$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3d5dddd7-0702-3d5c-8fd2-d6353dabe2b9.roa File: 3d5dddd7-0702-3d5c-8fd2-d6353dabe2b9.roa (raw, json) Hash identifier: ddPz3ovZIKpTbzZfxFdGp9VIQMf2jbLCYjI1Ha0IHcM= Subject key identifier: F9:B2:C8:C4:24:67:D2:3E:3C:68:D1:CA:B4:5A:EF:79:3F:51:C7:39 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B98723F2D8781E560102FC200 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3d5dddd7-0702-3d5c-8fd2-d6353dabe2b9.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 6167 IP address blocks: 174.232.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:3f:2d:87:81:e5:60:10:2f:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=f8baa06a-1de2-4d8a-8d18-d0165090c3cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d1:21:72:c9:5d:a2:79:05:1d:24:a7:17:0e: 1d:1d:19:73:c8:d7:1e:1c:02:ee:b2:86:52:bd:65: 40:7b:11:c5:38:e7:96:2c:6e:8e:50:22:f3:86:97: 12:f7:06:4d:10:4a:91:10:5d:4e:78:6a:2d:71:55: 99:ec:52:e0:40:3b:1d:3c:aa:68:72:d4:18:0e:b9: ce:ee:9d:b7:c8:82:76:b5:27:a0:c6:da:99:b4:17: 85:c1:45:0d:bb:8c:b2:ec:b9:1f:91:f9:63:2b:da: 0a:83:29:c7:d3:4a:98:2e:c9:ea:98:0c:c2:a4:f4: 5b:30:5e:14:e8:44:1b:81:ca:c2:29:3f:cf:c8:32: 1c:27:58:28:b3:32:e6:8b:01:ef:de:98:fc:ee:9b: fe:cd:ad:96:e8:36:9e:7e:17:b0:a5:92:81:e3:a4: 9e:31:81:e6:fd:cc:e5:7a:9d:3d:79:a0:ce:6a:ff: 19:ba:f1:8d:c5:e8:01:b4:83:a0:e8:7d:78:9e:40: 17:05:a6:bf:6b:23:f4:81:80:2f:e4:c3:9d:6c:1b: f4:4d:06:2e:05:b8:0c:91:d7:b4:5d:ac:ca:22:94: 9b:f3:f3:fa:4d:89:9f:00:e5:c6:1c:e8:92:64:f1: 8f:29:a1:4e:a4:a1:01:40:52:6e:be:ca:d9:da:db: 8b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B2:C8:C4:24:67:D2:3E:3C:68:D1:CA:B4:5A:EF:79:3F:51:C7:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3d5dddd7-0702-3d5c-8fd2-d6353dabe2b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.232.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:9a:5e:70:45:64:82:f3:87:bb:d4:48:cf:80:64:1c:d3:07: 63:b1:c1:9d:48:f2:03:a4:76:75:bb:3f:bc:7f:3a:02:b0:f9: eb:aa:c0:ae:47:dc:59:1c:e9:bd:3c:04:ef:a6:81:15:74:18: 8d:df:17:73:40:b3:12:b9:9e:c2:1c:d9:44:17:17:38:b7:b4: b0:f5:06:7d:3e:9a:9a:07:65:3a:da:e6:35:1a:8c:a4:b3:7a: 51:4e:9f:96:2f:e6:2f:f9:bb:97:c6:29:80:1c:87:91:7e:39: 08:b9:83:18:2d:67:80:38:e8:bd:93:b3:c7:c2:92:2e:b6:68: fa:da:1e:ef:68:32:79:05:94:3d:0e:36:1b:b1:07:ed:53:48: 4f:56:3d:ea:9b:b5:59:15:38:a1:40:f7:92:3b:cc:73:2e:23: 03:e6:7f:bd:82:50:b3:bc:4d:05:64:98:ed:0e:25:ec:c3:b8: cc:03:b0:91:a0:2b:e3:73:ad:71:65:b4:f5:a5:05:1f:3d:04: cf:b5:be:b5:2f:dd:24:42:fc:c3:09:81:8e:d0:20:3a:e5:41: 6b:9a:27:c7:b4:33:1b:d8:5d:60:34:1b:5d:f4:b3:18:46:6f: 92:c1:0f:d9:86:f2:c6:a8:81:58:5c:d5:8d:45:ea:4c:e9:14: ea:5a:ee:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYcj8th4HlYBAvwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk ZjhiYWEwNmEtMWRlMi00ZDhhLThkMTgtZDAxNjUwOTBjM2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNEhcsldonkFHSSnFw4dHRlzyNceHALusoZS vWVAexHFOOeWLG6OUCLzhpcS9wZNEEqREF1OeGotcVWZ7FLgQDsdPKpoctQYDrnO 7p23yIJ2tSegxtqZtBeFwUUNu4yy7LkfkfljK9oKgynH00qYLsnqmAzCpPRbMF4U 6EQbgcrCKT/PyDIcJ1goszLmiwHv3pj87pv+za2W6DaefhewpZKB46SeMYHm/czl ep09eaDOav8ZuvGNxegBtIOg6H14nkAXBaa/ayP0gYAv5MOdbBv0TQYuBbgMkde0 XazKIpSb8/P6TYmfAOXGHOiSZPGPKaFOpKEBQFJuvsrZ2tuLnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmyyMQkZ9I+PGjRyrRa73k/Ucc5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2Q1ZGRkZDctMDcwMi0z ZDVjLThmZDItZDYzNTNkYWJlMmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruhAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKaXnBFZILzh7vUSM+AZBzTB2OxwZ1I8gOkdnW7P7x/OgKw+euqwK5H 3Fkc6b08BO+mgRV0GI3fF3NAsxK5nsIc2UQXFzi3tLD1Bn0+mpoHZTra5jUajKSz elFOn5Yv5i/5u5fGKYAch5F+OQi5gxgtZ4A46L2Ts8fCki62aPraHu9oMnkFlD0O NhuxB+1TSE9WPeqbtVkVOKFA95I7zHMuIwPmf72CULO8TQVkmO0OJezDuMwDsJGg K+NzrXFltPWlBR89BM+1vrUv3SRC/MMJgY7QIDrlQWuaJ8e0MxvYXWA0G130sxhG b5LBD9mG8saogVhc1Y1F6kzpFOpa7lk= -----END CERTIFICATE-----Generated at Wed Nov 5 12:18:14 2025 by rpki-client