$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a96e29e-955f-34d6-8d09-9babb5a164f4.roa File: 3a96e29e-955f-34d6-8d09-9babb5a164f4.roa (raw, json) Hash identifier: 4EmhuaOWeZAnizFwgylkaUGfvXIxmyy2xdlweBlvxks= Subject key identifier: C3:9B:96:24:CD:49:EB:4A:54:17:9B:C3:D8:2A:F2:A3:AE:E3:F2:C4 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B87B22367031A627F7FCD4530 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a96e29e-955f-34d6-8d09-9babb5a164f4.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 6167 IP address blocks: 174.229.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:23:67:03:1a:62:7f:7f:cd:45:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=da7938d0-27f1-42d4-b92d-678574045348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c8:cc:65:00:e9:40:e5:89:a0:ba:b9:e9:71: 10:08:5c:e6:c9:f9:5b:28:79:5f:d0:cf:8a:b4:c5: db:17:8c:84:f1:75:86:7e:e7:7a:b6:39:12:e0:50: d4:3e:cb:fd:7e:37:5d:ac:50:22:30:b3:d8:22:05: aa:67:c6:6d:f2:8b:3b:48:53:0b:be:66:83:ba:64: 4e:3a:ea:78:ee:3a:f4:8a:28:92:70:a8:96:cf:02: 4f:24:b9:1f:62:0a:18:98:88:33:23:d0:fb:18:4d: 26:cd:e7:0a:0f:4d:3e:9c:d3:f7:06:d2:b0:10:dd: 98:5b:de:c6:9d:8a:75:1a:11:9d:93:aa:f5:16:33: 3d:02:22:fd:83:0c:11:c2:6e:21:37:68:e6:0f:e6: 10:9e:77:9a:f5:af:80:2b:3e:42:57:81:f5:f0:6b: ee:e1:ac:44:3a:be:e7:09:48:f1:4d:37:0b:8e:aa: c5:da:14:84:7b:e7:0a:67:64:20:5c:5f:9b:31:f9: 7c:f5:fa:14:68:10:76:96:60:67:f7:b8:13:68:9f: 46:e2:4d:5c:3e:80:81:33:8a:76:24:4e:9d:0f:e2: 00:88:e9:62:61:0b:bd:33:78:24:35:53:8b:24:ab: 3c:62:c4:a8:c3:ef:5d:1a:c2:97:12:b7:8c:3e:44: 10:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:9B:96:24:CD:49:EB:4A:54:17:9B:C3:D8:2A:F2:A3:AE:E3:F2:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3a96e29e-955f-34d6-8d09-9babb5a164f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.229.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:37:71:96:2d:5f:17:27:f5:2e:8d:84:e5:a6:dd:c0:85:c3: a5:e4:48:b9:af:09:07:0a:1d:5e:f1:7e:19:7b:40:ab:16:4b: 41:ca:95:cb:0b:67:4c:7e:62:34:6e:74:6b:e8:af:2d:6d:18: 1a:c5:57:14:fb:3b:4c:77:1c:f3:b7:34:3a:0e:d9:9e:ab:fe: c7:77:d4:a7:6a:83:ca:d9:24:2b:22:25:31:fd:9a:f3:23:b4: d1:ea:e6:ee:2b:c4:a9:27:17:8f:7a:c9:79:2d:22:5e:97:b0: db:da:26:20:9e:ba:15:b3:d2:e8:74:34:f9:b2:24:13:24:83: 7c:d6:54:0c:16:86:f8:33:31:1f:46:42:a8:7d:60:d0:8b:ec: db:a4:df:75:aa:b8:a1:0f:1f:a5:18:b5:27:5f:3b:58:f4:7e: 81:7c:5e:e9:3e:f1:f4:38:6c:41:07:02:24:9d:25:ac:47:bd: 83:fc:eb:2b:62:39:b8:77:6e:9b:6d:05:d4:33:33:92:e1:ab: 25:b8:c0:61:79:57:26:4d:52:81:3b:eb:b8:80:7d:26:12:a1: 05:48:00:67:33:da:6f:7c:8a:e9:da:fe:6b:31:8c:5a:77:64: 91:a5:da:b0:dd:95:cb:38:38:f1:c2:d6:04:99:17:99:9f:21: 2b:30:0f:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsiNnAxpif3/NRTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk ZGE3OTM4ZDAtMjdmMS00MmQ0LWI5MmQtNjc4NTc0MDQ1MzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisjMZQDpQOWJoLq56XEQCFzmyflbKHlf0M+K tMXbF4yE8XWGfud6tjkS4FDUPsv9fjddrFAiMLPYIgWqZ8Zt8os7SFMLvmaDumRO Oup47jr0iiiScKiWzwJPJLkfYgoYmIgzI9D7GE0mzecKD00+nNP3BtKwEN2YW97G nYp1GhGdk6r1FjM9AiL9gwwRwm4hN2jmD+YQnnea9a+AKz5CV4H18Gvu4axEOr7n CUjxTTcLjqrF2hSEe+cKZ2QgXF+bMfl89foUaBB2lmBn97gTaJ9G4k1cPoCBM4p2 JE6dD+IAiOliYQu9M3gkNVOLJKs8YsSow+9dGsKXEreMPkQQXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMObliTNSetKVBebw9gq8qOu4/LEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2E5NmUyOWUtOTU1Zi0z NGQ2LThkMDktOWJhYmI1YTE2NGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ03cZYtXxcn9S6NhOWm3cCFw6XkSLmvCQcKHV7xfhl7QKsWS0HKlcsL Z0x+YjRudGvory1tGBrFVxT7O0x3HPO3NDoO2Z6r/sd31Kdqg8rZJCsiJTH9mvMj tNHq5u4rxKknF496yXktIl6XsNvaJiCeuhWz0uh0NPmyJBMkg3zWVAwWhvgzMR9G Qqh9YNCL7Nuk33WquKEPH6UYtSdfO1j0foF8Xuk+8fQ4bEEHAiSdJaxHvYP86yti Obh3bpttBdQzM5LhqyW4wGF5VyZNUoE767iAfSYSoQVIAGcz2m98iuna/msxjFp3 ZJGl2rDdlcs4OPHC1gSZF5mfISswD7g= -----END CERTIFICATE-----Generated at Wed Nov 5 13:43:25 2025 by rpki-client