$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/91d3f3d9-22c7-383b-a309-4660c6fe27de.roa File: 91d3f3d9-22c7-383b-a309-4660c6fe27de.roa (raw, json) Hash identifier: aF45ObJcKoqOPGenMy21KfNO90I7qAVYYLYlLcpD1BI= Subject key identifier: DB:95:E9:45:61:16:F6:26:42:E0:4B:07:18:A3:D8:C5:55:1B:4A:80 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB5C26C6D218FF3A6F6385D80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/91d3f3d9-22c7-383b-a309-4660c6fe27de.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 6167 IP address blocks: 174.200.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:6c:6d:21:8f:f3:a6:f6:38:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=4ab96864-307d-4dfa-83a2-d943331bfc79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d2:63:6f:cc:24:92:76:e3:76:47:1f:aa:31: 0c:07:54:04:2e:08:4d:47:c8:5c:32:d5:0e:98:b5: f2:d3:3a:0d:f2:76:28:98:c5:3b:03:e7:2e:79:9a: d3:12:cf:29:a8:2d:f6:e9:5d:f7:b5:6d:f7:43:c3: 86:14:06:8b:22:3c:e5:52:a7:a9:3d:b7:1f:26:d4: cc:9a:25:5d:64:d9:e8:a6:35:5a:de:c4:64:c2:a5: 20:3e:5e:7b:ff:bb:de:53:de:f2:19:ac:c5:06:bc: 43:59:1e:23:ca:9b:44:b4:74:99:78:d5:53:aa:e5: 0e:24:a4:89:05:38:7b:c3:80:2c:01:6b:a9:37:1b: 02:8e:71:b3:d9:12:55:63:7b:49:52:4b:0d:9a:bf: dd:42:ad:9c:94:5a:3a:9b:77:c5:c2:04:65:9a:ea: 13:81:ef:2d:ff:26:92:7b:c0:3b:e5:8d:b2:92:57: 23:34:c9:b9:9e:1e:2f:a2:28:60:fc:20:24:38:2f: 8a:e4:93:b2:da:33:fe:cb:8a:fc:de:2c:e2:97:3b: 20:76:32:37:4e:c0:21:67:90:3d:9f:a0:ea:06:9e: 60:d7:e4:36:5e:40:f4:be:e2:75:c6:79:1d:fa:ee: 13:c8:df:06:cc:61:0e:86:bc:d9:1d:ba:bb:23:79: f4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:95:E9:45:61:16:F6:26:42:E0:4B:07:18:A3:D8:C5:55:1B:4A:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/91d3f3d9-22c7-383b-a309-4660c6fe27de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.200.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:e4:a6:42:cf:16:e3:bc:20:31:34:7e:02:7f:49:bc:58:87: 5b:b8:78:37:39:cd:a0:ad:f7:70:38:81:aa:1b:ea:3b:c9:cf: 2d:d8:0f:95:50:68:1f:14:c1:21:06:e7:eb:33:7a:27:45:2d: 37:c3:18:27:67:05:f7:94:46:f4:f5:69:c9:04:a7:c7:56:38: 8a:18:0f:9c:77:9d:cb:cb:e1:ca:88:36:5d:16:47:cb:26:ba: 00:ad:9a:14:00:27:99:0a:b2:71:36:15:d8:15:e4:22:0b:68: f4:04:66:30:32:30:19:e9:bd:a2:94:a0:1b:aa:ca:31:fb:d7: 83:bc:65:00:d3:c5:b5:b9:a2:4c:87:9f:99:b4:19:be:7e:fd: 4c:85:96:24:dd:28:c3:e4:54:df:05:47:b1:7c:da:e4:64:8e: 71:8d:98:00:4b:87:1a:8a:10:e8:b7:e9:3a:c0:5a:0d:a8:f0: 08:b9:da:ed:0a:d0:00:ed:cc:38:f8:92:1b:0e:80:29:fd:76: 5c:0e:4e:cc:04:17:89:44:79:f5:f4:9b:8f:32:d2:40:37:f7: 13:ac:b0:c1:07:d5:6b:a6:9b:95:e9:95:ad:b4:b2:22:4d:66: 69:44:a6:b0:58:3d:35:b5:cc:49:2d:ec:82:36:7a:11:32:09: 2d:14:0c:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wmxtIY/zpvY4XYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk NGFiOTY4NjQtMzA3ZC00ZGZhLTgzYTItZDk0MzMzMWJmYzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydJjb8wkknbjdkcfqjEMB1QELghNR8hcMtUO mLXy0zoN8nYomMU7A+cueZrTEs8pqC326V33tW33Q8OGFAaLIjzlUqepPbcfJtTM miVdZNnopjVa3sRkwqUgPl57/7veU97yGazFBrxDWR4jyptEtHSZeNVTquUOJKSJ BTh7w4AsAWupNxsCjnGz2RJVY3tJUksNmr/dQq2clFo6m3fFwgRlmuoTge8t/yaS e8A75Y2yklcjNMm5nh4voihg/CAkOC+K5JOy2jP+y4r83izilzsgdjI3TsAhZ5A9 n6DqBp5g1+Q2XkD0vuJ1xnkd+u4TyN8GzGEOhrzZHbq7I3n0tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNuV6UVhFvYmQuBLBxij2MVVG0qAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTFkM2YzZDktMjJjNy0z ODNiLWEzMDktNDY2MGM2ZmUyN2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrsjYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvkpkLPFuO8IDE0fgJ/SbxYh1u4eDc5zaCt93A4gaob6jvJzy3YD5VQ aB8UwSEG5+szeidFLTfDGCdnBfeURvT1ackEp8dWOIoYD5x3ncvL4cqINl0WR8sm ugCtmhQAJ5kKsnE2FdgV5CILaPQEZjAyMBnpvaKUoBuqyjH714O8ZQDTxbW5okyH n5m0Gb5+/UyFliTdKMPkVN8FR7F82uRkjnGNmABLhxqKEOi36TrAWg2o8Ai52u0K 0ADtzDj4khsOgCn9dlwOTswEF4lEefX0m48y0kA39xOssMEH1Wumm5Xpla20siJN ZmlEprBYPTW1zEkt7II2ehEyCS0UDAk= -----END CERTIFICATE-----Generated at Wed Nov 5 13:41:51 2025 by rpki-client