$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1da2dc0-f022-3c72-9695-1b8f5641bce0.roa File: a1da2dc0-f022-3c72-9695-1b8f5641bce0.roa (raw, json) Hash identifier: WxjfO1Ei/ZCicoBIrz0fpAj0qgiA7D9TmYLoiljmLbw= Subject key identifier: 9B:EB:D4:D0:DA:C0:6A:A4:A4:B2:12:11:4B:DA:62:B5:7D:91:55:EC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B8EAD082EDECC28DD87C101C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1da2dc0-f022-3c72-9695-1b8f5641bce0.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 6167 IP address blocks: 174.42.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ad:08:2e:de:cc:28:dd:87:c1:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=64cea268-6c46-498e-b7a5-d6c27f0835c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d2:df:45:7b:b0:92:d9:c9:52:80:59:c3:7d: 76:14:f7:bc:ac:b4:d6:90:48:71:55:c4:2c:b8:81: 5d:fd:05:ae:9d:0c:5a:f4:de:cc:96:7e:e8:da:1b: 5c:be:38:9b:80:9d:f6:de:01:76:c6:2a:f9:29:ec: e2:f1:d1:dd:9e:9b:b3:dd:79:88:ff:c7:cd:18:44: 06:d9:73:8c:16:17:b0:16:6e:93:a8:6b:36:05:05: 80:ef:ef:a4:f8:37:e4:06:de:05:7e:41:8d:0a:30: 1d:22:c4:7b:7b:c2:32:84:66:57:be:ac:3e:2a:bb: fd:11:d3:c9:01:62:77:34:ca:65:69:00:6d:aa:c0: 9e:81:fc:d7:89:f0:b5:7c:3b:62:52:2c:cd:c7:8a: 09:49:36:ee:75:4b:e1:30:73:64:32:de:2b:86:bc: c5:ea:5c:ca:9a:04:41:bb:4a:37:98:a0:5e:ac:5d: 94:ca:5b:b4:74:03:65:66:4f:e3:6c:af:ef:01:3e: 54:f9:31:c0:9a:56:8c:1e:63:c7:11:f8:0e:e0:98: b3:c4:bf:57:d0:e4:1c:2a:5e:ba:05:de:ce:6e:b0: 27:a4:be:bc:5d:b6:1b:f2:8f:f2:33:9b:15:7e:8a: 50:83:a0:aa:1c:cf:22:46:9e:cc:ce:b4:61:bb:a4: 86:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:EB:D4:D0:DA:C0:6A:A4:A4:B2:12:11:4B:DA:62:B5:7D:91:55:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1da2dc0-f022-3c72-9695-1b8f5641bce0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.42.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:b2:4c:07:e3:a5:f5:b6:50:2c:91:8c:3e:ef:7d:2f:29:7c: 46:dd:e6:73:8e:4d:cb:cc:29:f9:d3:22:85:33:b7:4b:9c:c8: 26:89:16:0c:2a:4e:b9:05:e6:f8:cf:20:ce:ef:5f:d8:f8:52: a7:c8:00:c3:84:26:f7:dc:be:cd:50:94:ad:9f:e7:2e:b3:14: 87:64:af:59:76:0f:15:eb:ee:23:d7:a5:31:c8:75:73:c4:db: 67:6d:f2:b4:57:b0:2e:2c:ff:e5:38:bf:b7:fe:57:88:c8:78: c1:b8:f2:f9:37:2a:fd:b9:81:9a:f6:f2:0e:5f:40:4f:2a:b4: 1a:ba:4c:c1:3e:f3:43:bb:6b:c2:bf:b1:26:03:25:66:4e:d9: 9d:67:c2:d5:49:65:08:e8:f4:df:a5:87:f6:47:d1:10:48:7f: ba:8a:7a:37:2a:41:da:21:f3:a9:9b:9f:27:4f:e3:7c:d7:1e: 2c:4e:a0:41:a6:f2:ce:41:e2:96:fa:1d:35:9e:61:94:3e:a7: 6b:f0:5b:7f:9e:f9:cb:a0:a3:32:29:f4:45:d9:3b:54:38:b9: 86:32:ec:53:4f:af:01:2f:53:ac:83:79:59:c0:e1:44:1d:c7: 84:e3:ef:4b:df:3c:fe:1a:2f:f6:8c:fa:aa:10:f2:ca:1f:d8: ad:3b:55:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrQgu3swo3YfBAcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk NjRjZWEyNjgtNmM0Ni00OThlLWI3YTUtZDZjMjdmMDgzNWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktLfRXuwktnJUoBZw312FPe8rLTWkEhxVcQs uIFd/QWunQxa9N7Mln7o2htcvjibgJ323gF2xir5Kezi8dHdnpuz3XmI/8fNGEQG 2XOMFhewFm6TqGs2BQWA7++k+DfkBt4FfkGNCjAdIsR7e8IyhGZXvqw+Krv9EdPJ AWJ3NMplaQBtqsCegfzXifC1fDtiUizNx4oJSTbudUvhMHNkMt4rhrzF6lzKmgRB u0o3mKBerF2Uylu0dANlZk/jbK/vAT5U+THAmlaMHmPHEfgO4JizxL9X0OQcKl66 Bd7ObrAnpL68XbYb8o/yM5sVfopQg6CqHM8iRp7MzrRhu6SGuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvr1NDawGqkpLISEUvaYrV9kVXsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTFkYTJkYzAtZjAyMi0z YzcyLTk2OTUtMWI4ZjU2NDFiY2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErirwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAayTAfjpfW2UCyRjD7vfS8pfEbd5nOOTcvMKfnTIoUzt0ucyCaJFgwq TrkF5vjPIM7vX9j4UqfIAMOEJvfcvs1QlK2f5y6zFIdkr1l2DxXr7iPXpTHIdXPE 22dt8rRXsC4s/+U4v7f+V4jIeMG48vk3Kv25gZr28g5fQE8qtBq6TME+80O7a8K/ sSYDJWZO2Z1nwtVJZQjo9N+lh/ZH0RBIf7qKejcqQdoh86mbnydP43zXHixOoEGm 8s5B4pb6HTWeYZQ+p2vwW3+e+cugozIp9EXZO1Q4uYYy7FNPrwEvU6yDeVnA4UQd x4Tj70vfPP4aL/aM+qoQ8sof2K07Vcc= -----END CERTIFICATE-----Generated at Mon Oct 20 15:11:59 2025 by rpki-client