$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e5a8fa8-5a50-3d96-be17-1236c6984c80.roa File: 8e5a8fa8-5a50-3d96-be17-1236c6984c80.roa (raw, json) Hash identifier: pz02JCdEwXvZupNYsWSHBVMIc4i03QJ0i2ITKgaTH0k= Subject key identifier: 91:85:30:05:21:D6:68:3E:D4:45:EB:34:75:68:F5:6A:A2:75:13:F2 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B98724B9386093D998EBF1D00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e5a8fa8-5a50-3d96-be17-1236c6984c80.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 6167 IP address blocks: 174.254.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:4b:93:86:09:3d:99:8e:bf:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=d1d62685-7d55-4a5f-9174-4561f34f21c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:55:3f:45:38:d5:80:5f:e8:25:ba:1f:9a:11: c2:2d:64:55:0d:86:f8:39:3c:bb:8b:2a:03:0b:3f: b1:60:09:d4:c9:8f:a1:3c:1d:a0:c1:29:22:23:f3: 9d:af:9e:03:6f:25:6c:d6:b3:0d:c6:7e:ef:69:3c: b0:ea:ea:4c:b7:bf:b2:4d:74:f5:33:bc:f9:65:e3: 7d:f4:65:ef:db:4a:7e:64:e8:ee:b8:b0:b9:34:b7: 86:49:34:43:e1:2d:4d:8b:cf:1d:61:c1:b1:7c:2d: e4:d3:57:7f:27:40:33:df:d3:2a:3f:e0:97:6c:25: 82:90:8e:30:a8:7f:05:71:26:e8:c4:23:ad:b0:0a: e4:6f:70:0d:75:1b:fb:24:26:3b:83:81:24:97:cb: 85:df:b0:f6:48:7e:11:16:ad:e3:c4:d9:04:bc:a6: 19:d5:21:da:26:dc:37:2e:f7:60:92:df:90:dc:c2: d9:33:69:21:de:bb:2f:05:5c:7c:9e:1a:1d:d6:29: 55:9e:70:6a:d4:d2:52:fd:6e:6c:07:c8:04:b0:76: 6f:e1:af:74:9c:d5:b2:4c:1e:1a:e1:d0:49:b4:00: 5d:23:a7:f3:d0:fc:ae:f1:6f:81:12:69:2c:3a:2a: d5:0c:f6:db:9b:9c:d1:5a:30:7c:8d:1c:79:57:a4: 06:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:85:30:05:21:D6:68:3E:D4:45:EB:34:75:68:F5:6A:A2:75:13:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e5a8fa8-5a50-3d96-be17-1236c6984c80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.254.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:9e:60:04:32:bb:cf:9f:4e:3f:c2:85:5a:65:db:36:6e:74: 28:7b:20:7c:b6:35:2c:6f:cd:a0:9c:79:ea:86:f1:e1:43:52: f4:a4:ac:90:1f:a0:78:d2:dd:c1:4b:4e:15:2a:0c:72:fc:5f: b8:13:57:1f:c8:7f:0e:10:12:df:ed:e7:ec:68:08:43:55:5e: 5c:7b:3d:68:4a:3a:fa:c4:91:ed:00:23:9c:7e:62:ad:c4:f6: 79:92:46:20:4e:2b:50:34:c2:79:2f:2b:2b:e9:c4:a4:69:31: fd:78:2f:33:8d:2d:93:5a:af:00:37:3c:8b:d4:74:98:59:9b: 8e:8d:54:de:0c:f0:c4:32:54:7c:ea:4a:4b:80:4a:43:11:ec: 6a:c8:d2:3b:63:08:8f:76:64:28:bd:57:4b:79:1a:fb:39:50: ce:e6:b7:e7:6b:ac:74:ff:2b:77:63:55:6d:1b:1d:a3:21:f1: 4d:68:f6:eb:69:db:d2:d5:0e:76:dc:d4:cb:dd:f8:de:31:ee: 59:94:b0:82:3e:c8:e5:09:ac:44:c1:70:9c:50:f9:ad:7d:5b: 02:53:92:3b:fb:88:0e:85:4b:8b:81:b1:99:d1:92:c0:76:e0: ac:de:22:dc:29:bc:da:f7:8f:f2:ab:79:29:81:7f:ed:60:81: ec:91:d5:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYckuThgk9mY6/HQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk ZDFkNjI2ODUtN2Q1NS00YTVmLTkxNzQtNDU2MWYzNGYyMWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFU/RTjVgF/oJbofmhHCLWRVDYb4OTy7iyoD Cz+xYAnUyY+hPB2gwSkiI/Odr54DbyVs1rMNxn7vaTyw6upMt7+yTXT1M7z5ZeN9 9GXv20p+ZOjuuLC5NLeGSTRD4S1Ni88dYcGxfC3k01d/J0Az39MqP+CXbCWCkI4w qH8FcSboxCOtsArkb3ANdRv7JCY7g4Ekl8uF37D2SH4RFq3jxNkEvKYZ1SHaJtw3 Lvdgkt+Q3MLZM2kh3rsvBVx8nhod1ilVnnBq1NJS/W5sB8gEsHZv4a90nNWyTB4a 4dBJtABdI6fz0Pyu8W+BEmksOirVDPbbm5zRWjB8jRx5V6QGxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGFMAUh1mg+1EXrNHVo9WqidRPyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGU1YThmYTgtNWE1MC0z ZDk2LWJlMTctMTIzNmM2OTg0YzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErv7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2eYAQyu8+fTj/ChVpl2zZudCh7IHy2NSxvzaCceeqG8eFDUvSkrJAf oHjS3cFLThUqDHL8X7gTVx/Ifw4QEt/t5+xoCENVXlx7PWhKOvrEke0AI5x+Yq3E 9nmSRiBOK1A0wnkvKyvpxKRpMf14LzONLZNarwA3PIvUdJhZm46NVN4M8MQyVHzq SkuASkMR7GrI0jtjCI92ZCi9V0t5Gvs5UM7mt+drrHT/K3djVW0bHaMh8U1o9utp 29LVDnbc1Mvd+N4x7lmUsII+yOUJrETBcJxQ+a19WwJTkjv7iA6FS4uBsZnRksB2 4KzeItwpvNr3j/KreSmBf+1ggeyR1aI= -----END CERTIFICATE-----Generated at Wed Nov 5 14:33:25 2025 by rpki-client