$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a720f3f7-daa9-3495-8ee1-cbf733dab870.roa File: a720f3f7-daa9-3495-8ee1-cbf733dab870.roa (raw, json) Hash identifier: QYCnb3LBGlk+NbxgkMgHYz6bFx2Q+/4A9pyZVkQ/LPg= Subject key identifier: C8:C8:CA:B8:6E:40:D5:06:FA:1B:7E:38:A7:03:85:52:13:9C:6C:16 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B0A11743BD531250FC4C2FE80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a720f3f7-daa9-3495-8ee1-cbf733dab870.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 6167 IP address blocks: 174.200.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:74:3b:d5:31:25:0f:c4:c2:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=a0c7a292-e91f-41aa-ba61-e521b35e7141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:60:60:4c:9e:da:20:dc:22:ec:61:b7:03:de: 6c:20:fa:7e:06:8b:d6:1e:13:49:1f:9d:45:74:d8: 52:c8:77:c4:24:cd:c2:ba:94:11:ee:de:1a:e6:0f: fb:bc:78:3e:95:c7:50:b3:22:b7:f8:3d:5a:e3:b8: bc:c4:c4:16:e3:26:1b:77:c2:2b:39:65:90:1c:41: f5:c4:f9:e1:e3:b6:2e:2d:ba:9a:d8:87:9b:5e:89: 17:5e:34:80:ed:fe:5c:b6:7c:0a:e3:b4:ab:0e:90: 10:2e:3c:7c:f8:0f:51:9c:a8:49:62:ec:bc:a8:28: a9:6f:1f:93:97:8b:0b:27:60:68:b4:78:15:c1:7d: 90:78:42:76:4e:23:f8:4e:a0:bc:20:50:93:ed:56: f3:71:51:cd:0a:a6:eb:24:94:67:ff:6a:2c:08:f9: 03:4d:c2:d9:db:59:71:e8:22:1d:08:6a:43:38:26: 84:d8:08:18:02:7a:02:73:01:5e:27:80:a4:f6:7b: 16:05:b4:b0:a3:39:2f:1e:11:c9:4e:39:b6:68:12: 2c:f8:37:14:a0:a6:4f:0a:fe:47:1c:65:96:00:c9: a1:c2:04:ad:5c:c9:74:a8:6d:6f:76:a7:8c:08:d6: eb:bb:42:22:97:e3:69:80:87:1d:47:e3:97:06:9a: bd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C8:CA:B8:6E:40:D5:06:FA:1B:7E:38:A7:03:85:52:13:9C:6C:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a720f3f7-daa9-3495-8ee1-cbf733dab870.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.200.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:c2:62:89:4d:bc:be:c6:e0:19:b3:da:a9:1f:6b:ac:4d:6b: 6b:6f:c2:8d:50:36:3e:9e:a3:de:b4:f4:db:a1:51:b4:cc:bf: 24:dd:48:f7:04:02:58:fa:af:d1:a0:c1:cc:b3:bf:4f:98:b7: fe:93:46:b7:cc:b6:40:9a:25:61:1a:9a:b4:ae:55:7c:aa:73: 06:04:0a:96:42:d2:0a:1f:fb:78:a4:71:b1:0b:a2:02:8b:5c: 27:68:da:6e:70:ef:16:bd:cf:44:36:ed:43:c6:fb:57:15:47: 48:0b:e6:f4:08:dd:98:67:89:3c:2e:af:c2:74:01:71:7c:64: c2:c4:18:71:cd:d9:7a:97:51:0f:f0:a2:fc:14:4b:26:e1:0a: 07:ca:ee:1e:4b:38:3a:77:66:67:15:e9:6c:14:7a:73:64:f5: 89:51:6f:dd:e5:96:28:b0:c0:26:2b:9a:ac:c7:62:8c:28:57: 5d:a2:88:19:31:20:21:fb:34:de:86:16:bd:eb:91:d4:9e:cf: a4:f2:50:e4:0e:42:c0:81:8d:80:45:a9:9c:77:69:3b:ca:34: 5e:c4:c4:d6:7f:8a:28:d1:54:98:4a:c5:32:c9:5c:6b:e7:99: 93:89:71:43:75:e4:51:99:4b:dd:26:f2:f8:94:74:1a:66:96: e0:e3:99:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEXQ71TElD8TC/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk YTBjN2EyOTItZTkxZi00MWFhLWJhNjEtZTUyMWIzNWU3MTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGBgTJ7aINwi7GG3A95sIPp+BovWHhNJH51F dNhSyHfEJM3CupQR7t4a5g/7vHg+lcdQsyK3+D1a47i8xMQW4yYbd8IrOWWQHEH1 xPnh47YuLbqa2IebXokXXjSA7f5ctnwK47SrDpAQLjx8+A9RnKhJYuy8qCipbx+T l4sLJ2BotHgVwX2QeEJ2TiP4TqC8IFCT7VbzcVHNCqbrJJRn/2osCPkDTcLZ21lx 6CIdCGpDOCaE2AgYAnoCcwFeJ4Ck9nsWBbSwozkvHhHJTjm2aBIs+DcUoKZPCv5H HGWWAMmhwgStXMl0qG1vdqeMCNbru0Iil+NpgIcdR+OXBpq9GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjIyrhuQNUG+ht+OKcDhVITnGwWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTcyMGYzZjctZGFhOS0z NDk1LThlZTEtY2JmNzMzZGFiODcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrsj8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXCYolNvL7G4Bmz2qkfa6xNa2tvwo1QNj6eo9609NuhUbTMvyTdSPcE Alj6r9Ggwcyzv0+Yt/6TRrfMtkCaJWEamrSuVXyqcwYECpZC0gof+3ikcbELogKL XCdo2m5w7xa9z0Q27UPG+1cVR0gL5vQI3ZhniTwur8J0AXF8ZMLEGHHN2XqXUQ/w ovwUSybhCgfK7h5LODp3ZmcV6WwUenNk9YlRb93lliiwwCYrmqzHYowoV12iiBkx ICH7NN6GFr3rkdSez6TyUOQOQsCBjYBFqZx3aTvKNF7ExNZ/iijRVJhKxTLJXGvn mZOJcUN15FGZS90m8viUdBpmluDjmXY= -----END CERTIFICATE-----Generated at Wed Nov 5 11:01:55 2025 by rpki-client