$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca2e00fd-8435-347d-9a21-b5ff354a6c32.roa File: ca2e00fd-8435-347d-9a21-b5ff354a6c32.roa (raw, json) Hash identifier: 5vkAZLdkY+5I+cKSqlh1w2oeWxh4CpO+mzGAeOC9OAc= Subject key identifier: 50:B9:5F:1E:B8:25:1C:BF:70:17:61:B0:E7:7C:21:82:B9:DA:28:38 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B87B2369197231C0AD2E4F700 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca2e00fd-8435-347d-9a21-b5ff354a6c32.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 6167 IP address blocks: 174.242.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:36:91:97:23:1c:0a:d2:e4:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=54253dfd-486f-405c-bc8e-819a9d0c491f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0a:13:01:32:5f:e6:4e:d6:fe:fc:ac:62:6d: 00:98:77:59:a1:d7:58:c9:79:6c:9c:18:fe:06:3e: ab:46:52:eb:d5:e0:1c:07:9c:cb:a8:61:75:93:f7: 70:35:83:ee:0b:5d:fd:20:19:5b:11:31:29:79:c7: e1:fa:85:29:66:fd:8e:87:eb:a4:36:f3:89:2c:6b: ed:83:b1:99:6d:ea:4d:89:f7:8f:81:2e:a4:c8:71: a6:10:e2:82:c7:6d:a3:25:a3:4c:04:6f:a9:b4:82: 84:e8:58:50:19:3d:7c:74:14:6c:af:90:2f:5b:01: 13:e6:7b:34:04:dd:ea:1e:66:2f:95:02:59:e7:97: 00:c7:15:56:83:e8:02:ed:94:4a:8e:da:7c:88:d2: ef:7b:a7:a5:41:85:53:1a:f9:ab:27:04:d6:85:70: 8a:5c:7c:1c:15:67:7e:34:25:c6:30:c2:f8:b7:3c: 95:18:dd:d9:ab:17:94:e9:55:df:84:c7:61:be:a5: 8b:43:1b:39:c8:e8:5c:5a:e5:a3:f9:64:b9:01:93: 12:48:85:1b:a9:49:8b:7d:dc:1e:0b:6e:da:ae:91: c3:85:d9:12:23:41:c8:06:11:12:47:54:4e:20:1c: c5:78:8f:b3:9d:94:89:07:c3:50:bd:9f:b7:24:35: 54:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:B9:5F:1E:B8:25:1C:BF:70:17:61:B0:E7:7C:21:82:B9:DA:28:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ca2e00fd-8435-347d-9a21-b5ff354a6c32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.242.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:59:05:b7:e1:9b:e8:02:0b:e4:77:10:18:81:39:ab:31:48: 8d:fd:5d:6c:ac:33:61:2e:fe:ac:15:37:a9:f9:00:a3:5a:71: 0d:30:ba:b8:0d:37:ec:f9:c5:a8:05:58:5d:10:ff:f5:fe:7a: 38:7a:67:59:0c:8a:ff:c7:e2:be:20:4f:1c:ad:dd:64:f8:d0: f9:ec:7a:f8:06:f7:ae:79:d5:5d:e4:47:93:f3:79:fd:23:d9: 3d:b4:d0:a3:0f:e4:65:0a:cb:36:5d:60:75:a5:41:3d:0f:53: b7:43:61:69:30:e3:68:88:4f:19:4a:c7:9a:e3:58:48:14:12: 15:73:78:37:1d:32:04:4b:48:60:ca:e1:a8:0d:92:e3:6b:7f: 36:73:e4:c9:00:c2:27:bf:e8:eb:d4:18:55:62:79:1b:fd:2e: 5b:d9:d5:1f:0f:57:04:7e:e6:5c:98:23:0d:ef:f8:b6:66:5c: 08:12:3a:07:9c:11:7d:76:6f:97:76:6f:50:b1:9e:f8:af:20: 30:66:88:17:d0:4d:69:72:b4:2b:fb:97:33:9b:f3:25:44:ab: 5e:27:d9:93:e2:64:d3:a6:66:66:a8:03:dc:1c:ed:46:30:30: 68:b8:f6:c8:d0:37:72:76:10:50:a2:21:77:f7:93:ad:c8:a6: 00:12:5a:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsjaRlyMcCtLk9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk NTQyNTNkZmQtNDg2Zi00MDVjLWJjOGUtODE5YTlkMGM0OTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgoTATJf5k7W/vysYm0AmHdZoddYyXlsnBj+ Bj6rRlLr1eAcB5zLqGF1k/dwNYPuC139IBlbETEpecfh+oUpZv2Oh+ukNvOJLGvt g7GZbepNifePgS6kyHGmEOKCx22jJaNMBG+ptIKE6FhQGT18dBRsr5AvWwET5ns0 BN3qHmYvlQJZ55cAxxVWg+gC7ZRKjtp8iNLve6elQYVTGvmrJwTWhXCKXHwcFWd+ NCXGMML4tzyVGN3ZqxeU6VXfhMdhvqWLQxs5yOhcWuWj+WS5AZMSSIUbqUmLfdwe C27arpHDhdkSI0HIBhESR1ROIBzFeI+znZSJB8NQvZ+3JDVUuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFC5Xx64JRy/cBdhsOd8IYK52ig4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2EyZTAwZmQtODQzNS0z NDdkLTlhMjEtYjVmZjM1NGE2YzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErvLAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlZBbfhm+gCC+R3EBiBOasxSI39XWysM2Eu/qwVN6n5AKNacQ0wurgN N+z5xagFWF0Q//X+ejh6Z1kMiv/H4r4gTxyt3WT40PnsevgG96551V3kR5Pzef0j 2T200KMP5GUKyzZdYHWlQT0PU7dDYWkw42iITxlKx5rjWEgUEhVzeDcdMgRLSGDK 4agNkuNrfzZz5MkAwie/6OvUGFVieRv9LlvZ1R8PVwR+5lyYIw3v+LZmXAgSOgec EX12b5d2b1CxnvivIDBmiBfQTWlytCv7lzOb8yVEq14n2ZPiZNOmZmaoA9wc7UYw MGi49sjQN3J2EFCiIXf3k63IpgASWv8= -----END CERTIFICATE-----Generated at Mon Oct 20 12:17:05 2025 by rpki-client