$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba9ac850-e103-3a58-93c0-7fce5c6783b3.roa File: ba9ac850-e103-3a58-93c0-7fce5c6783b3.roa (raw, json) Hash identifier: edbbTyqUTyCWsB2yg+7dhIGti2yh42dyFIvRvZyl7zQ= Subject key identifier: E6:A1:64:74:AD:CA:95:0F:AB:8A:67:4D:49:69:0B:F7:58:97:96:DC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584AD5C337DCC99A9D66834A0480 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba9ac850-e103-3a58-93c0-7fce5c6783b3.roa Signing time: Tue 12 Aug 2025 19:21:17 +0000 ROA not before: Tue 12 Aug 2025 19:21:17 +0000 ROA not after: Mon 10 Nov 2025 20:21:17 +0000 asID: 6167 IP address blocks: 174.200.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:c3:37:dc:c9:9a:9d:66:83:4a:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 12 19:21:17 2025 GMT Not After : Nov 10 20:21:17 2025 GMT Subject: CN=636c43f2-0150-4956-b323-ee88ec707a39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:5e:cb:0f:21:c3:fb:b8:cf:5d:5a:da:ab:1d: 9c:42:95:cf:19:a2:ee:0a:84:a2:14:59:ff:9b:17: e7:1f:6e:9a:cc:40:f4:c0:1c:e0:2b:f2:4c:3c:71: 40:ac:91:85:ea:2c:32:ed:90:ec:ef:93:e7:2c:66: a5:f0:0f:e3:8b:91:56:1b:e0:f7:eb:26:2c:08:b3: 56:8f:71:13:3e:55:95:b6:80:dc:bd:31:40:80:29: ff:f8:46:4a:e3:4e:ac:00:63:46:b6:24:b9:5b:88: ca:85:7e:90:23:f0:f1:0c:13:b8:b9:9f:d9:37:7c: 5b:fd:eb:bf:95:63:5f:ab:c6:7e:ef:d8:ce:29:17: 7e:d3:da:b6:fa:f1:11:9c:63:43:78:55:14:3d:55: ec:f0:c3:63:c5:d0:fe:95:50:2f:4b:46:05:a3:2a: 28:3a:12:40:e3:b1:61:32:a1:b2:99:60:d2:e8:0a: 46:2d:1a:ba:6d:27:11:d9:f7:b5:1e:02:c2:37:bb: 9a:84:7c:67:76:8c:15:8f:98:72:0f:3b:11:bc:c4: 4e:58:2e:f0:0e:69:7f:13:97:cb:07:69:a6:ba:25: 91:b7:ff:ab:e7:fa:9e:b7:67:8a:76:d0:c5:fb:5e: 84:e3:29:5a:8d:76:b7:cd:af:61:cd:b8:92:9a:0b: d8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A1:64:74:AD:CA:95:0F:AB:8A:67:4D:49:69:0B:F7:58:97:96:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba9ac850-e103-3a58-93c0-7fce5c6783b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.200.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:13:5c:4b:18:fa:04:8c:45:b2:ec:f9:54:c3:2f:76:65:81: 9d:64:1e:f0:7b:82:9f:90:3c:0c:d6:d2:1b:3c:e3:d7:91:34: f1:49:fc:d3:a3:e7:63:7f:4a:d7:13:61:59:e0:56:c5:db:88: d6:6c:28:71:9c:34:ef:3c:9f:67:68:9c:41:92:5f:bf:0f:8b: 8b:cd:5b:4a:52:3e:11:70:79:f7:26:cd:5d:22:d7:bb:ab:ce: 36:5e:8b:48:87:46:13:b0:c0:8a:bb:62:e6:dc:07:0b:9b:e3: 40:2d:a3:d1:47:f0:e9:75:ce:58:7d:a1:89:d9:1c:64:14:31: 37:c0:b7:98:49:11:1c:64:63:44:66:74:3b:a6:6e:c5:d5:ef: 30:2b:59:36:da:a5:3a:18:71:e4:a3:59:4c:71:5d:1d:55:5c: ae:a5:c0:15:f9:2a:ee:39:3b:f7:94:07:d2:71:78:e6:12:a0: cb:ab:c1:b9:ae:b3:6e:8b:cb:e2:3d:ae:50:47:ea:be:bf:db: 99:e7:f9:13:9f:70:10:20:24:b5:5c:b7:a2:9f:12:c4:b2:d8: e2:a5:2c:2c:be:bc:02:de:87:71:06:00:b0:dd:2a:c0:c6:03: 97:89:4b:97:61:ea:54:b0:76:5e:af:9e:86:d5:60:4b:f9:79: 57:d9:f9:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVwzfcyZqdZoNKBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgxMjE5MjExN1oXDTI1MTExMDIwMjExN1owLzEtMCsGA1UEAxMk NjM2YzQzZjItMDE1MC00OTU2LWIzMjMtZWU4OGVjNzA3YTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg17LDyHD+7jPXVraqx2cQpXPGaLuCoSiFFn/ mxfnH26azED0wBzgK/JMPHFArJGF6iwy7ZDs75PnLGal8A/ji5FWG+D36yYsCLNW j3ETPlWVtoDcvTFAgCn/+EZK406sAGNGtiS5W4jKhX6QI/DxDBO4uZ/ZN3xb/eu/ lWNfq8Z+79jOKRd+09q2+vERnGNDeFUUPVXs8MNjxdD+lVAvS0YFoyooOhJA47Fh MqGymWDS6ApGLRq6bScR2fe1HgLCN7uahHxndowVj5hyDzsRvMROWC7wDml/E5fL B2mmuiWRt/+r5/qet2eKdtDF+16E4ylajXa3za9hzbiSmgvYEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOahZHStypUPq4pnTUlpC/dYl5bcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmE5YWM4NTAtZTEwMy0z YTU4LTkzYzAtN2ZjZTVjNjc4M2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrsgoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoTXEsY+gSMRbLs+VTDL3ZlgZ1kHvB7gp+QPAzW0hs849eRNPFJ/NOj 52N/StcTYVngVsXbiNZsKHGcNO88n2donEGSX78Pi4vNW0pSPhFwefcmzV0i17ur zjZei0iHRhOwwIq7YubcBwub40Ato9FH8Ol1zlh9oYnZHGQUMTfAt5hJERxkY0Rm dDumbsXV7zArWTbapToYceSjWUxxXR1VXK6lwBX5Ku45O/eUB9JxeOYSoMurwbmu s26Ly+I9rlBH6r6/25nn+ROfcBAgJLVct6KfEsSy2OKlLCy+vALeh3EGALDdKsDG A5eJS5dh6lSwdl6vnobVYEv5eVfZ+Tg= -----END CERTIFICATE-----Generated at Mon Oct 20 20:22:10 2025 by rpki-client