$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ca70b5e-8224-3730-85bb-0e669d5a0eac.roa File: 3ca70b5e-8224-3730-85bb-0e669d5a0eac.roa (raw, json) Hash identifier: YpBIK/G5epilLC9hX7qPB3maMuDtnqLUbvnvzcGrICc= Subject key identifier: A7:69:FB:13:FB:9C:2A:9E:33:04:C3:BC:BD:9F:7C:92:91:C0:E3:21 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B8EAD08F439DC9935B6B64180 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ca70b5e-8224-3730-85bb-0e669d5a0eac.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 22394 IP address blocks: 174.41.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ad:08:f4:39:dc:99:35:b6:b6:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=516c974c-926a-4bd5-955e-6bf043e70e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2d:da:3c:31:04:82:bb:ed:11:77:1d:e2:87: f4:f2:a3:43:d9:64:c3:a6:d5:52:c9:dd:3a:a4:42: 15:a4:9b:3e:60:3b:63:fa:f7:76:c9:67:48:e3:2f: 24:fc:d4:6b:d9:b9:d2:a3:ee:5b:9d:65:56:9e:3f: 33:c7:14:ac:a5:5d:73:61:23:52:fc:32:95:cb:f8: d1:70:19:ad:61:9a:35:ac:b6:62:66:92:26:8e:e7: b0:77:51:71:f0:3c:6a:6c:f1:1c:b6:44:5c:8f:94: bd:78:70:6b:88:a1:17:c7:81:70:87:ef:d1:56:02: 85:e0:e3:67:47:f7:61:38:1e:61:74:ed:81:10:6c: 83:c8:1c:cf:24:2f:06:85:c0:e3:2a:52:1e:b0:39: b5:79:52:3f:7a:03:ec:78:97:ed:79:2a:f6:c6:e8: 24:f8:8d:c9:f7:9e:99:64:4c:58:23:31:4e:92:37: a4:47:8c:05:fe:fd:64:a8:59:8e:03:40:66:8c:9c: c5:ec:53:a7:51:70:b7:f3:9b:7c:50:c9:e5:ba:e5: ef:61:f7:47:fa:57:c8:6c:01:6c:aa:06:11:ea:a9: d0:54:1b:bb:15:d0:7f:3f:a0:a6:70:35:c8:8f:cf: 52:2d:25:a8:50:60:21:d9:c9:d7:23:be:25:1f:73: a2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:69:FB:13:FB:9C:2A:9E:33:04:C3:BC:BD:9F:7C:92:91:C0:E3:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ca70b5e-8224-3730-85bb-0e669d5a0eac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.41.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:5e:d6:99:3f:d7:74:8b:5e:13:c9:f3:1d:0e:e7:f6:d7:f4: 60:a3:92:f6:f3:a3:9b:ff:3d:73:61:d5:a5:74:98:d5:09:78: 0c:7a:a0:66:c6:a1:03:b3:70:e5:57:6b:5d:81:c7:1f:3e:83: 69:ce:de:31:23:d2:f7:f2:82:ef:dc:a2:52:d0:da:ad:82:89: 54:45:15:ce:45:e1:c8:ec:43:ad:d0:d2:09:fc:fa:56:8e:c5: 8f:aa:19:df:31:8c:09:28:aa:ed:95:cf:f7:5b:b0:c9:ff:96: a4:72:98:65:4a:b2:eb:e7:3c:18:8f:9a:04:ba:ae:86:99:8c: b8:97:5f:af:6f:a8:af:a3:94:a3:ba:19:21:b6:e2:98:3f:da: a5:94:68:d9:79:79:c8:ee:ad:84:b7:bd:f0:d9:fe:87:71:3a: 85:36:4a:fd:99:eb:42:ac:43:4e:de:73:59:81:ae:df:f3:4c: a7:6d:9a:6c:db:af:05:56:27:5e:e1:99:87:be:70:62:55:0e: 7e:2b:ca:e3:71:85:55:a1:89:54:96:f5:7b:9b:e8:6f:ee:0e: fb:be:b5:5c:fd:33:af:4a:cc:e6:3f:bb:0b:e3:80:5a:33:10: 4d:85:5d:84:4f:0e:d3:9d:78:29:85:16:60:4c:41:cd:f9:2d: 79:5d:dd:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrQj0OdyZNba2QYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk NTE2Yzk3NGMtOTI2YS00YmQ1LTk1NWUtNmJmMDQzZTcwZTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC3aPDEEgrvtEXcd4of08qND2WTDptVSyd06 pEIVpJs+YDtj+vd2yWdI4y8k/NRr2bnSo+5bnWVWnj8zxxSspV1zYSNS/DKVy/jR cBmtYZo1rLZiZpImjuewd1Fx8DxqbPEctkRcj5S9eHBriKEXx4Fwh+/RVgKF4ONn R/dhOB5hdO2BEGyDyBzPJC8GhcDjKlIesDm1eVI/egPseJfteSr2xugk+I3J956Z ZExYIzFOkjekR4wF/v1kqFmOA0BmjJzF7FOnUXC385t8UMnluuXvYfdH+lfIbAFs qgYR6qnQVBu7FdB/P6CmcDXIj89SLSWoUGAh2cnXI74lH3OiaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdp+xP7nCqeMwTDvL2ffJKRwOMhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2NhNzBiNWUtODIyNC0z NzMwLTg1YmItMGU2NjlkNWEwZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErikQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIte1pk/13SLXhPJ8x0O5/bX9GCjkvbzo5v/PXNh1aV0mNUJeAx6oGbG oQOzcOVXa12Bxx8+g2nO3jEj0vfygu/colLQ2q2CiVRFFc5F4cjsQ63Q0gn8+laO xY+qGd8xjAkoqu2Vz/dbsMn/lqRymGVKsuvnPBiPmgS6roaZjLiXX69vqK+jlKO6 GSG24pg/2qWUaNl5ecjurYS3vfDZ/odxOoU2Sv2Z60KsQ07ec1mBrt/zTKdtmmzb rwVWJ17hmYe+cGJVDn4ryuNxhVWhiVSW9Xub6G/uDvu+tVz9M69KzOY/uwvjgFoz EE2FXYRPDtOdeCmFFmBMQc35LXld3fk= -----END CERTIFICATE-----Generated at Wed Nov 5 20:53:23 2025 by rpki-client