$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4dea58a6-c3f9-3c84-92c4-af9338f493a0.roa File: 4dea58a6-c3f9-3c84-92c4-af9338f493a0.roa (raw, json) Hash identifier: C2U5ca3ra/uSM0yVM61sqM35Shhi9eDKUOiPAE6KW/I= Subject key identifier: AA:A6:91:0D:22:08:8E:07:8E:3F:2E:0A:5A:D6:35:52:65:6F:B9:CC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B87B23D270194B678500AB180 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4dea58a6-c3f9-3c84-92c4-af9338f493a0.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 6167 IP address blocks: 174.249.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:3d:27:01:94:b6:78:50:0a:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=869606da-7c78-4f72-a25b-4a889f797e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:33:a6:d6:dc:02:b2:1a:5e:a4:b7:5b:07:62: c2:86:15:07:b2:57:ce:50:bf:a9:bd:98:bc:5e:0f: 32:90:fe:ec:12:f5:d8:48:5f:86:09:37:cd:fa:19: a9:02:2f:b2:c5:63:61:4b:99:4e:8f:7b:4d:3a:ed: bc:a5:aa:16:3d:ce:a3:03:69:54:11:79:16:e3:19: 66:cc:b0:c7:a6:ce:16:9a:eb:b9:52:52:ad:40:09: 63:9d:65:24:a7:76:1b:5e:9d:39:f3:cb:59:0e:60: 5e:37:73:be:d8:21:ce:0b:c9:f8:5d:b7:6d:16:60: 41:f8:2f:d9:5c:b5:36:a0:b0:48:83:ab:c7:32:67: 31:10:88:53:65:66:27:ce:92:75:73:52:04:33:ed: 1d:08:b1:27:16:a3:c2:8c:f6:5e:8a:2e:34:4e:72: b8:e8:c9:c3:2e:63:51:25:12:d0:e3:0c:23:0b:f3: 72:33:a0:ac:c7:30:75:a4:4b:36:8c:9b:cd:16:66: 3d:fb:cd:39:77:84:ec:18:ab:78:06:79:27:3e:18: 8f:60:2a:d9:82:a9:ad:04:06:6b:3c:60:f9:b1:0e: 91:62:28:c4:04:98:7b:1d:e3:a8:7e:5c:76:4c:10: 0e:e9:8c:1b:3d:11:9a:d8:21:e0:74:22:92:8b:45: 95:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A6:91:0D:22:08:8E:07:8E:3F:2E:0A:5A:D6:35:52:65:6F:B9:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4dea58a6-c3f9-3c84-92c4-af9338f493a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.249.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:3f:5a:89:4e:0d:e3:a4:ee:29:fa:77:5d:ce:e7:98:4e:c7: cf:ea:40:eb:b0:d2:53:45:0c:2f:8f:8c:da:72:82:5d:b8:6c: 88:f1:37:77:a3:3e:fa:f3:8c:22:09:34:1d:fb:07:dd:0c:f7: f5:24:76:fc:f7:da:6f:05:ca:85:bb:32:a0:0f:d7:23:ac:2d: 77:1d:b6:0f:b6:df:17:01:7a:da:98:14:42:db:1e:a5:50:62: 0a:62:0e:1f:6b:48:c6:fd:3f:8a:66:cd:2f:29:33:4b:5b:97: 6d:f0:08:1a:77:fb:31:57:5c:7b:37:ca:d5:c8:a6:a0:32:2e: 23:32:f6:d5:77:d0:49:a1:30:03:90:f5:83:98:06:5e:95:f0: e1:a8:82:53:3c:fa:f3:74:f6:bf:c5:9d:b4:63:09:b0:3d:0c: ff:95:eb:05:88:97:0f:3a:28:28:26:b6:a0:a8:5d:50:dd:f5: 2b:d0:8a:b1:bf:0a:05:bc:50:0b:65:50:d9:61:1e:e8:77:51: c3:c9:a6:c8:b2:84:3c:0d:51:bd:99:1d:8a:1f:7c:19:0f:6d: 0e:bd:e1:d1:f7:bc:b1:f0:1a:0f:d7:22:fa:70:d3:c1:d6:22: 73:42:e5:61:47:ef:db:5c:bd:ef:36:ac:32:ef:9a:38:77:3a: f4:d5:2d:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsj0nAZS2eFAKsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk ODY5NjA2ZGEtN2M3OC00ZjcyLWEyNWItNGE4ODlmNzk3ZTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTOm1twCshpepLdbB2LChhUHslfOUL+pvZi8 Xg8ykP7sEvXYSF+GCTfN+hmpAi+yxWNhS5lOj3tNOu28paoWPc6jA2lUEXkW4xlm zLDHps4Wmuu5UlKtQAljnWUkp3YbXp0588tZDmBeN3O+2CHOC8n4XbdtFmBB+C/Z XLU2oLBIg6vHMmcxEIhTZWYnzpJ1c1IEM+0dCLEnFqPCjPZeii40TnK46MnDLmNR JRLQ4wwjC/NyM6CsxzB1pEs2jJvNFmY9+805d4TsGKt4BnknPhiPYCrZgqmtBAZr PGD5sQ6RYijEBJh7HeOoflx2TBAO6YwbPRGa2CHgdCKSi0WVRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqmkQ0iCI4Hjj8uClrWNVJlb7nMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGRlYTU4YTYtYzNmOS0z Yzg0LTkyYzQtYWY5MzM4ZjQ5M2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrvnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJI/WolODeOk7in6d13O55hOx8/qQOuw0lNFDC+PjNpygl24bIjxN3ej PvrzjCIJNB37B90M9/Ukdvz32m8FyoW7MqAP1yOsLXcdtg+23xcBetqYFELbHqVQ YgpiDh9rSMb9P4pmzS8pM0tbl23wCBp3+zFXXHs3ytXIpqAyLiMy9tV30EmhMAOQ 9YOYBl6V8OGoglM8+vN09r/FnbRjCbA9DP+V6wWIlw86KCgmtqCoXVDd9SvQirG/ CgW8UAtlUNlhHuh3UcPJpsiyhDwNUb2ZHYoffBkPbQ694dH3vLHwGg/XIvpw08HW InNC5WFH79tcve82rDLvmjh3OvTVLXo= -----END CERTIFICATE-----Generated at Wed Nov 5 13:23:48 2025 by rpki-client