$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87a6fd48-1129-3e03-9a6f-420da6c2c63d.roa File: 87a6fd48-1129-3e03-9a6f-420da6c2c63d.roa (raw, json) Hash identifier: NEd8GgGEYVs24mNUEqu9eFISL8m1k6GTx7TH2qhJc/M= Subject key identifier: 6B:CD:4C:B4:9F:74:11:31:1F:C0:8C:16:00:1A:EF:7A:8D:23:7B:CC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B87B231769B03F00C8B580680 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87a6fd48-1129-3e03-9a6f-420da6c2c63d.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 6167 IP address blocks: 174.236.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:31:76:9b:03:f0:0c:8b:58:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=5cc15a45-76dc-40ab-9296-ed0b77786d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ad:82:46:9d:6e:70:36:da:f0:28:30:98:ce: 22:5c:c1:f0:bf:90:be:69:44:ec:4f:c8:2c:0b:85: d4:01:18:17:b9:61:b2:51:dd:f7:ee:40:ed:46:26: e9:5c:53:d3:9d:97:8d:21:01:da:a1:f5:7f:64:64: 74:6e:6d:fd:e2:8a:ca:bd:b8:46:4d:83:36:70:84: 5e:fe:d3:60:59:67:6a:75:fa:71:43:e2:ee:b8:9b: 12:e2:cc:1d:85:41:75:16:a0:e0:0c:fc:54:61:f8: 0b:1d:d1:ec:90:fa:7a:e6:94:45:86:12:99:a1:83: 02:29:b7:7b:50:dc:22:38:3d:63:ba:71:69:cf:37: 94:15:6f:2e:7e:d8:f9:1e:17:1b:07:a7:06:3c:d7: ad:57:86:24:43:88:88:22:84:ae:ab:79:02:8e:0d: c0:13:87:c1:d9:6c:0d:49:2d:61:07:98:f5:26:79: c8:d7:25:04:c9:70:f4:44:2a:6a:8f:69:4a:56:4d: bf:31:98:d4:43:97:4d:ca:cf:f2:c4:3a:36:4c:7a: f8:8c:3f:60:6f:3f:d8:84:a0:1b:c5:c2:da:e3:45: 95:a6:0f:0b:c0:a3:67:b1:ce:96:57:95:42:a3:10: 2f:84:cc:e2:31:bd:60:a8:1b:e9:de:8b:6a:8e:d5: 25:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:CD:4C:B4:9F:74:11:31:1F:C0:8C:16:00:1A:EF:7A:8D:23:7B:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87a6fd48-1129-3e03-9a6f-420da6c2c63d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.236.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:b5:6b:b5:50:14:04:43:01:79:67:10:90:19:4b:6e:f0:c9: f6:f7:21:ca:b6:f1:32:ef:28:05:d1:fa:dc:60:7a:43:63:88: 8a:a9:45:b8:d4:d9:14:04:77:07:de:d8:62:c5:a3:bf:53:e7: a6:36:54:ec:fc:04:02:0a:00:94:27:47:8d:b9:91:fe:35:20: 95:70:fb:14:3c:b4:7e:c5:ee:8e:e2:58:4b:fb:cc:17:31:e2: 6e:8b:4c:1f:f1:95:73:b4:21:2b:c9:d0:49:d8:92:d0:cf:e3: 5e:47:5d:01:54:5f:2d:0a:53:75:d9:f1:7a:1c:d1:1b:8f:90: 1b:18:8d:d6:a8:05:39:e7:2b:5e:88:df:bd:64:76:e5:76:fa: 4f:3f:ee:bf:df:f7:54:0a:7a:dd:4f:d4:e4:e7:d6:ae:b9:7f: ce:ec:9c:f5:fa:10:c9:bf:69:2d:39:d8:7f:9e:a5:eb:49:cc: a5:33:72:c5:d9:b5:55:b2:86:f8:d2:96:25:2d:18:03:7c:d6: 07:99:64:9b:3a:4a:ff:ff:27:47:d5:a9:22:88:82:21:4e:cd: 68:30:77:f8:0b:6d:6f:42:9c:6d:36:11:8a:f8:f4:40:69:e6: a3:42:1b:20:45:db:f8:fb:34:4b:d0:fd:b7:0d:65:2c:13:ac: 79:f3:fa:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsjF2mwPwDItYBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk NWNjMTVhNDUtNzZkYy00MGFiLTkyOTYtZWQwYjc3Nzg2ZDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkK2CRp1ucDba8CgwmM4iXMHwv5C+aUTsT8gs C4XUARgXuWGyUd337kDtRibpXFPTnZeNIQHaofV/ZGR0bm394orKvbhGTYM2cIRe /tNgWWdqdfpxQ+LuuJsS4swdhUF1FqDgDPxUYfgLHdHskPp65pRFhhKZoYMCKbd7 UNwiOD1junFpzzeUFW8uftj5HhcbB6cGPNetV4YkQ4iIIoSuq3kCjg3AE4fB2WwN SS1hB5j1JnnI1yUEyXD0RCpqj2lKVk2/MZjUQ5dNys/yxDo2THr4jD9gbz/YhKAb xcLa40WVpg8LwKNnsc6WV5VCoxAvhMziMb1gqBvp3otqjtUlCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvNTLSfdBExH8CMFgAa73qNI3vMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODdhNmZkNDgtMTEyOS0z ZTAzLTlhNmYtNDIwZGE2YzJjNjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCruyEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADu1a7VQFARDAXlnEJAZS27wyfb3Icq28TLvKAXR+txgekNjiIqpRbjU 2RQEdwfe2GLFo79T56Y2VOz8BAIKAJQnR425kf41IJVw+xQ8tH7F7o7iWEv7zBcx 4m6LTB/xlXO0ISvJ0EnYktDP415HXQFUXy0KU3XZ8Xoc0RuPkBsYjdaoBTnnK16I 371kduV2+k8/7r/f91QKet1P1OTn1q65f87snPX6EMm/aS052H+epetJzKUzcsXZ tVWyhvjSliUtGAN81geZZJs6Sv//J0fVqSKIgiFOzWgwd/gLbW9CnG02EYr49EBp 5qNCGyBF2/j7NEvQ/bcNZSwTrHnz+vo= -----END CERTIFICATE-----Generated at Mon Oct 20 17:50:20 2025 by rpki-client