$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/02eb44c2-7a70-3b89-92a9-0b319d9e4bfa.roa File: 02eb44c2-7a70-3b89-92a9-0b319d9e4bfa.roa (raw, json) Hash identifier: Bx61G3+nkkcgl7qHnMs5IG3o40hDiAcsQo50QvgTpJU= Subject key identifier: A1:FA:E9:C3:79:65:B3:ED:B5:0B:FB:F4:78:E6:79:CB:51:03:09:F1 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B5141F0ED111F6B8549702DD0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/02eb44c2-7a70-3b89-92a9-0b319d9e4bfa.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 6167 IP address blocks: 174.196.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:f0:ed:11:1f:6b:85:49:70:2d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=aef88cde-3513-4850-b161-b3fe261d05a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0b:c8:e6:8c:fd:69:c1:ee:cd:52:4c:28:28: f3:84:1f:1c:e2:7f:74:81:e6:8e:e5:61:95:66:58: 95:03:da:f3:a4:55:ca:d0:dc:76:42:ed:cf:8f:bc: 8c:a4:c4:9e:88:c7:46:91:d2:c2:54:f6:15:5b:8c: e6:88:ce:b7:1d:63:90:b1:c4:d6:f3:bc:11:b0:81: f5:f6:4b:6e:f4:fa:9e:5c:b7:26:a5:7f:82:a7:02: 68:4b:8d:f3:99:26:e8:15:71:c5:20:18:3c:21:00: 35:03:56:93:29:e4:9c:5c:04:7e:fa:e4:b1:43:e8: 8e:e3:69:60:81:06:e9:e1:6a:51:e6:52:ce:22:03: 05:13:ac:a5:89:66:35:0c:83:d6:49:0d:67:1f:e3: 5f:ef:20:33:9b:6b:fe:2a:76:b9:c1:0e:21:f1:e7: a4:a1:82:e1:83:87:90:20:41:bd:fd:9e:13:d1:97: 86:b9:cb:52:95:72:9d:55:38:aa:7c:44:d7:24:fa: ef:71:5a:b8:e0:72:5a:ad:9d:23:68:25:e8:6a:c8: 3d:9c:fc:62:38:66:b8:3c:34:b8:77:cd:54:7c:61: e2:0c:f6:a9:4f:e6:ee:e2:50:5b:9e:19:a8:16:9e: 80:54:96:9f:4d:b1:97:ed:ba:b1:fe:42:aa:3f:fe: f6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:FA:E9:C3:79:65:B3:ED:B5:0B:FB:F4:78:E6:79:CB:51:03:09:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/02eb44c2-7a70-3b89-92a9-0b319d9e4bfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.196.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:f9:dd:b8:43:72:52:a1:48:c0:1a:70:87:4f:01:5c:af:b5: 6f:78:e5:83:be:b4:53:ad:50:35:e5:f5:2b:19:b9:cf:40:50: 71:01:90:d2:d9:e4:17:66:53:35:16:5a:94:bf:19:5a:65:f8: 5e:be:81:97:46:46:95:4e:5a:fa:46:d9:76:cb:92:4f:5a:b2: f2:37:6d:54:35:04:b7:d2:1f:23:0b:6f:90:1d:71:0a:a5:14: 60:73:1c:83:86:f0:5d:4e:a4:77:f0:34:bd:59:3f:6b:61:2a: e5:b8:60:8f:06:5d:3b:08:23:56:dd:43:6d:c4:bf:46:5b:d4: bc:ca:98:1f:8e:bd:bc:d5:58:ac:75:f4:76:7c:13:0a:3c:05: 1d:0d:0e:82:bd:80:5d:c2:2f:61:4b:34:4e:14:84:d3:9a:b0: 21:44:8a:4d:c2:3f:6c:b7:c9:ee:d8:12:88:2e:c2:82:2d:a3: 93:88:23:69:2b:a9:6d:88:0b:bd:48:f8:3b:eb:29:f5:62:be: b6:c3:1e:c3:79:cc:37:25:7b:c2:eb:1f:8d:a7:4a:6f:9e:a2: ce:36:e2:e3:91:73:13:74:43:58:0e:98:ac:b4:9f:4a:5f:5c: 8c:bc:30:9e:96:5c:dd:7f:7e:01:a3:a0:3d:db:95:0a:97:74: 24:af:03:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQfDtER9rhUlwLdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk YWVmODhjZGUtMzUxMy00ODUwLWIxNjEtYjNmZTI2MWQwNWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgvI5oz9acHuzVJMKCjzhB8c4n90geaO5WGV ZliVA9rzpFXK0Nx2Qu3Pj7yMpMSeiMdGkdLCVPYVW4zmiM63HWOQscTW87wRsIH1 9ktu9PqeXLcmpX+CpwJoS43zmSboFXHFIBg8IQA1A1aTKeScXAR++uSxQ+iO42lg gQbp4WpR5lLOIgMFE6yliWY1DIPWSQ1nH+Nf7yAzm2v+Kna5wQ4h8eekoYLhg4eQ IEG9/Z4T0ZeGuctSlXKdVTiqfETXJPrvcVq44HJarZ0jaCXoasg9nPxiOGa4PDS4 d81UfGHiDPapT+bu4lBbnhmoFp6AVJafTbGX7bqx/kKqP/72zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKH66cN5ZbPttQv79HjmectRAwnxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDJlYjQ0YzItN2E3MC0z Yjg5LTkyYTktMGIzMTlkOWU0YmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErsQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACL53bhDclKhSMAacIdPAVyvtW945YO+tFOtUDXl9SsZuc9AUHEBkNLZ 5BdmUzUWWpS/GVpl+F6+gZdGRpVOWvpG2XbLkk9asvI3bVQ1BLfSHyMLb5AdcQql FGBzHIOG8F1OpHfwNL1ZP2thKuW4YI8GXTsII1bdQ23Ev0Zb1LzKmB+OvbzVWKx1 9HZ8Ewo8BR0NDoK9gF3CL2FLNE4UhNOasCFEik3CP2y3ye7YEoguwoIto5OII2kr qW2IC71I+DvrKfVivrbDHsN5zDcle8LrH42nSm+eos424uORcxN0Q1gOmKy0n0pf XIy8MJ6WXN1/fgGjoD3blQqXdCSvA3g= -----END CERTIFICATE-----Generated at Wed Nov 5 11:01:29 2025 by rpki-client