$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b39ec023-ac87-34ae-a387-3c24998f6c03.roa File: b39ec023-ac87-34ae-a387-3c24998f6c03.roa (raw, json) Hash identifier: 1UbwFEFB5E57yG8owHKQm4OyUrXMrJNgPoqGglAv1AM= Subject key identifier: C3:C8:7D:BD:FB:37:D0:B5:D6:77:11:76:07:AE:B0:52:D4:90:C0:66 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B87B232A964C1669E27B8B590 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b39ec023-ac87-34ae-a387-3c24998f6c03.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 6167 IP address blocks: 174.238.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:32:a9:64:c1:66:9e:27:b8:b5:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=3f6f2153-13a9-48dc-a79b-5132107be050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:35:46:0a:7e:75:05:a9:0b:e8:7a:b9:97:0a: 02:a1:73:1e:8b:56:e6:af:77:6c:a3:dc:e6:93:10: 6b:2b:ce:55:5f:55:1c:01:80:c3:5a:e4:b5:ea:73: 15:9d:9f:af:23:d6:17:b1:16:69:8e:bd:3e:bf:2e: 6f:b6:d4:fd:b3:87:fd:3a:49:7e:41:45:20:97:43: 99:5e:85:4e:99:e4:61:3f:a9:9b:6b:90:be:e0:5d: 65:0c:8c:7b:f9:cd:e4:92:98:85:9d:ac:42:b0:ba: a5:c5:4a:3b:33:32:4c:37:5c:d5:50:47:a6:a1:ec: f2:d8:67:a4:20:7b:b6:e3:cb:90:77:4b:ae:b2:2f: 6c:74:b4:73:2e:c9:ff:4e:36:7d:10:af:b3:e4:c8: d1:b6:ca:4c:35:87:83:49:bb:b6:18:65:bd:bd:d5: 81:6a:b2:2b:12:c2:69:1b:91:99:48:11:69:98:88: 45:04:dc:0a:ae:77:91:1f:a1:84:b6:50:ac:ca:88: 4d:9d:6f:0d:6d:14:43:5b:77:94:04:8a:d9:be:3f: 0f:44:c5:90:c1:40:a1:e6:45:64:4d:be:05:26:98: a4:60:1d:f5:68:e7:6c:be:44:1c:af:93:95:18:0a: 82:c7:bf:ea:70:ea:f1:54:99:aa:63:29:fa:42:a1: ef:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C8:7D:BD:FB:37:D0:B5:D6:77:11:76:07:AE:B0:52:D4:90:C0:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b39ec023-ac87-34ae-a387-3c24998f6c03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.238.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:4d:53:32:ee:31:4c:df:91:ca:77:de:78:dd:d5:d7:25:a8: 9d:f0:6a:bb:27:17:85:4e:e5:62:90:56:de:5c:71:bf:99:5c: 08:1d:47:1e:10:4b:3c:52:3b:0f:e2:fd:c7:a0:5d:f2:47:74: 7d:ae:be:0a:0f:60:37:3a:1a:da:05:fc:07:50:62:96:ed:0a: 72:25:7d:0e:d4:f7:c8:95:57:27:e4:0a:d3:45:8d:02:33:da: cb:4d:64:e4:b4:cf:c1:8b:6b:99:c4:2e:d3:0a:34:d5:94:01: 6d:9b:65:97:4f:25:81:96:2b:01:21:9d:ec:1b:ed:5c:32:e1: 8f:c6:cf:0b:25:b1:8d:ad:00:d7:02:8f:8b:ea:11:55:f7:8e: cd:df:f9:5d:6f:e9:58:cb:3c:28:3a:20:e8:4f:f6:a1:39:0c: b4:fa:cd:e7:0a:42:16:82:54:05:e6:25:d0:21:ab:aa:af:53: 7a:e0:66:7f:7c:46:94:e1:43:8c:11:51:86:a3:68:a5:e5:71: 0a:5f:ae:9e:10:9f:3c:77:99:93:3b:36:a7:e5:e6:e1:55:25: af:53:fe:96:49:62:ee:4c:8a:6e:e7:de:23:fe:80:5a:93:79: 0c:17:d9:54:1b:f2:63:04:6f:78:2b:c2:47:9e:f4:d8:dc:46: bb:65:55:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsjKpZMFmnie4tZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk M2Y2ZjIxNTMtMTNhOS00OGRjLWE3OWItNTEzMjEwN2JlMDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDVGCn51BakL6Hq5lwoCoXMei1bmr3dso9zm kxBrK85VX1UcAYDDWuS16nMVnZ+vI9YXsRZpjr0+vy5vttT9s4f9Okl+QUUgl0OZ XoVOmeRhP6mba5C+4F1lDIx7+c3kkpiFnaxCsLqlxUo7MzJMN1zVUEemoezy2Gek IHu248uQd0uusi9sdLRzLsn/TjZ9EK+z5MjRtspMNYeDSbu2GGW9vdWBarIrEsJp G5GZSBFpmIhFBNwKrneRH6GEtlCsyohNnW8NbRRDW3eUBIrZvj8PRMWQwUCh5kVk Tb4FJpikYB31aOdsvkQcr5OVGAqCx7/qcOrxVJmqYyn6QqHvJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPIfb37N9C11ncRdgeusFLUkMBmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjM5ZWMwMjMtYWM4Ny0z NGFlLWEzODctM2MyNDk5OGY2YzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEru4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVNUzLuMUzfkcp33njd1dclqJ3warsnF4VO5WKQVt5ccb+ZXAgdRx4Q SzxSOw/i/cegXfJHdH2uvgoPYDc6GtoF/AdQYpbtCnIlfQ7U98iVVyfkCtNFjQIz 2stNZOS0z8GLa5nELtMKNNWUAW2bZZdPJYGWKwEhnewb7Vwy4Y/GzwslsY2tANcC j4vqEVX3js3f+V1v6VjLPCg6IOhP9qE5DLT6zecKQhaCVAXmJdAhq6qvU3rgZn98 RpThQ4wRUYajaKXlcQpfrp4Qnzx3mZM7Nqfl5uFVJa9T/pZJYu5Mim7n3iP+gFqT eQwX2VQb8mMEb3grwkee9NjcRrtlVdw= -----END CERTIFICATE-----Generated at Mon Oct 20 12:18:00 2025 by rpki-client