$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/650c8c8a-7996-3744-a7aa-46a72c7aaeab.roa File: 650c8c8a-7996-3744-a7aa-46a72c7aaeab.roa (raw, json) Hash identifier: 7eSHmdzpq/MokHpj3lvr8CH6V/ot8S70SVaoHWc788w= Subject key identifier: 61:C9:84:F7:F3:A1:F0:1C:20:AA:10:37:84:64:3B:7D:07:C2:BA:53 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B609CA0F1079AEC68B0C58400 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/650c8c8a-7996-3744-a7aa-46a72c7aaeab.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 6167 IP address blocks: 174.216.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:a0:f1:07:9a:ec:68:b0:c5:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=c2cb503a-f8b4-475e-9710-f6b5376ec852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2f:34:df:ae:44:02:76:f3:3f:79:8f:74:32: c4:ea:b7:e4:66:3d:ab:33:89:12:ca:3c:4c:54:be: 75:e4:44:c7:c6:7e:71:c8:63:5c:5e:65:8a:06:27: d0:71:6c:77:62:aa:79:db:36:66:65:3b:44:e1:58: df:3a:de:2d:9b:02:98:13:aa:7d:b9:43:ab:de:21: 5f:74:a2:93:98:43:27:ab:f9:25:7d:eb:5d:38:f9: 83:f9:5b:d5:e5:23:95:e2:0d:6d:df:15:f3:0d:54: 3b:b5:13:0d:21:11:ef:ea:6c:84:08:42:d2:78:65: 69:6f:f0:c6:7d:59:66:83:3d:82:f7:2a:38:79:19: 3f:bb:d9:d2:55:eb:ee:60:73:c0:47:6a:a7:8b:c6: ea:74:cc:ad:06:0a:cd:14:60:ac:4f:60:50:35:44: 75:22:34:51:dc:d0:9a:67:15:7a:32:fe:48:5a:6c: 8f:1e:97:f6:50:26:58:70:00:c9:08:e4:75:1c:99: be:20:0a:39:17:fb:e4:8c:17:ad:c4:c3:42:96:6f: db:2d:e3:fd:ff:be:0e:f0:95:31:a0:b4:36:f5:6b: 85:5d:4e:93:62:30:78:d1:13:b6:ea:66:f9:e7:d0: 1a:48:80:2b:d2:f4:c1:5b:66:a1:33:3e:9e:5d:fa: 09:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C9:84:F7:F3:A1:F0:1C:20:AA:10:37:84:64:3B:7D:07:C2:BA:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/650c8c8a-7996-3744-a7aa-46a72c7aaeab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.216.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:67:08:4c:bb:d4:e7:fa:1c:09:17:fb:34:e1:e8:19:2e:81: 13:ca:0b:ea:1e:da:54:10:c7:a8:f7:d8:f3:20:16:37:2d:f3: 33:9c:e9:e3:60:3c:58:d9:e6:15:f7:35:f6:43:80:76:05:16: db:8e:cd:bf:20:3f:20:fd:b7:d9:2e:6a:5e:e1:0c:bf:9f:23: cf:76:45:54:ba:28:3a:f0:5b:48:be:65:f1:45:d6:23:82:5a: 6d:99:85:37:02:09:31:e6:1f:61:7d:36:a0:33:54:d8:2d:7e: 8e:c2:46:d9:9d:eb:24:06:3d:af:91:34:5a:e8:bf:10:ed:ed: 6c:da:56:74:e0:75:a0:a4:1f:39:ea:62:e6:b5:fb:d6:00:36: 96:24:e2:57:1b:13:66:19:2b:04:0a:3a:04:5c:b2:a8:43:92: 94:69:ef:70:6e:10:59:ac:04:c2:da:3a:49:c2:17:3f:32:f7: ea:04:f3:b0:f5:26:68:31:1d:a8:3c:a7:45:8d:d1:a5:31:a0: 6f:7e:c1:db:b0:46:79:09:b4:c6:62:ba:ef:88:0d:68:fa:a2: 7b:e2:aa:65:dc:4f:b7:e0:06:0a:5b:a4:51:67:f5:39:3f:c5: d7:8b:37:c3:2b:30:5e:b3:f1:be:69:74:9e:51:f7:d9:4b:34: b7:49:08:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnKDxB5rsaLDFhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk YzJjYjUwM2EtZjhiNC00NzVlLTk3MTAtZjZiNTM3NmVjODUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtC80365EAnbzP3mPdDLE6rfkZj2rM4kSyjxM VL515ETHxn5xyGNcXmWKBifQcWx3Yqp52zZmZTtE4VjfOt4tmwKYE6p9uUOr3iFf dKKTmEMnq/klfetdOPmD+VvV5SOV4g1t3xXzDVQ7tRMNIRHv6myECELSeGVpb/DG fVlmgz2C9yo4eRk/u9nSVevuYHPAR2qni8bqdMytBgrNFGCsT2BQNUR1IjRR3NCa ZxV6Mv5IWmyPHpf2UCZYcADJCOR1HJm+IAo5F/vkjBetxMNClm/bLeP9/74O8JUx oLQ29WuFXU6TYjB40RO26mb559AaSIAr0vTBW2ahMz6eXfoJHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHJhPfzofAcIKoQN4RkO30HwrpTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjUwYzhjOGEtNzk5Ni0z NzQ0LWE3YWEtNDZhNzJjN2FhZWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtiQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhnCEy71Of6HAkX+zTh6BkugRPKC+oe2lQQx6j32PMgFjct8zOc6eNg PFjZ5hX3NfZDgHYFFtuOzb8gPyD9t9kual7hDL+fI892RVS6KDrwW0i+ZfFF1iOC Wm2ZhTcCCTHmH2F9NqAzVNgtfo7CRtmd6yQGPa+RNFrovxDt7WzaVnTgdaCkHznq Yua1+9YANpYk4lcbE2YZKwQKOgRcsqhDkpRp73BuEFmsBMLaOknCFz8y9+oE87D1 JmgxHag8p0WN0aUxoG9+wduwRnkJtMZiuu+IDWj6onviqmXcT7fgBgpbpFFn9Tk/ xdeLN8MrMF6z8b5pdJ5R99lLNLdJCPE= -----END CERTIFICATE-----Generated at Wed Nov 5 12:22:47 2025 by rpki-client