$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/523beee1-112a-382c-ba88-2ef62215de5e.roa File: 523beee1-112a-382c-ba88-2ef62215de5e.roa (raw, json) Hash identifier: CaYmC2sHsroflTg7qRKvU4kdLyP5f+o0z/X9c7BwPyw= Subject key identifier: 18:AF:DB:97:80:10:CC:9E:86:E4:55:FD:A0:2E:FF:1C:77:D4:3E:BE Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B87B23ADFAD92BD9B676B1300 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/523beee1-112a-382c-ba88-2ef62215de5e.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 6167 IP address blocks: 174.248.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:3a:df:ad:92:bd:9b:67:6b:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=d4af9c00-ae9d-4c98-97bd-f34fac43c8b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:83:d3:c3:5b:84:f3:a6:49:22:23:52:b0:b6: 3a:85:09:0b:78:50:53:9e:80:0c:89:f3:6f:7f:70: 90:c6:69:c3:04:fb:b1:26:c2:5c:b6:7b:ca:d9:72: 2b:a2:03:6a:31:fd:19:53:c1:9d:02:00:08:ee:4d: 11:48:82:db:65:27:c9:e2:97:aa:b2:ca:29:c6:22: c9:97:7f:dd:8a:99:ed:84:b7:62:7e:1e:d6:77:de: 65:36:f0:5e:25:c3:eb:4c:a9:d9:35:09:99:b6:9e: ef:d6:21:d7:44:75:23:83:3c:4f:c7:ce:a0:c9:23: d2:20:5a:65:a6:0f:02:24:e7:03:ac:bc:fa:0b:aa: fb:9c:4f:1e:97:2b:b9:39:79:89:27:61:a1:af:16: a3:63:c1:37:a2:72:59:3c:01:65:81:82:09:f3:58: 7b:26:8c:8d:12:a0:28:45:ac:93:b7:cb:c3:73:51: 79:02:30:f8:a9:d7:6d:d6:c9:b3:8e:74:bf:45:79: ef:7f:1c:da:8b:45:22:f7:41:2e:ee:5b:bc:07:ac: 4d:b7:59:8a:46:11:60:2c:4e:3a:d4:42:ff:c6:48: b3:6d:da:a0:f7:04:8b:4d:54:2c:e4:d5:c7:cb:cf: 6b:c2:65:36:e8:35:74:6d:fb:e7:c2:8f:b3:d1:18: 08:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:AF:DB:97:80:10:CC:9E:86:E4:55:FD:A0:2E:FF:1C:77:D4:3E:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/523beee1-112a-382c-ba88-2ef62215de5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.248.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:d7:b9:83:f5:aa:73:8d:af:53:fe:16:84:68:96:f4:ad:86: f9:58:79:72:1f:a3:a5:7e:3c:3d:be:d1:c4:1d:98:ea:68:dd: 0c:50:29:85:d3:77:96:84:3f:0a:f0:dc:7c:94:81:26:3b:f3: 67:4a:85:0d:87:1d:f4:8e:c2:88:ff:61:28:ad:f9:5c:c0:2b: 82:1b:a8:47:3f:f5:8a:3c:2e:2b:1e:02:81:71:c8:45:f8:4d: dc:de:20:2f:c2:11:7b:84:37:16:6f:b6:80:e7:6f:bd:f2:4a: ee:bc:cb:ce:02:f3:9e:95:ad:37:f0:c9:71:01:ce:10:f7:b8: c6:f8:3c:62:80:55:5a:41:7d:ef:c2:a3:d2:43:93:da:be:eb: c4:9f:ef:de:e9:71:db:b3:3e:9e:86:7a:ee:ec:0e:f9:9e:3c: 41:66:8a:0e:25:3c:28:26:70:bb:26:a6:fd:27:88:eb:69:9f: 94:6e:d1:94:e8:23:41:fc:71:45:64:59:f4:22:af:20:f6:4c: f2:7d:f3:18:1c:90:dd:6a:d3:ee:30:5f:4b:7e:10:27:28:77: a3:fe:60:66:3e:4c:09:db:6e:e5:3d:42:2a:e0:01:10:60:c5: f9:23:ab:43:5c:c8:37:3c:f9:df:1a:a7:e4:c5:b7:c6:40:2d: 82:45:0a:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsjrfrZK9m2drEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk ZDRhZjljMDAtYWU5ZC00Yzk4LTk3YmQtZjM0ZmFjNDNjOGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIPTw1uE86ZJIiNSsLY6hQkLeFBTnoAMifNv f3CQxmnDBPuxJsJctnvK2XIrogNqMf0ZU8GdAgAI7k0RSILbZSfJ4peqssopxiLJ l3/dipnthLdifh7Wd95lNvBeJcPrTKnZNQmZtp7v1iHXRHUjgzxPx86gySPSIFpl pg8CJOcDrLz6C6r7nE8elyu5OXmJJ2GhrxajY8E3onJZPAFlgYIJ81h7JoyNEqAo RayTt8vDc1F5AjD4qddt1smzjnS/RXnvfxzai0Ui90Eu7lu8B6xNt1mKRhFgLE46 1EL/xkizbdqg9wSLTVQs5NXHy89rwmU26DV0bfvnwo+z0RgIwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBiv25eAEMyehuRV/aAu/xx31D6+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTIzYmVlZTEtMTEyYS0z ODJjLWJhODgtMmVmNjIyMTVkZTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrvhkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3XuYP1qnONr1P+FoRolvSthvlYeXIfo6V+PD2+0cQdmOpo3QxQKYXT d5aEPwrw3HyUgSY782dKhQ2HHfSOwoj/YSit+VzAK4IbqEc/9Yo8LiseAoFxyEX4 TdzeIC/CEXuENxZvtoDnb73ySu68y84C856VrTfwyXEBzhD3uMb4PGKAVVpBfe/C o9JDk9q+68Sf797pcduzPp6Geu7sDvmePEFmig4lPCgmcLsmpv0niOtpn5Ru0ZTo I0H8cUVkWfQiryD2TPJ98xgckN1q0+4wX0t+ECcod6P+YGY+TAnbbuU9QirgARBg xfkjq0NcyDc8+d8ap+TFt8ZALYJFCrE= -----END CERTIFICATE-----Generated at Wed Nov 5 11:00:07 2025 by rpki-client