$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/472b12af-b9e3-39d1-896b-b6682b1e1e07.roa File: 472b12af-b9e3-39d1-896b-b6682b1e1e07.roa (raw, json) Hash identifier: BhmTO8wXDQ3tHQXZ2vPLpSWZ6Wkb2o6YoncxTldgoz4= Subject key identifier: 06:9B:8E:B7:5C:B8:D2:5E:21:52:75:9E:75:27:15:7C:38:61:33:8A Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BABFD1411ACA1901165DAC500 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/472b12af-b9e3-39d1-896b-b6682b1e1e07.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 701 IP address blocks: 74.99.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:14:11:ac:a1:90:11:65:da:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=ae4af1d8-320b-41a6-a27d-f2a7539f5d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:80:98:90:6f:d3:ec:dd:93:58:d8:da:3e:9e: 60:14:fa:d6:a2:60:68:08:03:fb:b4:ec:7e:b9:28: 4c:7d:22:32:0b:b0:55:5d:26:1c:8f:96:e2:32:6d: 86:ed:72:a0:1c:83:1d:89:17:6b:6e:11:3e:a3:0f: 80:62:4c:ed:f3:0f:5e:67:b9:eb:b1:e8:57:70:4f: fc:00:53:e5:2a:9d:24:be:17:2a:6c:54:e5:c4:1e: 34:b5:b1:df:71:d7:c7:64:84:b3:8d:7f:80:88:0a: 4c:b8:5d:b4:6a:71:ba:31:8d:61:6f:c0:26:d4:21: 46:45:f4:8f:15:ef:d4:4b:09:e6:53:59:8a:2f:74: 08:64:3b:91:ca:59:e1:dc:50:32:65:a6:78:f4:7c: 0c:42:9f:94:45:4d:2f:ff:03:a3:2c:94:c9:fb:86: 24:3f:15:c7:81:b5:e8:89:b8:1c:ee:88:56:4c:b8: 18:3a:d0:ef:9e:32:40:3d:82:c8:fd:88:0e:c0:32: e0:eb:08:5a:e3:c0:40:96:7c:d5:fc:8d:14:b7:32: 7e:6e:22:d4:58:8b:a3:a6:8e:a0:06:1b:e3:2e:81: ce:61:7f:1a:26:97:5b:76:00:4a:30:67:a5:50:a7: 60:6e:2d:20:15:31:da:83:a3:e7:ea:4e:1c:65:0a: 70:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:9B:8E:B7:5C:B8:D2:5E:21:52:75:9E:75:27:15:7C:38:61:33:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/472b12af-b9e3-39d1-896b-b6682b1e1e07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 74.99.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:24:2f:ce:dc:61:74:d9:49:2c:89:f6:1f:2d:32:3c:f2:28: d0:cd:2d:8a:76:b9:5a:a4:ba:aa:c5:a0:54:13:d7:5e:33:ca: dd:60:c1:66:02:e7:7a:96:01:8f:ad:bf:60:2b:db:d5:dd:23: f6:b1:83:b5:bf:ca:10:56:cd:96:f8:aa:4d:7e:f3:ce:ef:0f: 0f:09:4e:8b:90:2a:3a:b1:4f:65:49:15:45:9d:12:2a:af:aa: dc:e5:19:6a:b0:8f:de:e2:06:41:01:cf:c5:95:a8:ab:d8:7d: 98:9b:ed:04:ce:ab:00:fe:6e:f5:a7:63:99:fa:f4:d4:cc:3d: 7d:68:99:aa:e4:bf:0e:42:58:e2:54:65:3b:a1:00:ec:38:e9: 7c:91:d6:6a:9f:d0:e7:68:8d:18:d0:c2:50:69:5d:5d:d9:e4: fa:b1:8f:3d:5f:c7:dc:12:52:38:a4:ea:68:f9:86:22:11:71: 0c:88:43:01:ac:14:41:94:44:0f:c0:17:ed:a9:fe:c2:65:92: a4:83:0d:f5:e0:e0:6e:a3:3e:a0:9a:95:36:e9:41:0b:70:c4: e8:8e:99:b3:79:25:19:e1:6f:33:14:82:51:01:c8:e9:ad:84: 16:93:f3:b1:f9:85:b1:1e:fd:0a:b8:36:0f:ea:30:4c:4b:3b: fc:ae:b3:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/RQRrKGQEWXaxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk YWU0YWYxZDgtMzIwYi00MWE2LWEyN2QtZjJhNzUzOWY1ZDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYCYkG/T7N2TWNjaPp5gFPrWomBoCAP7tOx+ uShMfSIyC7BVXSYcj5biMm2G7XKgHIMdiRdrbhE+ow+AYkzt8w9eZ7nrsehXcE/8 AFPlKp0kvhcqbFTlxB40tbHfcdfHZISzjX+AiApMuF20anG6MY1hb8Am1CFGRfSP Fe/USwnmU1mKL3QIZDuRylnh3FAyZaZ49HwMQp+URU0v/wOjLJTJ+4YkPxXHgbXo ibgc7ohWTLgYOtDvnjJAPYLI/YgOwDLg6wha48BAlnzV/I0UtzJ+biLUWIujpo6g BhvjLoHOYX8aJpdbdgBKMGelUKdgbi0gFTHag6Pn6k4cZQpwowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAabjrdcuNJeIVJ1nnUnFXw4YTOKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDcyYjEyYWYtYjllMy0z OWQxLTg5NmItYjY2ODJiMWUxZTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSmOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMkL87cYXTZSSyJ9h8tMjzyKNDNLYp2uVqkuqrFoFQT114zyt1gwWYC 53qWAY+tv2Ar29XdI/axg7W/yhBWzZb4qk1+887vDw8JTouQKjqxT2VJFUWdEiqv qtzlGWqwj97iBkEBz8WVqKvYfZib7QTOqwD+bvWnY5n69NTMPX1omarkvw5CWOJU ZTuhAOw46XyR1mqf0OdojRjQwlBpXV3Z5Pqxjz1fx9wSUjik6mj5hiIRcQyIQwGs FEGURA/AF+2p/sJlkqSDDfXg4G6jPqCalTbpQQtwxOiOmbN5JRnhbzMUglEByOmt hBaT87H5hbEe/Qq4Ng/qMExLO/yuszA= -----END CERTIFICATE-----Generated at Wed Nov 5 14:33:19 2025 by rpki-client