$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/61a0293a-1431-35ac-b811-e7d757ab7660.roa File: 61a0293a-1431-35ac-b811-e7d757ab7660.roa (raw, json) Hash identifier: PfaHmdR7rKP12umEZ3hT47MhgXb3u0a+X8tT23/UXDI= Subject key identifier: F7:E7:65:B4:AF:07:D8:83:E5:FE:43:A0:ED:54:AA:11:61:5E:96:95 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BABFCFD7747EE3A2062B53740 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/61a0293a-1431-35ac-b811-e7d757ab7660.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 6167 IP address blocks: 174.221.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fc:fd:77:47:ee:3a:20:62:b5:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=740562d4-02b5-4b01-931d-2b501ad0fc46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:41:fe:17:6e:bd:ca:c5:c4:5a:5c:6c:fa:7c: 2a:2d:d7:63:6e:88:05:be:cd:17:82:3c:0d:ee:de: f4:c7:23:f5:f0:1a:82:3c:3a:cc:99:d2:64:c4:ff: db:72:53:01:a0:a3:5a:41:dc:50:d3:c3:c7:c5:09: dc:ca:88:79:01:86:fb:23:f8:16:c3:d7:69:07:53: a0:ac:11:bf:46:75:1b:7d:44:32:1a:1f:b6:8f:25: bc:60:cf:15:bc:bc:ba:9c:c7:40:35:0a:c7:27:b4: 1c:09:22:f6:94:1b:c8:b9:90:62:39:a1:14:2d:dd: 6c:59:ae:0f:75:4a:2b:7b:0c:92:e2:61:3c:86:1b: 6d:63:4e:75:a6:b8:ed:b9:20:f4:b1:64:39:0d:ee: f0:e2:79:6a:e3:75:bf:e1:39:dc:ad:42:1f:f7:2e: cc:1b:fa:81:d5:a9:5f:07:35:26:3a:46:04:01:4c: 1b:ca:08:91:f3:46:c9:90:f7:3e:a8:ee:60:90:ed: e2:c8:6f:35:d7:f9:8d:93:51:cf:39:74:1e:ac:35: 74:c3:67:b0:51:ec:21:a2:ea:8f:cb:93:0b:46:aa: 9c:d1:5c:48:99:e6:02:d8:c9:2e:26:99:c1:2e:f6: 4d:f4:25:a6:85:74:e2:63:ea:67:5d:a2:72:ba:16: ab:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E7:65:B4:AF:07:D8:83:E5:FE:43:A0:ED:54:AA:11:61:5E:96:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/61a0293a-1431-35ac-b811-e7d757ab7660.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.221.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:20:14:c7:1f:d5:ba:c7:11:22:79:61:fb:fe:e9:2c:81:ad: 53:07:66:44:3c:52:7d:71:6c:b7:f2:ba:56:88:59:50:91:d6: 0e:4a:e6:91:21:67:c8:37:48:52:94:f2:91:92:bb:e0:2c:e4: d0:67:95:e1:76:ae:6e:75:49:ae:a7:0d:c5:81:6b:12:32:d0: b5:6c:96:ee:d2:18:e7:cb:dc:2c:a2:6c:28:6f:cb:a6:43:13: 2c:13:70:77:86:51:16:21:0d:6e:f8:57:5d:02:e3:58:66:00: b5:dd:10:62:96:47:88:f3:18:ae:40:df:96:4f:22:f2:0d:9d: 7d:6e:b1:57:79:94:69:92:5e:55:86:6d:42:c3:93:79:67:41: e5:eb:37:ca:63:46:66:e2:ae:71:f0:25:7b:ba:c8:1e:20:54: 9d:27:b4:6b:02:11:bb:2d:e8:37:54:a7:b4:63:05:15:e1:71: 0c:15:dd:38:cc:c6:d1:68:12:ce:d3:15:32:5c:ff:7c:87:12: da:89:df:ac:cb:e9:36:30:7a:18:b1:ff:f8:38:3a:fd:e4:c0: 66:f5:0b:c0:d1:be:e8:a1:11:7f:f5:c4:36:d9:49:d2:b0:e3: 17:91:f3:70:1a:3e:cd:ab:8e:31:2a:3a:63:d6:e8:87:5b:cc: 07:96:d0:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/P13R+46IGK1N0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk NzQwNTYyZDQtMDJiNS00YjAxLTkzMWQtMmI1MDFhZDBmYzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUH+F269ysXEWlxs+nwqLddjbogFvs0XgjwN 7t70xyP18BqCPDrMmdJkxP/bclMBoKNaQdxQ08PHxQncyoh5AYb7I/gWw9dpB1Og rBG/RnUbfUQyGh+2jyW8YM8VvLy6nMdANQrHJ7QcCSL2lBvIuZBiOaEULd1sWa4P dUorewyS4mE8hhttY051prjtuSD0sWQ5De7w4nlq43W/4TncrUIf9y7MG/qB1alf BzUmOkYEAUwbygiR80bJkPc+qO5gkO3iyG811/mNk1HPOXQerDV0w2ewUewhouqP y5MLRqqc0VxImeYC2MkuJpnBLvZN9CWmhXTiY+pnXaJyuharrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfnZbSvB9iD5f5DoO1UqhFhXpaVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjFhMDI5M2EtMTQzMS0z NWFjLWI4MTEtZTdkNzU3YWI3NjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErt2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8gFMcf1brHESJ5Yfv+6SyBrVMHZkQ8Un1xbLfyulaIWVCR1g5K5pEh Z8g3SFKU8pGSu+As5NBnleF2rm51Sa6nDcWBaxIy0LVslu7SGOfL3CyibChvy6ZD EywTcHeGURYhDW74V10C41hmALXdEGKWR4jzGK5A35ZPIvINnX1usVd5lGmSXlWG bULDk3lnQeXrN8pjRmbirnHwJXu6yB4gVJ0ntGsCEbst6DdUp7RjBRXhcQwV3TjM xtFoEs7TFTJc/3yHEtqJ36zL6TYwehix//g4Ov3kwGb1C8DRvuihEX/1xDbZSdKw 4xeR83AaPs2rjjEqOmPW6IdbzAeW0KQ= -----END CERTIFICATE-----Generated at Wed Nov 5 12:21:57 2025 by rpki-client