA5FXxq6MqMs3ADbdkg6OBUXym6hZfUp0F/J9u 2uIcI7dppUAlRQ0oVW3I8T1O8YS83dhs5IEMzncH4I+5zzSyB+UrZjX8M9HDm+gA wK0lRGogcwZLjmALR+gtwd+B6l1e83x/FVRA6NggamPv98tqoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMe77+fMkFsi9GRN7I6vbgvsP7CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODZkYzI1YjYtYzIwMC0z NjRkLTk0YTEtZWFmM2NlZGNjNzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErvvwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZ101W76Hwlwmtw73DaixjBEyrx+f/BbT6JtcIp7e+DModNwKcV1l48 2lObb0jSd8QtypCPs0cqUgolQwInQkiqeFKN8VYBNyxLG/daS7zwb/eJUuJWsyGv 8indVbivpwQ7D2L9Qtnx68OBP60l252hTajA5r+8m11GQOUxKpxzvZjxRLicM8pN jD+i1k8KGNjI08m9SpaqzG8onwLppa4x2sgO8OgCis1MIw51q4u2xBwdCJrPyost lPIXyNmIqK4VC6i8B0XaaZJMiSNWTv0dda+GLvdKgnfQyDuNkZhjCjXcG96Mt2+3 dKRK+OMqAqks2kMeva8r7Yx2FwzMg9U= -----END CERTIFICATE-----Generated at Mon Oct 20 15:10:25 2025 by rpki-client