$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3305379-37a4-3a42-b314-d49105fe9ff3.roa File: d3305379-37a4-3a42-b314-d49105fe9ff3.roa (raw, json) Hash identifier: NAs/p6l8uJvyPO4Rht92JDslFslU9GzDhYsW8GXu7XM= Subject key identifier: 7C:86:61:8A:99:6F:13:98:62:3C:07:5F:26:EC:70:E2:95:7E:0B:80 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B87B232015FFC2A8301F3F700 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3305379-37a4-3a42-b314-d49105fe9ff3.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 6167 IP address blocks: 174.236.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:32:01:5f:fc:2a:83:01:f3:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=e6a55859-7fcb-4c02-9a84-0c01ae57b8ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:cd:24:49:61:77:1d:0a:61:a1:d8:6f:3e:5b: e9:7d:44:92:9d:2e:6c:4e:5f:ea:b8:e4:38:6e:ce: b9:db:12:6b:4a:e3:cf:2f:91:84:a0:70:63:b7:4f: b7:ef:6e:d4:87:ec:3d:52:9e:84:52:5f:db:fb:79: 08:e9:aa:e5:1c:74:5a:88:3f:d1:b7:8c:2d:71:19: e7:58:12:bb:00:8c:9e:dd:19:97:f8:d2:6f:43:1f: 2b:e2:1c:0f:46:4d:d4:07:8e:7b:5b:52:85:49:95: 34:95:23:ec:bb:01:90:43:8f:a2:f6:84:cd:2d:9f: 45:62:6b:c1:1f:c0:d8:0c:0f:e4:b1:96:34:82:f4: 3c:1c:97:8f:16:67:f3:2c:58:e9:59:8d:6b:d7:b5: 07:91:34:c3:14:e2:e2:af:c0:dc:18:7e:96:d7:1a: 9c:61:ed:9b:d7:d6:de:fe:e5:9d:9a:60:3c:d5:bd: d6:ec:89:27:58:43:b8:af:ac:1d:80:55:c0:f8:36: 65:4e:c0:a1:23:63:ac:16:d6:c3:ee:dc:55:35:e3: 78:3c:e4:a8:ad:b4:1f:d0:94:5c:82:d7:c6:f1:83: 80:c9:87:05:cb:60:03:53:28:38:84:44:91:a4:82: 54:55:6d:f5:bc:91:74:79:6a:a9:76:ea:a3:22:58: 8e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:86:61:8A:99:6F:13:98:62:3C:07:5F:26:EC:70:E2:95:7E:0B:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3305379-37a4-3a42-b314-d49105fe9ff3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.236.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:f5:fd:4e:12:f6:68:1d:09:43:df:e5:9c:8b:b8:2c:6b:80: f8:dc:08:20:57:3a:7b:65:1f:a6:17:04:fb:f4:15:b6:ad:f2: 69:df:57:34:8c:a0:f2:ff:f6:10:8d:21:72:33:aa:fa:cd:bb: ba:6a:f5:08:83:e1:41:e7:00:58:de:b4:20:50:04:d6:fc:f5: 24:be:15:e6:95:b3:a3:c9:9a:de:7d:00:f3:3c:f3:a4:0f:8c: f5:88:9f:82:f9:a9:ba:cc:39:ce:20:f7:34:38:93:74:93:4e: 0f:ab:72:02:47:8b:d3:ea:2d:48:52:ac:d6:b0:35:61:df:56: 4d:91:7b:d1:b5:08:8c:ec:69:96:76:e8:2b:db:cb:4f:2b:34: 6c:04:12:86:7f:29:bf:ef:6d:7e:01:1a:2e:50:6e:56:94:60: be:ce:ce:93:ff:7a:c9:9b:50:ab:61:34:3d:6f:f7:89:fa:c6: 05:2a:fa:73:6b:6b:1c:19:a4:8a:17:95:a1:de:6c:b5:cf:42: a3:c7:85:55:50:43:58:31:cf:9b:f8:41:e7:a4:e2:5e:8b:19: 8a:c2:2c:d4:53:c6:da:e8:04:5e:3c:de:a9:c7:31:c8:96:35: 33:ce:cf:4f:6e:05:da:0a:90:ea:a8:26:5e:a3:f7:1b:9a:80: c0:6d:e5:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsjIBX/wqgwHz9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk ZTZhNTU4NTktN2ZjYi00YzAyLTlhODQtMGMwMWFlNTdiOGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhM0kSWF3HQphodhvPlvpfUSSnS5sTl/quOQ4 bs652xJrSuPPL5GEoHBjt0+3727Uh+w9Up6EUl/b+3kI6arlHHRaiD/Rt4wtcRnn WBK7AIye3RmX+NJvQx8r4hwPRk3UB457W1KFSZU0lSPsuwGQQ4+i9oTNLZ9FYmvB H8DYDA/ksZY0gvQ8HJePFmfzLFjpWY1r17UHkTTDFOLir8DcGH6W1xqcYe2b19be /uWdmmA81b3W7IknWEO4r6wdgFXA+DZlTsChI2OsFtbD7txVNeN4POSorbQf0JRc gtfG8YOAyYcFy2ADUyg4hESRpIJUVW31vJF0eWqpduqjIliOdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHyGYYqZbxOYYjwHXybscOKVfguAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDMzMDUzNzktMzdhNC0z YTQyLWIzMTQtZDQ5MTA1ZmU5ZmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBruyeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACz1/U4S9mgdCUPf5ZyLuCxrgPjcCCBXOntlH6YXBPv0Fbat8mnfVzSM oPL/9hCNIXIzqvrNu7pq9QiD4UHnAFjetCBQBNb89SS+FeaVs6PJmt59APM886QP jPWIn4L5qbrMOc4g9zQ4k3STTg+rcgJHi9PqLUhSrNawNWHfVk2Re9G1CIzsaZZ2 6Cvby08rNGwEEoZ/Kb/vbX4BGi5QblaUYL7OzpP/esmbUKthND1v94n6xgUq+nNr axwZpIoXlaHebLXPQqPHhVVQQ1gxz5v4Qeek4l6LGYrCLNRTxtroBF483qnHMciW NTPOz09uBdoKkOqoJl6j9xuagMBt5Rk= -----END CERTIFICATE-----Generated at Mon Oct 20 12:18:52 2025 by rpki-client