$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6eb37439-8c5c-3622-bd27-6ecbbf3498b6.roa File: 6eb37439-8c5c-3622-bd27-6ecbbf3498b6.roa (raw, json) Hash identifier: q3cc0n+fxTbioFYgWQsksPC5Gfe5hbTC7H2sbZwTAVc= Subject key identifier: 28:C5:D8:56:68:90:55:2B:30:CA:D7:C3:6A:ED:84:29:9D:B9:6B:F3 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB5C26C469E34BB518861DAD0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6eb37439-8c5c-3622-bd27-6ecbbf3498b6.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 6167 IP address blocks: 174.200.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:6c:46:9e:34:bb:51:88:61:da:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=a8e22f2e-f38a-41a9-8cff-b133c4b2e741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:15:08:dd:ba:d2:ce:3b:05:c5:af:33:ac:60: 0b:8f:91:ea:e7:b2:7a:87:56:5b:b2:ac:c1:19:47: 73:8c:7d:b2:7a:8a:f7:b0:8c:16:90:33:2f:6c:c0: 46:6a:cd:e4:31:79:25:4d:36:78:31:62:70:88:19: 3c:f6:5e:3b:ee:3d:8d:be:82:42:97:e4:81:51:08: 76:f6:08:09:aa:f4:ff:8a:b3:53:1d:1d:6a:9a:7d: c9:77:b7:c6:7f:35:22:3a:41:45:af:b3:5d:cf:73: 60:e2:d5:99:98:d3:24:32:ed:6f:4a:2e:1f:42:0e: ba:dd:00:3c:d2:0a:11:54:a5:65:c5:d4:21:b1:21: 47:11:0c:7c:73:04:66:bc:33:10:cd:05:ff:8b:bc: 8e:b7:ae:3d:8f:f0:2c:fe:e1:79:c9:76:1e:51:a5: 49:a5:fc:fd:ac:ef:94:eb:a9:05:03:35:1b:c6:78: 72:fc:b6:61:bb:6a:e2:c4:f8:8c:b9:4c:37:01:66: 50:6c:f1:ef:38:29:b7:1d:39:60:6c:fc:86:52:5d: a2:dc:5d:73:9a:ae:b1:5b:04:97:a3:13:a8:68:f7: e6:ff:2f:ac:a6:02:c0:14:42:75:14:de:7f:7c:9a: d2:61:43:b9:95:3e:a9:55:62:da:44:1d:65:f6:fb: b3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C5:D8:56:68:90:55:2B:30:CA:D7:C3:6A:ED:84:29:9D:B9:6B:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6eb37439-8c5c-3622-bd27-6ecbbf3498b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.200.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:ab:95:32:31:3b:08:b8:37:d3:11:0e:8f:e3:02:41:e7:42: f4:d0:5a:94:11:db:bd:26:8d:32:7a:26:28:2c:b1:66:78:46: 39:3d:8e:81:c8:6d:f9:97:11:f0:cc:60:8c:65:8e:dc:c8:4c: 89:2b:e1:c6:79:45:4d:12:25:df:6e:49:73:a9:73:b2:c6:8f: f6:9a:a1:d5:4a:92:5d:5f:b3:48:49:1a:fd:9a:d6:cf:11:2f: ca:aa:e9:09:43:fa:71:ca:10:04:45:91:cd:89:03:be:28:ca: cc:bd:6f:85:34:37:0b:67:ed:99:a3:27:08:92:09:d5:03:f7: 6e:d7:92:ca:88:a5:0c:2e:e5:c2:6e:06:f8:ad:fb:a4:06:b5: 67:cb:78:76:a1:80:10:fc:1f:d7:66:bf:e7:be:03:8b:85:76: f1:05:33:ff:db:f1:f9:e0:ec:21:b0:06:8a:78:73:57:1e:0f: 24:a1:41:05:78:bf:ac:ac:e4:55:d5:2a:ee:c2:8c:d2:29:f6: 15:cd:09:f9:aa:ec:fa:eb:57:b5:55:a5:e2:32:40:16:e1:c9: ff:70:f0:8d:8f:d1:83:35:69:df:ad:25:a7:29:db:09:ec:2b: 26:43:94:da:c9:67:ec:9e:83:cd:48:e5:c0:a0:1e:c1:0d:5d: 8b:a7:15:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wmxGnjS7UYhh2tAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk YThlMjJmMmUtZjM4YS00MWE5LThjZmYtYjEzM2M0YjJlNzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxUI3brSzjsFxa8zrGALj5Hq57J6h1ZbsqzB GUdzjH2yeor3sIwWkDMvbMBGas3kMXklTTZ4MWJwiBk89l477j2NvoJCl+SBUQh2 9ggJqvT/irNTHR1qmn3Jd7fGfzUiOkFFr7Ndz3Ng4tWZmNMkMu1vSi4fQg663QA8 0goRVKVlxdQhsSFHEQx8cwRmvDMQzQX/i7yOt649j/As/uF5yXYeUaVJpfz9rO+U 66kFAzUbxnhy/LZhu2rixPiMuUw3AWZQbPHvOCm3HTlgbPyGUl2i3F1zmq6xWwSX oxOoaPfm/y+spgLAFEJ1FN5/fJrSYUO5lT6pVWLaRB1l9vuzqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjF2FZokFUrMMrXw2rthCmduWvzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNmViMzc0MzktOGM1Yy0z NjIyLWJkMjctNmVjYmJmMzQ5OGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrsjoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyrlTIxOwi4N9MRDo/jAkHnQvTQWpQR270mjTJ6JigssWZ4Rjk9joHI bfmXEfDMYIxljtzITIkr4cZ5RU0SJd9uSXOpc7LGj/aaodVKkl1fs0hJGv2a1s8R L8qq6QlD+nHKEARFkc2JA74oysy9b4U0Nwtn7ZmjJwiSCdUD927XksqIpQwu5cJu Bvit+6QGtWfLeHahgBD8H9dmv+e+A4uFdvEFM//b8fng7CGwBop4c1ceDyShQQV4 v6ys5FXVKu7CjNIp9hXNCfmq7PrrV7VVpeIyQBbhyf9w8I2P0YM1ad+tJacp2wns KyZDlNrJZ+yeg81I5cCgHsENXYunFdA= -----END CERTIFICATE-----Generated at Wed Nov 5 12:31:20 2025 by rpki-client