$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2873f22a-9d5b-31d6-88ce-4da0ea94b5c7.roa File: 2873f22a-9d5b-31d6-88ce-4da0ea94b5c7.roa (raw, json) Hash identifier: zq14ltMH5/R8qAbYy/yVH1JC/nGhzvd0yQQ0hFmmLgE= Subject key identifier: D8:BC:18:00:6F:18:F3:7E:3B:29:21:F5:E4:AC:75:A2:F9:33:AD:33 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584B821DC558904694E1C16DD880 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2873f22a-9d5b-31d6-88ce-4da0ea94b5c7.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 10796 IP address blocks: 192.61.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:c5:58:90:46:94:e1:c1:6d:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=51655fb9-bbb9-4aba-b25c-6c273f864845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a0:f4:f5:e0:02:c8:33:88:2e:87:ff:07:18: a9:24:7e:aa:23:20:17:c1:de:1a:e4:94:b5:4b:0a: c0:7e:e7:e5:f7:6a:31:a5:c8:2a:50:30:e8:64:a3: 01:a3:60:0b:c6:9c:03:f4:22:42:ce:85:71:32:ba: fd:ff:8e:f5:3c:61:d3:1c:8d:c2:14:97:16:02:36: e3:90:f6:c7:f0:78:53:59:07:c3:c4:2a:77:5b:bf: 6b:af:57:3c:a7:ef:04:9c:72:a9:8b:b1:51:ca:ee: 29:fc:ea:98:d7:08:f0:91:d7:8a:e2:9e:12:5a:b6: a5:74:29:f1:dc:11:59:2c:c1:59:18:31:70:39:6c: 6d:3a:f8:17:d2:11:05:a8:e6:b9:cd:9c:ff:a1:30: 1a:ea:33:5e:f4:43:18:98:a0:7e:17:a8:c0:bd:25: 3a:07:ec:76:5d:ce:ce:55:98:d4:ef:83:a8:c7:a0: 0d:75:0b:32:44:f4:ad:70:e4:07:61:78:8c:ab:9d: 16:bc:f6:dc:84:19:02:a1:7e:1b:c8:88:aa:a7:0b: f5:d0:2e:ca:91:ba:bb:d7:d5:47:77:f6:ed:d4:f3: c6:53:b2:f9:49:ae:39:f8:dd:a0:17:79:1d:87:05: 10:3b:20:db:93:84:30:da:94:1a:43:1c:e9:a5:7b: 3c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:BC:18:00:6F:18:F3:7E:3B:29:21:F5:E4:AC:75:A2:F9:33:AD:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/2873f22a-9d5b-31d6-88ce-4da0ea94b5c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 192.61.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:8c:d8:19:1c:48:89:e5:4e:96:30:fa:4b:69:1b:26:83:37: 1c:0c:d6:2c:f0:0f:8b:2c:26:76:dd:98:ec:c0:0e:4c:aa:bc: ce:7a:f8:85:68:8e:58:bc:6d:26:db:f1:ba:ae:c4:de:c8:b1: 39:57:c7:66:61:08:8b:f5:c4:af:73:2f:b3:cd:cc:14:cb:c7: a2:ec:04:bd:59:12:dc:76:dc:c6:a6:28:39:b7:e0:73:5e:3f: b4:46:45:3e:9b:20:5e:93:91:a6:b2:c8:6c:1f:21:79:7b:9f: 07:47:dc:cc:15:26:4b:01:05:78:6a:8e:5b:ae:4a:7f:5c:46: 9c:30:66:b3:a3:24:ea:fb:d2:fe:37:b7:54:87:50:cf:41:70: ea:59:22:6a:97:6c:39:eb:27:61:60:30:cb:f8:e9:d1:dc:4b: 93:0c:5d:af:cf:d1:b6:6e:e3:74:1f:b7:c8:9f:99:f5:0b:cb: 99:16:8a:2e:d8:68:d8:87:09:3f:f2:de:ea:8e:e9:70:4e:47: 03:24:e7:a5:fe:34:a9:82:d5:8e:dc:58:a6:e1:e4:c4:be:11: 01:71:7b:8d:13:42:eb:06:d2:e7:01:7e:72:03:ac:58:54:77: 89:de:aa:78:5e:14:0e:99:dc:f9:00:fc:3c:ce:97:8a:d1:2e: 25:ba:ba:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHcVYkEaU4cFt2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk NTE2NTVmYjktYmJiOS00YWJhLWIyNWMtNmMyNzNmODY0ODQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaD09eACyDOILof/BxipJH6qIyAXwd4a5JS1 SwrAfufl92oxpcgqUDDoZKMBo2ALxpwD9CJCzoVxMrr9/471PGHTHI3CFJcWAjbj kPbH8HhTWQfDxCp3W79rr1c8p+8EnHKpi7FRyu4p/OqY1wjwkdeK4p4SWraldCnx 3BFZLMFZGDFwOWxtOvgX0hEFqOa5zZz/oTAa6jNe9EMYmKB+F6jAvSU6B+x2Xc7O VZjU74Oox6ANdQsyRPStcOQHYXiMq50WvPbchBkCoX4byIiqpwv10C7Kkbq719VH d/bt1PPGU7L5Sa45+N2gF3kdhwUQOyDbk4Qw2pQaQxzppXs8iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNi8GABvGPN+Oykh9eSsdaL5M60zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvMjg3M2YyMmEtOWQ1Yi0z MWQ2LTg4Y2UtNGRhMGVhOTRiNWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwD0cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALWM2BkcSInlTpYw+ktpGyaDNxwM1izwD4ssJnbdmOzADkyqvM56+IVo jli8bSbb8bquxN7IsTlXx2ZhCIv1xK9zL7PNzBTLx6LsBL1ZEtx23MamKDm34HNe P7RGRT6bIF6TkaayyGwfIXl7nwdH3MwVJksBBXhqjluuSn9cRpwwZrOjJOr70v43 t1SHUM9BcOpZImqXbDnrJ2FgMMv46dHcS5MMXa/P0bZu43Qft8ifmfULy5kWii7Y aNiHCT/y3uqO6XBORwMk56X+NKmC1Y7cWKbh5MS+EQFxe40TQusG0ucBfnIDrFhU d4neqnheFA6Z3PkA/DzOl4rRLiW6uks= -----END CERTIFICATE-----Generated at Mon Oct 20 11:05:57 2025 by rpki-client