$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba6ee143-f521-376e-ba19-1d3400ea691e.roa File: ba6ee143-f521-376e-ba19-1d3400ea691e.roa (raw, json) Hash identifier: LFN6Ka0/XA8YIY8+NXNcvXVnpIHFB/Im4evbdhw6zcs= Subject key identifier: F5:03:0E:3C:2F:65:8D:2F:4E:D3:C2:56:89:2B:75:76:76:C8:68:7C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B8EACFD31EBDC00E91A8A2980 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba6ee143-f521-376e-ba19-1d3400ea691e.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 6167 IP address blocks: 174.42.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:fd:31:eb:dc:00:e9:1a:8a:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=d43ddc8b-47cb-4644-b6c8-b458af1b4fd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5a:ec:a8:88:6f:e0:b7:fc:f1:a6:05:10:14: a8:db:f0:a0:c8:3d:d8:f1:f4:e6:e9:5e:4a:df:73: 0a:6b:bd:85:64:97:54:42:85:55:22:58:4c:e5:38: 5c:e1:60:1f:b8:09:97:d3:38:a8:a0:66:d2:eb:12: 0b:fb:e9:e8:85:7b:7b:49:b1:27:e1:84:f6:4f:c0: 22:6f:f6:cb:19:4e:ff:c0:13:25:2a:be:24:c5:23: 74:00:ab:b2:a9:8d:d7:48:01:87:f1:4e:c6:12:b0: 0c:1c:4b:5c:8c:38:3b:36:b1:57:e6:89:bc:89:66: f8:f4:44:eb:5a:6c:a7:90:55:df:29:35:ba:86:3f: 46:98:cd:44:12:62:49:65:7f:1d:b8:5a:34:48:dc: 1f:d2:83:14:f7:74:d1:a8:b9:a6:64:67:ec:f2:73: 40:7a:dc:93:28:d1:36:95:3e:5b:c2:91:86:7e:86: d8:3f:33:a9:ac:06:7a:5e:22:52:04:70:fc:c5:9b: 29:cc:b2:fb:b7:44:63:d8:66:71:5b:3a:40:8b:c2: 0d:a2:36:bd:a6:27:dd:d4:80:65:ae:2b:71:83:fa: 0f:6f:40:d6:36:b6:28:97:f1:3a:df:15:b2:ac:2b: 45:3c:7a:20:10:c6:91:df:15:a4:4a:93:e2:3c:92: 1e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:03:0E:3C:2F:65:8D:2F:4E:D3:C2:56:89:2B:75:76:76:C8:68:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba6ee143-f521-376e-ba19-1d3400ea691e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.42.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:d2:d7:c5:ef:9b:82:b8:21:c2:19:a9:a7:c3:57:0a:6f:c0: bd:83:c3:23:ab:cd:28:07:07:45:50:b9:8a:51:1f:25:81:5a: 35:a8:e1:2b:d9:26:f0:fb:ef:e9:45:0e:0e:16:6f:8a:fd:85: 76:ae:a7:c0:25:91:6f:71:49:50:3d:87:56:7a:e8:58:18:52: b1:02:a2:24:4d:d6:3e:ad:02:6f:06:42:19:e6:66:5f:bd:d2: 8d:28:59:bb:87:17:5e:01:14:a8:4c:42:9c:7a:45:6c:8f:f7: 20:b8:10:9b:d4:5d:ec:27:af:55:2c:6e:cd:b8:c6:d2:a0:ac: 16:96:12:43:f3:7f:85:58:07:a1:0a:94:d9:47:bf:2e:58:64: 0a:cb:17:36:63:72:d2:d3:60:93:5b:87:7e:4f:53:a6:54:1f: bc:8f:60:c3:a7:e0:7e:25:7e:1b:6c:94:1c:65:b4:df:97:a3: 02:bf:03:b6:a1:0d:5c:6a:31:ab:92:0e:bd:35:c0:68:0b:1a: c0:6a:0b:73:03:ec:90:0c:37:9f:78:e5:93:0a:f4:a3:81:34: 45:1f:54:62:a3:e0:e1:3c:f1:59:41:3f:27:2a:1f:60:1b:4a: 48:31:1d:a0:4d:c1:f8:c1:11:f1:6b:cf:8c:b4:7f:82:9e:a0: 58:8d:26:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrP0x69wA6RqKKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ZDQzZGRjOGItNDdjYi00NjQ0LWI2YzgtYjQ1OGFmMWI0ZmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlrsqIhv4Lf88aYFEBSo2/CgyD3Y8fTm6V5K 33MKa72FZJdUQoVVIlhM5Thc4WAfuAmX0ziooGbS6xIL++nohXt7SbEn4YT2T8Ai b/bLGU7/wBMlKr4kxSN0AKuyqY3XSAGH8U7GErAMHEtcjDg7NrFX5om8iWb49ETr WmynkFXfKTW6hj9GmM1EEmJJZX8duFo0SNwf0oMU93TRqLmmZGfs8nNAetyTKNE2 lT5bwpGGfobYPzOprAZ6XiJSBHD8xZspzLL7t0Rj2GZxWzpAi8INoja9pifd1IBl ritxg/oPb0DWNrYol/E63xWyrCtFPHogEMaR3xWkSpPiPJIeJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUDDjwvZY0vTtPCVokrdXZ2yGh8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmE2ZWUxNDMtZjUyMS0z NzZlLWJhMTktMWQzNDAwZWE2OTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrioYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjS18Xvm4K4IcIZqafDVwpvwL2DwyOrzSgHB0VQuYpRHyWBWjWo4SvZ JvD77+lFDg4Wb4r9hXaup8AlkW9xSVA9h1Z66FgYUrECoiRN1j6tAm8GQhnmZl+9 0o0oWbuHF14BFKhMQpx6RWyP9yC4EJvUXewnr1Usbs24xtKgrBaWEkPzf4VYB6EK lNlHvy5YZArLFzZjctLTYJNbh35PU6ZUH7yPYMOn4H4lfhtslBxltN+XowK/A7ah DVxqMauSDr01wGgLGsBqC3MD7JAMN5945ZMK9KOBNEUfVGKj4OE88VlBPycqH2Ab SkgxHaBNwfjBEfFrz4y0f4KeoFiNJlg= -----END CERTIFICATE-----Generated at Mon Oct 20 17:56:20 2025 by rpki-client