$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ddea940-df1b-3d9d-b789-60a5b0b4a9ab.roa File: 8ddea940-df1b-3d9d-b789-60a5b0b4a9ab.roa (raw, json) Hash identifier: 4xWKZHZm6jApUSJQRNpZXNCzjuZhq22r+Tw0/zjJtSs= Subject key identifier: 29:A4:1D:87:54:A8:E2:5E:8B:79:D7:0F:3F:DC:F3:3D:E8:22:98:D1 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B87B22AD28FD08B716D431DC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ddea940-df1b-3d9d-b789-60a5b0b4a9ab.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 6167 IP address blocks: 174.226.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:2a:d2:8f:d0:8b:71:6d:43:1d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=eb645a74-baa1-4ae4-8151-e5d3dbe9c501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6d:18:8e:91:34:96:13:8b:46:83:39:26:ab: 25:b6:c9:38:4d:cd:31:54:a7:4c:09:94:56:cd:20: 8a:3b:ac:4f:9f:89:6e:e3:66:9c:09:f3:ff:ff:b9: fd:a1:38:b1:11:b4:fd:01:6b:9b:52:01:a7:30:3f: d8:eb:ed:e3:05:41:08:51:fb:ac:61:b1:11:d2:cd: e7:af:90:65:d2:15:3f:6a:a7:be:c3:17:ca:f1:21: 93:b0:b0:40:f7:81:16:79:c0:2e:18:fe:c8:41:20: 8a:6e:f6:95:0a:a8:1f:3e:74:b8:a2:e6:b7:51:89: d9:fd:db:97:47:ad:80:bd:6a:be:9e:3a:9d:f6:6c: b1:6f:56:07:d0:44:9d:4c:fc:9e:dd:83:d2:57:57: cc:3b:db:00:57:0e:17:73:0b:de:8a:26:2a:a0:12: b8:78:b9:32:80:81:1d:eb:22:47:2f:fd:d4:cf:05: eb:bc:90:7b:1d:be:6f:af:cb:95:ec:16:df:8e:fa: fe:33:25:10:75:8c:c1:5c:b8:62:d3:66:f8:13:9a: 63:7c:be:7d:d6:54:5e:96:c5:c4:4e:be:52:3d:a2: 51:47:00:0a:5e:46:ce:45:b4:0a:c7:21:fa:6e:d2: a6:11:5b:f1:6d:79:23:70:50:2a:3b:a8:dd:39:12: 80:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A4:1D:87:54:A8:E2:5E:8B:79:D7:0F:3F:DC:F3:3D:E8:22:98:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ddea940-df1b-3d9d-b789-60a5b0b4a9ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.226.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:b3:14:9d:94:28:c2:c2:f1:f7:96:fa:e8:37:9b:69:ce:d9: 9f:ac:3b:7e:05:9d:e2:38:9b:5d:c5:c7:31:94:63:87:b3:e2: cb:b1:db:07:b8:46:71:88:c1:1b:db:8c:b0:7c:e6:56:13:63: 7d:80:47:36:52:d1:b6:30:fa:14:b8:b1:6e:ae:13:d1:a6:57: cb:58:94:23:d5:b2:89:ae:5d:6e:2c:b5:11:99:2d:18:9f:41: 0a:8d:b8:dc:e6:da:d3:4e:70:a7:4c:fe:7b:9a:4b:b8:39:1b: 67:81:d6:f6:ea:7b:be:b8:0f:f1:33:10:27:b4:6e:c9:e8:83: 79:3d:68:e4:1a:93:cb:32:90:30:96:b9:d4:23:ca:18:0e:97: f9:b6:0e:ad:fb:b9:61:98:7d:47:32:04:38:c3:fb:08:94:6e: 24:9f:fd:77:b2:21:fb:8e:85:31:2e:18:78:02:5a:56:25:7b: 13:89:cf:9b:5f:0a:68:18:42:fa:7c:1f:24:c1:ee:07:b6:04: a8:7e:5d:66:ab:17:2a:46:cf:f5:0a:4b:ba:71:df:54:67:f2: b9:ec:f5:e2:3a:c3:26:74:23:bd:44:1b:c4:ab:9b:09:3c:e1: 92:19:86:fe:ff:83:1d:15:1a:00:e7:36:86:80:97:f0:25:54: a9:cf:32:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsirSj9CLcW1DHcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk ZWI2NDVhNzQtYmFhMS00YWU0LTgxNTEtZTVkM2RiZTljNTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq20YjpE0lhOLRoM5Jqsltsk4Tc0xVKdMCZRW zSCKO6xPn4lu42acCfP//7n9oTixEbT9AWubUgGnMD/Y6+3jBUEIUfusYbER0s3n r5Bl0hU/aqe+wxfK8SGTsLBA94EWecAuGP7IQSCKbvaVCqgfPnS4oua3UYnZ/duX R62AvWq+njqd9myxb1YH0ESdTPye3YPSV1fMO9sAVw4XcwveiiYqoBK4eLkygIEd 6yJHL/3UzwXrvJB7Hb5vr8uV7Bbfjvr+MyUQdYzBXLhi02b4E5pjfL591lRelsXE Tr5SPaJRRwAKXkbORbQKxyH6btKmEVvxbXkjcFAqO6jdORKAYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmkHYdUqOJei3nXDz/c8z3oIpjRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGRkZWE5NDAtZGYxYi0z ZDlkLWI3ODktNjBhNWIwYjRhOWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSzFJ2UKMLC8feW+ug3m2nO2Z+sO34FneI4m13FxzGUY4ez4sux2we4 RnGIwRvbjLB85lYTY32ARzZS0bYw+hS4sW6uE9GmV8tYlCPVsomuXW4stRGZLRif QQqNuNzm2tNOcKdM/nuaS7g5G2eB1vbqe764D/EzECe0bsnog3k9aOQak8sykDCW udQjyhgOl/m2Dq37uWGYfUcyBDjD+wiUbiSf/XeyIfuOhTEuGHgCWlYlexOJz5tf CmgYQvp8HyTB7ge2BKh+XWarFypGz/UKS7px31Rn8rns9eI6wyZ0I71EG8Srmwk8 4ZIZhv7/gx0VGgDnNoaAl/AlVKnPMh0= -----END CERTIFICATE-----Generated at Mon Oct 20 14:41:58 2025 by rpki-client