$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/884000e2-fd1c-3bcf-8abc-d10f045ba796.roa File: 884000e2-fd1c-3bcf-8abc-d10f045ba796.roa (raw, json) Hash identifier: vHkU3IWnQ/bSNuF86K8TgYwKTUV/NTEDyCiLyjllihY= Subject key identifier: F2:80:EF:71:83:9A:D6:56:92:56:77:CE:11:0D:29:7D:CC:1D:C9:7E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B8EACFDF9F8FEC217C28EF680 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/884000e2-fd1c-3bcf-8abc-d10f045ba796.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 22394 IP address blocks: 174.41.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:fd:f9:f8:fe:c2:17:c2:8e:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=93b890e5-6693-49fb-891c-12ab4b5dcf8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:51:0a:fa:1a:08:69:29:c0:e7:8d:fb:2d:52: 93:f5:49:d7:fe:14:72:6f:ef:f6:9b:f3:6f:8c:55: 03:a7:f9:87:a0:df:49:69:39:3e:9b:2d:d3:03:21: c4:e5:3e:83:49:c7:bc:47:6a:c8:91:18:e3:fd:75: fd:30:70:02:7d:c4:65:0b:7c:92:09:ef:c5:91:df: 43:8b:05:f1:9e:95:5a:80:92:34:e6:60:c2:ae:3b: 64:d1:80:e9:44:53:51:62:1d:97:eb:9b:9d:86:35: 92:de:c2:3f:82:63:9a:fc:fe:cc:61:e6:73:7e:f5: c6:51:f7:9b:a3:7e:35:f4:7f:94:0d:4c:ca:51:2e: 42:9a:bf:c7:bb:f9:11:cd:1b:04:da:ac:c1:e4:41: 5c:c4:0d:ed:1b:0c:ba:64:bb:3e:d4:99:7d:d6:b7: d2:48:13:3f:47:b4:64:6b:0b:1d:87:5d:81:dd:75: de:4b:28:30:5e:36:04:34:c7:3e:20:a4:e3:21:1a: 1d:17:6c:d2:26:66:11:63:86:a8:7c:b1:59:5b:d7: 54:69:d5:1c:d1:23:f4:9e:0a:e4:9c:2d:6e:f5:f4: b3:87:62:5e:42:68:71:ad:0c:8e:39:30:b8:26:e8: b4:f8:44:86:83:5b:29:01:fe:83:9c:1e:df:49:c2: 24:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:80:EF:71:83:9A:D6:56:92:56:77:CE:11:0D:29:7D:CC:1D:C9:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/884000e2-fd1c-3bcf-8abc-d10f045ba796.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.41.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:56:a0:71:11:78:12:1a:a1:56:e5:60:da:f6:7a:40:1b:b9: 55:a7:16:9f:10:7f:59:9e:f6:6c:19:1a:d8:fe:00:18:a9:87: 84:fc:9e:59:b4:1f:82:56:26:2e:52:7e:ac:e2:1f:34:4a:96: d8:0f:9e:21:64:6d:16:63:8e:0f:bb:ae:a5:7c:98:0d:ae:4e: 1e:f7:1d:03:91:5d:a3:0c:3f:fd:c3:c9:e0:4c:d6:d6:de:5c: 9f:c7:45:bf:5b:fd:be:b3:02:d5:51:16:cb:79:ae:ea:72:80: 76:a3:d8:2e:66:39:21:57:d9:4d:7e:fc:16:c1:e5:5c:7a:a0: ee:66:d2:2b:06:69:a6:78:be:c5:59:d5:bb:45:00:b8:b8:8b: f1:83:0e:57:ff:e5:86:c8:b8:86:10:c7:30:2e:15:1e:41:97: 59:dc:64:dd:ce:a1:c8:d2:32:11:b7:2d:2c:31:90:ee:78:99: eb:a5:29:a7:53:13:5d:1c:a4:58:11:26:b1:d9:09:f4:5f:af: 6b:b4:e4:65:46:23:24:2e:51:b3:65:49:2e:29:c5:07:55:ed: 9e:28:8a:5e:32:75:5d:37:fa:1c:97:8b:6b:68:24:eb:6f:c5: 9d:e1:db:b8:45:7c:26:ce:52:db:cf:7c:5d:b8:62:40:3a:5f: f9:9d:ca:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrP35+P7CF8KO9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk OTNiODkwZTUtNjY5My00OWZiLTg5MWMtMTJhYjRiNWRjZjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFEK+hoIaSnA5437LVKT9UnX/hRyb+/2m/Nv jFUDp/mHoN9JaTk+my3TAyHE5T6DSce8R2rIkRjj/XX9MHACfcRlC3ySCe/Fkd9D iwXxnpVagJI05mDCrjtk0YDpRFNRYh2X65udhjWS3sI/gmOa/P7MYeZzfvXGUfeb o3419H+UDUzKUS5Cmr/Hu/kRzRsE2qzB5EFcxA3tGwy6ZLs+1Jl91rfSSBM/R7Rk awsdh12B3XXeSygwXjYENMc+IKTjIRodF2zSJmYRY4aofLFZW9dUadUc0SP0ngrk nC1u9fSzh2JeQmhxrQyOOTC4Jui0+ESGg1spAf6DnB7fScIkcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKA73GDmtZWklZ3zhENKX3MHcl+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODg0MDAwZTItZmQxYy0z YmNmLThhYmMtZDEwZjA0NWJhNzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVWoHEReBIaoVblYNr2ekAbuVWnFp8Qf1me9mwZGtj+ABiph4T8nlm0 H4JWJi5SfqziHzRKltgPniFkbRZjjg+7rqV8mA2uTh73HQORXaMMP/3DyeBM1tbe XJ/HRb9b/b6zAtVRFst5rupygHaj2C5mOSFX2U1+/BbB5Vx6oO5m0isGaaZ4vsVZ 1btFALi4i/GDDlf/5YbIuIYQxzAuFR5Bl1ncZN3OocjSMhG3LSwxkO54meulKadT E10cpFgRJrHZCfRfr2u05GVGIyQuUbNlSS4pxQdV7Z4oil4ydV03+hyXi2toJOtv xZ3h27hFfCbOUtvPfF24YkA6X/mdygg= -----END CERTIFICATE-----Generated at Mon Oct 20 20:29:39 2025 by rpki-client