$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f9f0eb3-d7a3-3052-bab8-f02af054da52.roa File: 0f9f0eb3-d7a3-3052-bab8-f02af054da52.roa (raw, json) Hash identifier: l00fSUO/Vn0e1sJBLA64AdVkENq/olAXJ1cImyYtrDU= Subject key identifier: 26:17:16:02:9E:A9:26:F0:3B:6C:A1:2B:67:5A:FA:2F:A4:89:5B:34 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BABFD3875AF3D82C26D702800 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f9f0eb3-d7a3-3052-bab8-f02af054da52.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 6167 IP address blocks: 174.214.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:38:75:af:3d:82:c2:6d:70:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=0ac7cba1-7d4a-456f-bb9d-d18477b78931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:89:16:04:8c:31:01:fc:fa:8e:7f:3e:5f:0c: 4a:b6:d7:d3:a2:63:08:1f:5e:73:44:d9:65:aa:ef: 3f:fc:bd:6e:d8:36:8f:1d:81:2b:9f:86:ad:bf:c4: 01:9a:24:38:3a:81:c5:a2:51:b5:a9:39:bb:03:2e: f5:ea:72:c5:48:e4:34:d6:08:d7:f0:01:8a:41:33: 86:2f:2c:26:47:7e:8b:b8:f5:47:81:62:14:7a:5d: 89:1f:58:72:cf:34:f9:0c:b9:44:d3:5e:69:b9:f8: 60:c2:8c:98:25:b5:be:f1:a8:db:06:ff:74:79:c6: 7d:b4:77:96:b4:44:d5:09:83:76:d1:d9:82:07:d6: da:30:d3:d7:fe:36:3e:3b:9e:6e:ff:65:59:c6:c6: 76:10:67:e2:92:74:c9:1c:3e:84:a3:3d:cb:8b:b4: a8:ea:7e:63:f6:03:10:a9:bf:af:41:89:c2:ed:c3: 58:fb:ec:47:e3:12:81:95:7a:e3:ba:ab:c2:4e:90: a0:91:7e:2e:ff:91:c9:a2:35:c1:e8:3d:c7:ce:c1: 58:7b:3d:5b:dc:b9:a3:91:13:03:ea:56:6e:4a:1a: 21:35:96:a1:92:51:42:4b:e2:4a:db:35:ca:28:66: 4c:93:2d:02:e4:d1:a0:68:0d:e1:00:07:ad:65:2f: 15:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:17:16:02:9E:A9:26:F0:3B:6C:A1:2B:67:5A:FA:2F:A4:89:5B:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f9f0eb3-d7a3-3052-bab8-f02af054da52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.214.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:ca:b9:11:c1:87:b6:5d:a0:27:45:8a:9c:b6:fe:db:26:cd: c1:e9:6d:1e:5f:e2:3a:56:1e:2e:d1:8e:5e:c9:bd:aa:78:3a: 06:d3:0a:18:e5:b3:15:e4:f3:b9:6f:2f:20:6c:e8:57:53:70: 4c:e6:9d:7d:f6:47:2d:a7:fb:8a:7f:79:e9:9b:58:5f:fe:ee: 69:31:2b:20:55:52:ce:8d:ec:10:56:15:62:8f:be:85:12:bb: ed:96:7d:e0:2c:94:4a:17:92:4f:f2:48:96:98:d4:2f:04:0f: e7:85:b7:a5:b8:00:df:5f:ed:8a:7a:8f:0e:09:d7:14:c1:bf: 38:07:ce:a8:9f:f5:11:e1:c8:2a:d8:e5:25:ed:31:13:56:74: 07:54:4e:4d:1f:c5:0c:80:b0:ab:a1:f3:8c:05:24:e8:fd:7e: c8:d2:04:66:58:b2:41:f6:81:4a:5b:ae:59:34:cb:b2:de:4d: 9d:29:9a:66:a3:92:a4:61:06:c5:14:32:bf:1e:c4:a6:9e:18: d6:e7:b0:22:81:9b:e0:59:50:c0:01:4c:2b:51:a5:17:2b:98: cc:b4:44:e8:f0:06:80:f5:f9:03:b8:f7:73:29:02:80:9b:c0: 61:3b:a0:01:a9:89:d9:82:94:d2:da:73:a7:33:69:20:d5:f4: 38:18:3f:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/Th1rz2Cwm1wKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk MGFjN2NiYTEtN2Q0YS00NTZmLWJiOWQtZDE4NDc3Yjc4OTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApokWBIwxAfz6jn8+XwxKttfTomMIH15zRNll qu8//L1u2DaPHYErn4atv8QBmiQ4OoHFolG1qTm7Ay716nLFSOQ01gjX8AGKQTOG LywmR36LuPVHgWIUel2JH1hyzzT5DLlE015pufhgwoyYJbW+8ajbBv90ecZ9tHeW tETVCYN20dmCB9baMNPX/jY+O55u/2VZxsZ2EGfiknTJHD6Eoz3Li7So6n5j9gMQ qb+vQYnC7cNY++xH4xKBlXrjuqvCTpCgkX4u/5HJojXB6D3HzsFYez1b3LmjkRMD 6lZuShohNZahklFCS+JK2zXKKGZMky0C5NGgaA3hAAetZS8VGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCYXFgKeqSbwO2yhK2da+i+kiVs0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGY5ZjBlYjMtZDdhMy0z MDUyLWJhYjgtZjAyYWYwNTRkYTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvKuRHBh7ZdoCdFipy2/tsmzcHpbR5f4jpWHi7Rjl7Jvap4OgbTChjl sxXk87lvLyBs6FdTcEzmnX32Ry2n+4p/eembWF/+7mkxKyBVUs6N7BBWFWKPvoUS u+2WfeAslEoXkk/ySJaY1C8ED+eFt6W4AN9f7Yp6jw4J1xTBvzgHzqif9RHhyCrY 5SXtMRNWdAdUTk0fxQyAsKuh84wFJOj9fsjSBGZYskH2gUpbrlk0y7LeTZ0pmmaj kqRhBsUUMr8exKaeGNbnsCKBm+BZUMABTCtRpRcrmMy0ROjwBoD1+QO493MpAoCb wGE7oAGpidmClNLac6czaSDV9DgYP94= -----END CERTIFICATE-----Generated at Wed Nov 5 11:02:05 2025 by rpki-client