$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2902be0d-e894-3e43-82ab-4e1972298e86.roa File: 2902be0d-e894-3e43-82ab-4e1972298e86.roa (raw, json) Hash identifier: q8s4VyIAr/pa1MJBvZXhSJKjSZDr3JSshzwOouJIBHc= Subject key identifier: 58:B5:AF:2E:C6:69:14:DA:6F:02:0C:DF:41:E5:EE:77:76:31:C4:4A Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB5C26B79290EABF80B8A4C20 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2902be0d-e894-3e43-82ab-4e1972298e86.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 6167 IP address blocks: 174.200.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:6b:79:29:0e:ab:f8:0b:8a:4c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=3d3ee4e7-4821-4b83-b539-457cd1755896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:dd:1f:de:8e:2c:40:2d:7b:84:11:4e:3f:bb: 16:3c:3c:3a:4b:56:5e:ff:e9:be:60:95:c0:88:06: 32:f7:cb:9e:2b:6f:5d:f3:f6:a6:d0:63:ee:df:6c: 4d:06:33:e2:98:be:55:de:64:d9:55:a0:83:9f:86: 96:04:dc:91:7e:a6:2a:06:5f:05:c3:2e:6a:64:de: e3:1b:fe:7d:c8:81:a1:54:e5:15:4b:e2:39:47:5f: 99:8f:5e:ae:18:63:32:57:46:ef:3d:8b:c4:ec:1c: 42:37:58:ba:ac:e4:0c:40:e8:f7:4a:ea:eb:d9:c9: 18:13:14:f5:af:b6:63:0a:19:f5:c8:5f:8e:bb:4f: bb:bc:ae:1f:79:cd:91:30:a9:ed:c3:5c:11:65:57: 03:b0:3e:1c:77:29:de:90:03:39:eb:81:d4:c9:fe: 45:1b:a5:7f:48:88:c0:ab:f2:1c:81:55:68:1e:6e: 0e:9a:69:06:57:e3:cd:a7:d4:4a:77:02:55:f0:5f: 35:f2:81:92:d4:35:2a:a5:9d:e8:c2:2e:21:12:b0: 30:52:9c:94:b7:a1:b8:ca:0a:52:bd:01:b5:e4:fa: bf:0d:61:65:b6:13:fa:9a:4a:1c:89:bd:b4:91:eb: 76:38:13:9d:1b:f3:f1:cc:c5:4b:28:d0:35:0e:fb: e1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B5:AF:2E:C6:69:14:DA:6F:02:0C:DF:41:E5:EE:77:76:31:C4:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2902be0d-e894-3e43-82ab-4e1972298e86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.200.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:07:28:86:34:ba:1e:3f:bf:6f:e3:a1:47:0e:92:89:56:8c: 80:28:a5:57:1a:5e:96:10:11:e1:af:77:d0:e2:23:10:23:71: 78:62:40:f8:c5:74:92:a4:9f:c8:b0:7a:b5:3e:96:19:29:a5: c7:51:8d:64:25:bb:37:12:d9:87:41:aa:d3:51:4e:f3:a8:f1: 29:d7:0e:a1:82:01:43:28:c4:0f:42:28:63:be:e2:96:2a:16: 0b:86:60:13:f5:82:d1:fc:e2:67:6f:34:96:88:2f:f2:47:09: 11:18:f1:82:c6:ba:69:71:ff:b1:71:c8:cf:6c:42:c4:e2:f7: b1:13:f7:8d:3e:c9:d6:ad:b9:16:92:65:7d:f6:89:e9:a6:5f: 24:79:75:97:ab:4f:7a:cd:72:53:96:ed:04:dd:81:6c:24:34: 3d:b4:73:1c:3b:07:a0:1b:77:90:9b:68:ce:e3:a6:40:a4:1c: d9:7e:a5:52:03:6d:a6:5a:c7:22:2c:12:b2:3b:23:90:2d:6e: 3f:22:35:25:54:34:b3:94:9a:26:1a:4e:64:f8:04:47:38:8a: ac:69:5a:2b:7f:7e:ea:2d:1d:f2:98:e9:a6:36:f4:5c:20:8c: 8d:8b:f4:16:07:7a:07:68:6a:2e:54:39:96:83:8a:4b:18:39: ad:13:62:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wmt5KQ6r+AuKTCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk M2QzZWU0ZTctNDgyMS00YjgzLWI1MzktNDU3Y2QxNzU1ODk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnN0f3o4sQC17hBFOP7sWPDw6S1Ze/+m+YJXA iAYy98ueK29d8/am0GPu32xNBjPimL5V3mTZVaCDn4aWBNyRfqYqBl8Fwy5qZN7j G/59yIGhVOUVS+I5R1+Zj16uGGMyV0bvPYvE7BxCN1i6rOQMQOj3Surr2ckYExT1 r7ZjChn1yF+Ou0+7vK4fec2RMKntw1wRZVcDsD4cdynekAM564HUyf5FG6V/SIjA q/IcgVVoHm4OmmkGV+PNp9RKdwJV8F818oGS1DUqpZ3owi4hErAwUpyUt6G4ygpS vQG15Pq/DWFlthP6mkocib20ket2OBOdG/PxzMVLKNA1DvvhIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFi1ry7GaRTabwIM30Hl7nd2McRKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjkwMmJlMGQtZTg5NC0z ZTQzLTgyYWItNGUxOTcyMjk4ZTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrsjwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8HKIY0uh4/v2/joUcOkolWjIAopVcaXpYQEeGvd9DiIxAjcXhiQPjF dJKkn8iwerU+lhkppcdRjWQluzcS2YdBqtNRTvOo8SnXDqGCAUMoxA9CKGO+4pYq FguGYBP1gtH84mdvNJaIL/JHCREY8YLGumlx/7FxyM9sQsTi97ET940+ydatuRaS ZX32iemmXyR5dZerT3rNclOW7QTdgWwkND20cxw7B6Abd5CbaM7jpkCkHNl+pVID baZaxyIsErI7I5Atbj8iNSVUNLOUmiYaTmT4BEc4iqxpWit/fuotHfKY6aY29Fwg jI2L9BYHegdoai5UOZaDiksYOa0TYuQ= -----END CERTIFICATE-----Generated at Wed Nov 5 13:40:15 2025 by rpki-client