$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98d5e6a4-a62e-33be-b6b2-f3f22b0c663d.roa File: 98d5e6a4-a62e-33be-b6b2-f3f22b0c663d.roa (raw, json) Hash identifier: d+An7NYVaThq1Ezk5ecOnQyWeSzk/wMtrjiL2Kzd0zc= Subject key identifier: B0:41:09:1E:F8:89:2A:A8:F7:CC:22:85:8E:FF:DB:73:4A:C3:CD:51 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B87B2335D5E75EE0D68A06ACC Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98d5e6a4-a62e-33be-b6b2-f3f22b0c663d.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 6167 IP address blocks: 174.239.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:33:5d:5e:75:ee:0d:68:a0:6a:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=23b55cc1-229f-4590-9a33-d3b0def09de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:25:e5:18:15:c0:0e:bc:4e:85:a4:dd:96:19: 1a:33:51:ad:b7:40:71:4d:8e:f6:60:9e:7a:15:49: 2e:f9:b8:17:ab:53:e2:7c:9e:5b:a5:b9:04:c2:88: 43:93:ac:89:f7:1e:3b:b3:27:63:b3:73:66:3a:48: 24:b4:46:bd:e2:fd:81:6b:2b:b2:89:f4:2a:f4:af: 8d:5d:02:c3:76:e7:43:dd:5e:ae:7d:8b:ab:d7:d5: 4b:d8:fe:14:8c:c6:b6:28:59:d2:e6:06:c3:32:11: 98:88:05:cf:a8:10:e4:43:a5:e5:41:3e:61:d5:8f: dc:7e:50:41:83:ae:c9:56:52:e2:60:66:e7:f8:6e: be:7d:a5:4f:5a:1e:9b:64:cd:f0:e8:32:2d:49:2b: 77:77:73:5f:f2:a7:16:58:71:97:b4:60:7a:4a:f3: 75:23:00:a2:34:1d:52:8d:84:93:22:c3:46:5b:23: 8e:55:1f:f9:62:eb:ab:6b:d7:08:c7:1b:1a:da:de: 5e:53:47:2b:86:94:a2:41:d4:ef:c0:70:3b:30:c6: 51:f7:4e:f9:fa:d0:98:b7:9b:4b:16:23:6e:12:62: 3d:a0:7c:fc:65:be:84:80:f9:af:c9:7f:7d:3a:e0: cb:2b:1d:5d:4b:ac:e8:fa:b7:e6:b9:04:07:5b:e3: d9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:41:09:1E:F8:89:2A:A8:F7:CC:22:85:8E:FF:DB:73:4A:C3:CD:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98d5e6a4-a62e-33be-b6b2-f3f22b0c663d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.239.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:fd:9c:f9:a6:c9:34:ba:ea:76:ac:ee:4f:8a:bb:de:e6:86: e1:05:47:93:1d:32:cf:c1:20:d6:23:cf:06:2f:01:32:53:cd: b9:65:70:3c:30:f3:f1:27:4a:ed:d7:e4:c5:c4:da:a4:7f:e2: ef:42:7c:0d:0a:d8:58:ba:10:5f:9e:4c:e8:98:2f:04:d9:94: 0e:c6:e9:e4:8d:9c:a2:ff:1d:a5:e4:ca:fc:1f:40:ba:4b:74: b9:b7:72:97:4a:b0:12:bf:62:b7:74:65:1a:16:a6:be:7c:a7: ea:20:6c:61:17:49:8f:b3:0b:b7:04:f2:ed:8b:98:7a:a6:4a: c0:9f:72:6e:3a:d3:a9:ad:1c:03:03:53:eb:c0:10:41:01:f3: 77:88:95:21:8e:2e:20:a4:0d:6d:d8:7f:9c:18:ed:22:63:fa: 11:9c:5a:74:09:e2:bc:4b:03:6e:3e:a7:3e:9f:db:b7:34:48: 7f:2f:78:a7:ba:bc:93:a2:ba:20:31:bf:64:33:f5:cc:e6:a7: 44:6d:39:78:13:5a:ad:d0:e7:6e:69:55:a9:93:e7:6f:7d:f9: d7:d9:2f:fc:8f:cc:07:ac:ec:97:df:b4:5b:81:8a:6b:a9:41: 2f:8e:59:f2:29:11:be:8a:27:72:88:7c:fa:be:03:fa:38:27: 8c:6f:8f:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsjNdXnXuDWigaswwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk MjNiNTVjYzEtMjI5Zi00NTkwLTlhMzMtZDNiMGRlZjA5ZGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiXlGBXADrxOhaTdlhkaM1Gtt0BxTY72YJ56 FUku+bgXq1PifJ5bpbkEwohDk6yJ9x47sydjs3NmOkgktEa94v2BayuyifQq9K+N XQLDdudD3V6ufYur19VL2P4UjMa2KFnS5gbDMhGYiAXPqBDkQ6XlQT5h1Y/cflBB g67JVlLiYGbn+G6+faVPWh6bZM3w6DItSSt3d3Nf8qcWWHGXtGB6SvN1IwCiNB1S jYSTIsNGWyOOVR/5Yuura9cIxxsa2t5eU0crhpSiQdTvwHA7MMZR9075+tCYt5tL FiNuEmI9oHz8Zb6EgPmvyX99OuDLKx1dS6zo+rfmuQQHW+PZkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBBCR74iSqo98wihY7/23NKw81RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOThkNWU2YTQtYTYyZS0z M2JlLWI2YjItZjNmMjJiMGM2NjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCru8YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABL9nPmmyTS66nas7k+Ku97mhuEFR5MdMs/BINYjzwYvATJTzbllcDww 8/EnSu3X5MXE2qR/4u9CfA0K2Fi6EF+eTOiYLwTZlA7G6eSNnKL/HaXkyvwfQLpL dLm3cpdKsBK/Yrd0ZRoWpr58p+ogbGEXSY+zC7cE8u2LmHqmSsCfcm4606mtHAMD U+vAEEEB83eIlSGOLiCkDW3Yf5wY7SJj+hGcWnQJ4rxLA24+pz6f27c0SH8veKe6 vJOiuiAxv2Qz9czmp0RtOXgTWq3Q525pVamT5299+dfZL/yPzAes7JfftFuBimup QS+OWfIpEb6KJ3KIfPq+A/o4J4xvj7o= -----END CERTIFICATE-----Generated at Mon Oct 20 15:07:07 2025 by rpki-client