$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/999f9ef0-6638-36a7-9955-5a07fa3c4f82.roa File: 999f9ef0-6638-36a7-9955-5a07fa3c4f82.roa (raw, json) Hash identifier: a0+//4YwIHOz6W7/c/ODWqGobhCX6el2CVmahkwwzMc= Subject key identifier: 93:9A:59:24:4E:B4:77:8C:EC:07:BD:C9:12:7F:5D:04:53:B2:68:BC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B87B22A1E979A114E1AECB400 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/999f9ef0-6638-36a7-9955-5a07fa3c4f82.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 6167 IP address blocks: 174.225.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:2a:1e:97:9a:11:4e:1a:ec:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=4b9872be-c2c5-4232-98da-cdb2b22c12e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9e:5e:8d:28:f6:5f:cd:79:cd:13:5a:fb:df: be:ad:39:82:78:b6:69:5f:66:19:a0:4d:ff:aa:51: 12:9a:cd:80:34:e2:7c:2c:15:db:9d:83:38:79:04: 23:63:cb:61:6b:d3:37:85:61:29:a4:f8:c2:0b:7f: 28:7e:d7:34:ad:bf:40:3c:e3:6f:99:e7:ae:29:d8: 11:3a:76:90:5e:f9:7d:3b:f2:0c:c1:35:dd:bc:38: e9:5e:bf:e5:df:e0:bd:d5:33:55:c1:f2:76:24:b1: 10:95:a8:c8:ff:30:ee:57:0a:c0:0f:9c:24:35:8e: 23:79:6a:fc:87:e9:69:90:af:f5:4a:39:62:f9:9d: 16:c4:78:a5:4d:1a:ce:78:af:b2:89:05:db:f5:f1: cb:85:2e:e4:18:fd:d3:f0:e2:dc:ec:0d:d4:78:0f: ea:a6:50:d3:05:5b:56:1c:7e:85:93:eb:95:fb:0a: 9f:35:14:93:35:64:f8:8a:e3:13:fa:06:70:f0:4d: 12:ff:0e:8e:87:6a:96:06:aa:93:37:0f:6a:49:11: a3:51:97:04:59:fc:7a:bd:e3:2d:9c:65:ef:9b:42: 12:fb:b7:0e:fd:b3:01:11:3f:0f:bc:5b:a4:7f:07: 59:93:02:6a:ea:78:5c:04:4b:56:87:d0:20:13:af: 84:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:9A:59:24:4E:B4:77:8C:EC:07:BD:C9:12:7F:5D:04:53:B2:68:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/999f9ef0-6638-36a7-9955-5a07fa3c4f82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.225.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:8f:f0:79:7c:fc:3a:bf:a4:5d:a1:d9:a0:86:15:56:02:a8: 72:e1:f5:80:d6:8a:2d:14:d7:4d:c6:b9:4a:05:a9:ed:8d:aa: f5:79:83:42:6c:e4:4b:0e:55:aa:48:18:05:73:9f:7d:ca:d9: 63:d9:67:e3:8f:f8:d7:7e:b0:df:eb:63:1e:a9:ce:0e:97:e7: ec:0f:e4:d1:c4:8f:c1:d1:35:fa:36:f2:98:36:45:ee:97:5e: 46:a6:3a:a3:56:86:db:2d:9a:5c:3c:8f:d1:10:c4:99:a4:32: 31:8f:78:97:25:47:02:f8:e1:65:2f:8a:a3:2c:05:24:94:9f: 09:bf:36:c6:b7:c4:ca:39:a6:45:9a:78:3d:ab:09:54:65:64: d8:7c:43:d9:95:13:23:86:48:5b:bd:ab:2e:42:a6:37:93:88: 03:94:f9:5e:98:ef:35:ef:89:46:88:99:83:d2:b3:d6:61:c2: 37:b7:a9:dd:3b:bc:79:3c:0d:cc:8c:e1:0d:21:a6:bc:b5:e9: 1a:45:2c:c8:c7:18:2c:9f:27:84:2e:b4:32:5c:d4:20:7d:7a: f2:4d:26:39:6a:06:2a:e9:bb:34:5c:0c:f2:de:fd:70:44:ff: 82:10:72:8e:08:fe:fa:15:45:e8:a6:0d:09:57:6c:b4:1c:41: ba:a3:34:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsioel5oRThrstAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk NGI5ODcyYmUtYzJjNS00MjMyLTk4ZGEtY2RiMmIyMmMxMmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp5ejSj2X815zRNa+9++rTmCeLZpX2YZoE3/ qlESms2ANOJ8LBXbnYM4eQQjY8tha9M3hWEppPjCC38oftc0rb9APONvmeeuKdgR OnaQXvl9O/IMwTXdvDjpXr/l3+C91TNVwfJ2JLEQlajI/zDuVwrAD5wkNY4jeWr8 h+lpkK/1Sjli+Z0WxHilTRrOeK+yiQXb9fHLhS7kGP3T8OLc7A3UeA/qplDTBVtW HH6Fk+uV+wqfNRSTNWT4iuMT+gZw8E0S/w6Oh2qWBqqTNw9qSRGjUZcEWfx6veMt nGXvm0IS+7cO/bMBET8PvFukfwdZkwJq6nhcBEtWh9AgE6+EDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOaWSROtHeM7Ae9yRJ/XQRTsmi8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTk5ZjllZjAtNjYzOC0z NmE3LTk5NTUtNWEwN2ZhM2M0ZjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaP8Hl8/Dq/pF2h2aCGFVYCqHLh9YDWii0U103GuUoFqe2NqvV5g0Js 5EsOVapIGAVzn33K2WPZZ+OP+Nd+sN/rYx6pzg6X5+wP5NHEj8HRNfo28pg2Re6X XkamOqNWhtstmlw8j9EQxJmkMjGPeJclRwL44WUviqMsBSSUnwm/Nsa3xMo5pkWa eD2rCVRlZNh8Q9mVEyOGSFu9qy5CpjeTiAOU+V6Y7zXviUaImYPSs9Zhwje3qd07 vHk8DcyM4Q0hpry16RpFLMjHGCyfJ4QutDJc1CB9evJNJjlqBirpuzRcDPLe/XBE /4IQco4I/voVReimDQlXbLQcQbqjNIw= -----END CERTIFICATE-----Generated at Mon Oct 20 12:18:58 2025 by rpki-client