$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98f0c965-ca30-3304-820d-474d9767d316.roa File: 98f0c965-ca30-3304-820d-474d9767d316.roa (raw, json) Hash identifier: iQQDDAfwhQdelaIvBsTha/9qyIuLAEgMkLsNXjHPZTs= Subject key identifier: 7E:D0:50:8A:A3:64:68:39:80:62:89:91:52:DB:D8:88:89:CF:94:63 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B8EACFC661B06B8580AEB4D80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98f0c965-ca30-3304-820d-474d9767d316.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 22394 IP address blocks: 174.41.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:fc:66:1b:06:b8:58:0a:eb:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=b69186a3-e828-4dda-bac1-b9022225bf3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:26:6c:f7:45:89:79:e6:53:00:52:a8:58:44: 35:fc:3c:c4:a6:5a:f7:d6:e5:54:67:30:43:29:b6: 1e:36:e2:85:47:3b:45:f9:55:d6:76:b3:0e:d0:89: 67:bf:1a:31:a1:f1:03:67:a6:20:f1:4c:42:c8:74: f2:54:98:1a:33:70:de:6f:31:23:1d:6f:14:1e:54: 3f:7c:dd:e1:71:74:f7:c3:c0:33:bd:1d:96:5d:76: 1f:ae:d7:23:3d:be:10:4a:fb:b5:d9:3b:e5:f0:fb: 16:2d:07:5a:9e:b3:9b:6f:57:90:ac:45:08:42:91: 84:7b:07:30:ac:ce:ce:e3:be:0e:f4:3f:60:e0:4b: aa:5b:5d:af:53:1b:b7:67:e2:a0:14:34:d0:39:fa: a0:41:8b:fe:ac:fe:aa:a1:f7:c1:f6:7f:72:7f:2d: 33:bc:54:8f:c7:d0:2c:87:b2:ca:3e:c3:43:bd:17: 16:12:8a:9c:20:bf:d9:1b:35:2b:33:c9:37:f1:b2: c8:04:88:6e:2c:5c:16:11:9d:2a:1b:05:a8:04:8c: e6:88:eb:9c:53:bb:48:39:34:c0:09:a2:62:77:de: ef:37:60:b7:c7:9f:dc:72:85:3d:5c:a6:53:cc:c1: 22:65:08:ae:89:d4:52:3b:6d:da:87:ed:fb:fc:5b: 15:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D0:50:8A:A3:64:68:39:80:62:89:91:52:DB:D8:88:89:CF:94:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98f0c965-ca30-3304-820d-474d9767d316.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.41.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:d5:a6:8d:f8:ac:99:1c:c0:c5:59:34:f3:ae:5f:d5:f8:9a: 7f:7c:5d:fe:f3:42:6d:a7:54:63:39:00:16:9c:1b:7f:3c:47: a8:7f:5d:ed:3e:86:38:88:bb:0c:04:5b:55:32:f9:46:13:e6: 39:29:d5:e5:f2:89:e4:b7:6c:ee:96:b6:df:bc:f1:80:cd:5b: 0c:a5:26:7d:c2:16:97:db:0c:d8:9e:e1:f3:1f:34:c4:88:96: 3c:0c:61:46:30:7c:f6:cf:2f:67:fc:a6:e0:fd:3c:eb:3e:27: cb:07:1c:a3:5f:b5:d6:e2:52:15:d8:51:e5:8a:7f:1a:89:70: 85:cb:9c:7f:82:38:6c:0d:1b:22:95:67:06:fd:be:13:6d:72: c1:e4:45:1f:8b:27:19:8f:41:63:c9:d7:1f:ba:c9:ee:ea:6e: d8:89:21:7f:80:a3:93:00:e8:3f:94:d4:97:40:6d:1b:fd:38: 53:85:02:3d:12:ff:70:3a:62:b6:6b:cb:ec:bc:04:79:03:2f: f3:92:6a:95:5f:6c:d1:d9:9e:08:07:d9:25:d1:ed:7a:d7:02: 3d:ba:72:46:fe:a8:58:f0:94:8d:c9:36:b0:62:64:d5:10:52: e7:cc:a9:cf:ef:bd:15:90:2b:6b:81:ab:70:b0:47:3e:cc:22: aa:09:fa:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrPxmGwa4WArrTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk YjY5MTg2YTMtZTgyOC00ZGRhLWJhYzEtYjkwMjIyMjViZjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSZs90WJeeZTAFKoWEQ1/DzEplr31uVUZzBD KbYeNuKFRztF+VXWdrMO0IlnvxoxofEDZ6Yg8UxCyHTyVJgaM3DebzEjHW8UHlQ/ fN3hcXT3w8AzvR2WXXYfrtcjPb4QSvu12Tvl8PsWLQdanrObb1eQrEUIQpGEewcw rM7O474O9D9g4EuqW12vUxu3Z+KgFDTQOfqgQYv+rP6qoffB9n9yfy0zvFSPx9As h7LKPsNDvRcWEoqcIL/ZGzUrM8k38bLIBIhuLFwWEZ0qGwWoBIzmiOucU7tIOTTA CaJid97vN2C3x5/ccoU9XKZTzMEiZQiuidRSO23ah+37/FsViwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7QUIqjZGg5gGKJkVLb2IiJz5RjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOThmMGM5NjUtY2EzMC0z MzA0LTgyMGQtNDc0ZDk3NjdkMzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrimqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDVpo34rJkcwMVZNPOuX9X4mn98Xf7zQm2nVGM5ABacG388R6h/Xe0+ hjiIuwwEW1Uy+UYT5jkp1eXyieS3bO6Wtt+88YDNWwylJn3CFpfbDNie4fMfNMSI ljwMYUYwfPbPL2f8puD9POs+J8sHHKNftdbiUhXYUeWKfxqJcIXLnH+COGwNGyKV Zwb9vhNtcsHkRR+LJxmPQWPJ1x+6ye7qbtiJIX+Ao5MA6D+U1JdAbRv9OFOFAj0S /3A6YrZry+y8BHkDL/OSapVfbNHZnggH2SXR7XrXAj26ckb+qFjwlI3JNrBiZNUQ UufMqc/vvRWQK2uBq3CwRz7MIqoJ+k0= -----END CERTIFICATE-----Generated at Mon Oct 20 15:41:27 2025 by rpki-client