$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/338abc45-a7e3-3b12-934a-d2e214acdc49.roa File: 338abc45-a7e3-3b12-934a-d2e214acdc49.roa (raw, json) Hash identifier: UXU+1t3j0Ws7SsHXQnH1J5YPv6xTIAv03lzuzHS6KXg= Subject key identifier: ED:61:A0:D9:6E:B2:63:58:F0:99:73:AD:D9:71:AB:DD:4A:7B:90:C5 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B87B22C63BC4EE76F4DD27280 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/338abc45-a7e3-3b12-934a-d2e214acdc49.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 6167 IP address blocks: 174.228.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:2c:63:bc:4e:e7:6f:4d:d2:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=0f38f42e-7a11-479e-9144-59a84c291878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:be:2d:6e:05:ac:fb:1b:f6:61:87:29:6a:79: be:9f:3c:30:af:3c:eb:64:ec:e8:02:71:e7:4a:29: 7b:fe:45:49:25:d6:02:f0:cb:b0:34:de:c5:ba:02: 7f:2c:4c:3c:13:4e:c9:58:68:34:ae:69:78:20:d8: 3a:2d:12:d3:24:d2:de:30:16:8b:a0:ce:6c:52:af: 13:6e:5b:9b:41:f9:84:4b:cb:89:f1:a6:8c:74:98: cb:0f:ea:f2:f8:84:98:8c:2c:2d:0c:ae:f3:2c:41: ba:d9:80:47:63:9c:a9:10:5c:cf:46:fa:58:cd:0c: cd:89:d1:11:1e:15:05:0c:19:ba:49:d0:e0:54:de: 99:6e:f9:c1:d0:9d:b0:11:37:e7:b9:16:e9:77:43: 01:70:e4:5c:d2:4f:dc:5b:0b:9a:69:6f:85:18:eb: ca:17:8d:78:a4:59:8e:0a:47:20:6d:8f:e8:79:38: a3:a7:2e:ac:1d:c3:f4:af:13:53:68:6d:b7:7f:68: 86:3e:fa:ba:f1:23:67:a6:40:e4:39:cc:da:48:cf: af:fd:b8:a9:54:dd:57:0d:39:7e:74:d5:9b:e7:a7: 80:af:86:1b:ed:2a:09:3e:89:54:6a:c9:a2:d4:f0: b8:c1:d3:47:fd:16:f6:3a:1c:41:f7:fc:d4:b4:e2: cf:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:61:A0:D9:6E:B2:63:58:F0:99:73:AD:D9:71:AB:DD:4A:7B:90:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/338abc45-a7e3-3b12-934a-d2e214acdc49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.228.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:87:ce:17:0f:ea:10:c7:96:8a:e0:ca:1d:f4:b5:d7:42:7e: 47:0e:b9:9f:09:b0:ac:eb:4a:bc:e5:84:ea:e8:4e:95:d0:79: ef:2f:3a:f7:ad:12:5c:ad:50:0a:80:c1:d7:31:7e:ce:2b:fe: b5:17:bc:a3:92:c8:34:7f:07:5b:f5:26:ea:79:42:f8:a3:f1: 19:55:64:1a:fe:0a:3c:be:1f:f3:de:a7:cf:15:db:2d:1d:25: 5d:af:35:cd:04:66:ef:f1:45:5d:29:29:a0:66:60:f4:eb:c1: 90:88:fa:5e:ad:fc:ce:31:38:2b:23:78:b2:6b:57:c1:a4:14: 7a:7e:20:73:12:76:6b:f2:76:4e:de:8d:ff:2c:d8:3c:e0:45: 3a:45:9c:84:cb:40:69:5c:c9:75:0a:dc:8e:51:41:70:73:89: 8f:65:47:04:0f:71:44:85:67:8c:2d:68:99:2a:76:05:d9:85: 56:ce:50:80:c6:e0:f4:9d:ac:33:ea:23:90:87:22:d7:16:f7: 23:7a:c1:c9:07:dc:28:93:33:5e:bd:f9:1e:a3:d2:f8:8d:14: ce:6b:25:ad:25:fb:83:90:65:49:ad:76:5e:fb:55:dd:3f:6c: 62:6e:ad:57:28:de:12:4f:30:d7:62:2a:13:c1:17:0c:c9:b0: f2:c4:a7:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsixjvE7nb03ScoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk MGYzOGY0MmUtN2ExMS00NzllLTkxNDQtNTlhODRjMjkxODc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv74tbgWs+xv2YYcpanm+nzwwrzzrZOzoAnHn Sil7/kVJJdYC8MuwNN7FugJ/LEw8E07JWGg0rml4INg6LRLTJNLeMBaLoM5sUq8T blubQfmES8uJ8aaMdJjLD+ry+ISYjCwtDK7zLEG62YBHY5ypEFzPRvpYzQzNidER HhUFDBm6SdDgVN6ZbvnB0J2wETfnuRbpd0MBcORc0k/cWwuaaW+FGOvKF414pFmO CkcgbY/oeTijpy6sHcP0rxNTaG23f2iGPvq68SNnpkDkOczaSM+v/bipVN1XDTl+ dNWb56eAr4Yb7SoJPolUasmi1PC4wdNH/Rb2OhxB9/zUtOLPFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO1hoNlusmNY8Jlzrdlxq91Ke5DFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzM4YWJjNDUtYTdlMy0z YjEyLTkzNGEtZDJlMjE0YWNkYzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFruRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCHzhcP6hDHlorgyh30tddCfkcOuZ8JsKzrSrzlhOroTpXQee8vOvet ElytUAqAwdcxfs4r/rUXvKOSyDR/B1v1Jup5Qvij8RlVZBr+Cjy+H/Pep88V2y0d JV2vNc0EZu/xRV0pKaBmYPTrwZCI+l6t/M4xOCsjeLJrV8GkFHp+IHMSdmvydk7e jf8s2DzgRTpFnITLQGlcyXUK3I5RQXBziY9lRwQPcUSFZ4wtaJkqdgXZhVbOUIDG 4PSdrDPqI5CHItcW9yN6wckH3CiTM169+R6j0viNFM5rJa0l+4OQZUmtdl77Vd0/ bGJurVco3hJPMNdiKhPBFwzJsPLEp8E= -----END CERTIFICATE-----Generated at Wed Nov 5 13:05:09 2025 by rpki-client