$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b4eca573-60d9-317a-b820-b050b7a0a09e.roa File: b4eca573-60d9-317a-b820-b050b7a0a09e.roa (raw, json) Hash identifier: GxYlF7pEu9gY/cPaZfadoUyNz+tyAO/yGbM47d1dePc= Subject key identifier: 9F:05:DA:42:37:2D:D2:95:84:6D:F8:4F:6A:97:99:54:F7:9C:45:56 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB5C26C331F906E12C6CC5BC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b4eca573-60d9-317a-b820-b050b7a0a09e.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 6167 IP address blocks: 174.200.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:6c:33:1f:90:6e:12:c6:cc:5b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=51918742-a20e-49cb-9ebd-2eb4a9f558cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6f:e0:d1:42:28:eb:b7:20:0b:10:47:3d:50: 5c:4c:b2:d8:a3:8c:59:5c:07:f4:67:14:66:1a:c5: cf:ad:b1:77:51:eb:08:59:55:70:6a:a1:23:d3:75: bf:a2:bb:39:99:85:58:12:0f:9d:7b:23:8d:32:4d: e5:b9:b3:ae:ce:8a:a0:6a:02:88:61:56:d9:18:31: a7:6e:d6:76:d7:1b:71:92:36:40:2d:53:66:9c:55: 83:22:68:a3:f5:21:5c:98:64:ed:92:71:41:de:12: 6b:e7:0f:a3:31:19:3b:cc:72:2b:84:ad:37:f8:1a: 50:a9:a4:46:f0:99:e2:cd:b4:92:a4:76:16:ca:f0: 0c:b4:99:34:fc:cc:01:e5:55:2e:9b:83:d0:e5:77: 5a:58:90:1d:5e:54:02:23:ad:54:84:f5:91:dd:00: 60:34:80:42:4d:5a:a8:6b:ef:61:74:d0:96:e5:fd: 6a:43:2d:43:70:bb:c9:a1:9e:7d:95:a6:e2:bc:c0: 69:7a:e4:69:38:e9:12:5d:1a:d8:76:2e:88:db:b8: 16:42:08:b4:34:b9:f3:cf:38:40:1c:ef:eb:ce:7b: 39:80:0f:55:92:7b:3c:e7:8a:7a:f3:1e:ff:fb:f7: b5:84:5e:9f:20:e3:2a:0d:25:89:37:cc:32:6f:d8: 2d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:05:DA:42:37:2D:D2:95:84:6D:F8:4F:6A:97:99:54:F7:9C:45:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b4eca573-60d9-317a-b820-b050b7a0a09e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.200.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:31:c8:1f:60:ce:30:f2:2f:5f:45:12:39:87:81:9d:17:6b: f6:a3:fd:2e:da:6f:b5:30:c1:bb:2c:d3:94:1e:30:db:9b:41: 4b:ca:4c:a4:bd:84:89:91:70:04:86:8b:32:36:3b:29:d0:f8: 57:06:d4:37:87:29:5b:cf:92:cb:8e:16:69:0f:51:ce:24:da: 51:9a:79:e9:74:e6:24:70:29:33:36:c3:3b:cd:5e:a2:03:f1: 00:62:ac:94:6f:34:5a:df:c4:a5:4a:80:24:99:8e:3f:be:4a: 37:34:f3:a9:1b:0c:33:ad:ea:a1:6b:d7:42:c0:7b:57:aa:7f: 07:7f:55:d4:82:32:5b:90:47:1f:9e:5f:d2:89:13:7f:1c:fc: e1:1e:73:82:48:d8:02:6f:57:f5:6d:d8:c5:f0:2a:a1:91:f2: cd:33:4b:b6:54:15:52:1e:1d:07:de:54:c3:e9:6f:39:a9:e7: 23:6c:07:34:08:30:2e:f2:73:ef:62:c0:94:44:b7:8f:dd:90: e8:7e:eb:e4:3c:7e:16:64:ff:98:f8:f3:62:2c:d7:38:c7:c1: be:8c:d8:67:0a:ea:42:f1:ee:bd:63:5f:55:2d:1a:51:6f:ca: e1:f6:36:3e:a6:8a:70:76:ec:80:54:f0:81:44:2c:90:57:41: da:53:06:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wmwzH5BuEsbMW8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk NTE5MTg3NDItYTIwZS00OWNiLTllYmQtMmViNGE5ZjU1OGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjG/g0UIo67cgCxBHPVBcTLLYo4xZXAf0ZxRm GsXPrbF3UesIWVVwaqEj03W/ors5mYVYEg+deyONMk3lubOuzoqgagKIYVbZGDGn btZ21xtxkjZALVNmnFWDImij9SFcmGTtknFB3hJr5w+jMRk7zHIrhK03+BpQqaRG 8JnizbSSpHYWyvAMtJk0/MwB5VUum4PQ5XdaWJAdXlQCI61UhPWR3QBgNIBCTVqo a+9hdNCW5f1qQy1DcLvJoZ59labivMBpeuRpOOkSXRrYdi6I27gWQgi0NLnzzzhA HO/rzns5gA9Vkns854p68x7/+/e1hF6fIOMqDSWJN8wyb9gtSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8F2kI3LdKVhG34T2qXmVT3nEVWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjRlY2E1NzMtNjBkOS0z MTdhLWI4MjAtYjA1MGI3YTBhMDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrsjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcxyB9gzjDyL19FEjmHgZ0Xa/aj/S7ab7Uwwbss05QeMNubQUvKTKS9 hImRcASGizI2OynQ+FcG1DeHKVvPksuOFmkPUc4k2lGaeel05iRwKTM2wzvNXqID 8QBirJRvNFrfxKVKgCSZjj++Sjc086kbDDOt6qFr10LAe1eqfwd/VdSCMluQRx+e X9KJE38c/OEec4JI2AJvV/Vt2MXwKqGR8s0zS7ZUFVIeHQfeVMPpbzmp5yNsBzQI MC7yc+9iwJREt4/dkOh+6+Q8fhZk/5j482Is1zjHwb6M2GcK6kLx7r1jX1UtGlFv yuH2Nj6minB27IBU8IFELJBXQdpTBuc= -----END CERTIFICATE-----Generated at Wed Nov 5 13:40:17 2025 by rpki-client