$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c8cb608-e1a2-3dc4-a157-ef202fc6d031.roa File: 5c8cb608-e1a2-3dc4-a157-ef202fc6d031.roa (raw, json) Hash identifier: VE77D3qXxygddqFjWyRY7c4O/0yPQiK+LZvBZg2TdCI= Subject key identifier: 48:3F:EA:E8:15:9F:03:C6:09:7A:DA:2E:06:10:2C:14:BF:67:48:E2 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B8EACFBD2145219458D531160 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c8cb608-e1a2-3dc4-a157-ef202fc6d031.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 22394 IP address blocks: 174.41.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:fb:d2:14:52:19:45:8d:53:11:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=03b9aa23-35f6-4a79-bf8f-29d1b2a708c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:92:e1:6e:89:b6:d6:fa:16:c6:e4:bb:12:38: 90:3f:c3:c9:6e:0a:f8:7a:15:3b:50:01:da:83:65: 52:c8:8f:48:f8:ae:a8:78:43:b5:88:60:45:41:ff: d8:35:85:52:cf:80:34:a3:1c:b3:a3:5c:5b:f0:f8: 1e:ac:fb:b7:1b:95:ba:61:08:1c:31:28:3f:ee:cf: 4b:19:31:f5:85:06:46:1c:13:62:82:75:00:d9:70: 73:67:15:8e:59:fd:67:cc:20:4b:a2:ed:aa:58:67: cf:86:e6:0a:16:d8:e1:2d:4c:b2:b2:1f:9c:11:09: 79:0e:d2:2b:cd:bb:13:38:b2:7e:da:85:86:c9:2f: c0:f9:dd:30:2f:7b:3c:a9:d2:07:0b:b1:6d:70:36: b6:ec:f0:4e:33:78:47:ad:61:59:fa:82:2a:68:cd: e6:de:4b:88:6d:ba:3f:f4:bb:b1:6c:77:e8:4a:f4: 17:19:10:f0:37:cb:d3:3f:e2:b5:0f:3f:b7:ea:8a: cd:3f:1b:b4:e2:54:68:96:f1:d2:b4:de:64:88:de: 81:2e:9c:aa:7d:e8:a2:46:7d:4f:74:cd:c5:ef:56: 78:ce:80:14:61:e9:28:83:a1:2f:07:ef:bb:32:39: 8a:5c:8e:0c:19:99:e9:e1:38:af:5d:f7:85:61:58: e8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:3F:EA:E8:15:9F:03:C6:09:7A:DA:2E:06:10:2C:14:BF:67:48:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5c8cb608-e1a2-3dc4-a157-ef202fc6d031.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.41.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:95:61:37:93:6f:2e:84:f0:5d:1a:36:18:fb:1b:5a:69:5f: 23:7d:ec:42:e4:1e:dd:3d:2d:21:4b:8b:ef:09:c2:42:1e:f0: 47:b2:94:27:d5:64:07:13:16:b8:09:74:8e:10:a6:28:83:24: 83:27:7d:15:46:7a:7f:0f:b7:c8:53:d7:33:a1:1d:d7:2d:05: 2c:03:6e:db:6e:11:57:9c:93:bb:ed:fa:78:86:a8:86:4d:f1: 9d:0f:44:63:c9:ce:07:a8:61:08:9b:00:ae:5e:64:6a:4e:ca: 40:18:7a:3f:19:04:b2:79:01:a7:0c:8d:56:87:ad:47:20:b8: 6a:b9:91:ca:09:2f:34:6d:0f:a8:7d:35:db:ca:6f:02:3e:6e: d0:6d:05:6f:b8:38:e7:b6:4f:ad:80:e4:e0:80:7a:ac:89:7f: 70:e7:c0:ff:d0:34:06:be:73:0b:fd:ab:c1:a5:e9:91:68:83: be:5f:91:2c:5c:04:93:90:25:a9:92:76:14:b9:23:7e:62:47: 3c:65:17:cc:61:6d:ec:91:d5:48:be:c7:b4:7b:fd:48:15:a9: 39:dd:c7:d9:2f:ec:c9:04:c4:57:f3:68:1e:91:0a:53:5e:09: d6:15:88:94:8d:72:d5:ec:2b:1f:13:8e:24:ef:a4:d2:69:64: 95:93:16:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrPvSFFIZRY1TEWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk MDNiOWFhMjMtMzVmNi00YTc5LWJmOGYtMjlkMWIyYTcwOGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJLhbom21voWxuS7EjiQP8PJbgr4ehU7UAHa g2VSyI9I+K6oeEO1iGBFQf/YNYVSz4A0oxyzo1xb8PgerPu3G5W6YQgcMSg/7s9L GTH1hQZGHBNignUA2XBzZxWOWf1nzCBLou2qWGfPhuYKFtjhLUyysh+cEQl5DtIr zbsTOLJ+2oWGyS/A+d0wL3s8qdIHC7FtcDa27PBOM3hHrWFZ+oIqaM3m3kuIbbo/ 9LuxbHfoSvQXGRDwN8vTP+K1Dz+36orNPxu04lRolvHStN5kiN6BLpyqfeiiRn1P dM3F71Z4zoAUYekog6EvB++7MjmKXI4MGZnp4TivXfeFYVjoAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEg/6ugVnwPGCXraLgYQLBS/Z0jiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWM4Y2I2MDgtZTFhMi0z ZGM0LWExNTctZWYyMDJmYzZkMDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrimYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaVYTeTby6E8F0aNhj7G1ppXyN97ELkHt09LSFLi+8JwkIe8EeylCfV ZAcTFrgJdI4QpiiDJIMnfRVGen8Pt8hT1zOhHdctBSwDbttuEVeck7vt+niGqIZN 8Z0PRGPJzgeoYQibAK5eZGpOykAYej8ZBLJ5AacMjVaHrUcguGq5kcoJLzRtD6h9 NdvKbwI+btBtBW+4OOe2T62A5OCAeqyJf3DnwP/QNAa+cwv9q8Gl6ZFog75fkSxc BJOQJamSdhS5I35iRzxlF8xhbeyR1Ui+x7R7/UgVqTndx9kv7MkExFfzaB6RClNe CdYViJSNctXsKx8TjiTvpNJpZJWTFgs= -----END CERTIFICATE-----Generated at Wed Nov 5 11:35:05 2025 by rpki-client