$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b591bd0c-715d-38be-9ba9-2b116fc592f0.roa File: b591bd0c-715d-38be-9ba9-2b116fc592f0.roa (raw, json) Hash identifier: atHasgxD06zFI1LF4m2u99INVLREW5jZ7SfRQkmZznk= Subject key identifier: F5:9E:5C:98:F2:DD:0F:75:54:87:3B:D8:1E:E1:0B:BF:7B:5B:D4:D2 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B609CAAD49AAFD77128896B70 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b591bd0c-715d-38be-9ba9-2b116fc592f0.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 6167 IP address blocks: 174.193.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:aa:d4:9a:af:d7:71:28:89:6b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=a36b29bd-5900-4593-b64a-c1de366754b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0d:a9:ad:14:40:2e:9f:c4:99:d1:b0:16:81: 90:c0:23:37:2b:20:95:39:b3:f5:6b:0c:53:49:8c: 96:9b:2d:a1:ef:bf:ce:2a:a3:a2:5d:a8:c7:2b:56: ac:f1:68:5f:b8:67:a8:cc:81:81:0e:2a:ec:fb:0a: 04:f3:d7:2b:e0:be:41:a9:89:2d:2b:1f:0d:5f:f5: 83:c0:0d:3c:c3:31:b1:49:b5:b2:9d:0e:cf:8a:12: f3:df:e7:25:47:fc:ff:59:22:35:ca:48:53:87:9c: 5a:e6:4e:e6:35:e0:ed:8b:b6:ef:0a:9b:a2:e7:df: eb:ea:de:99:62:41:6b:31:b4:71:0f:d5:50:5e:67: 08:95:d2:28:42:77:6f:0f:5d:26:98:86:d1:d9:6d: ce:69:50:e0:19:86:22:ce:f6:39:84:f6:d1:07:ac: 7f:27:11:a3:9a:bc:f6:8e:b7:cf:3a:e4:63:3a:24: 8f:86:09:61:14:d9:b2:24:59:4d:6a:67:a3:04:bd: 0a:a3:6d:ae:3a:cf:27:20:fb:8a:01:eb:07:86:a2: aa:df:2d:34:7d:48:1e:f3:b2:f6:fc:39:85:69:e6: ef:05:8d:8d:79:d3:e3:4a:8c:25:de:19:4d:68:4a: a4:e4:ac:7f:0f:c6:f0:4e:a0:f2:17:36:c6:8e:51: 24:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:9E:5C:98:F2:DD:0F:75:54:87:3B:D8:1E:E1:0B:BF:7B:5B:D4:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b591bd0c-715d-38be-9ba9-2b116fc592f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.193.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:80:14:b5:3a:fd:29:38:d1:4e:57:e3:09:65:e2:de:1c:15: 39:62:15:ab:87:b4:63:2c:8a:e0:57:17:62:4a:46:ef:25:86: d9:2d:db:dd:68:8b:6b:88:73:bd:92:93:55:4b:38:86:fc:4c: 6b:6e:1a:cc:a3:92:78:43:4a:5b:59:47:d7:df:81:ac:0f:45: 36:11:8f:61:84:31:ef:a3:b7:8f:d8:04:b6:69:e2:7f:3e:8d: e2:36:93:57:1a:ae:dc:ef:17:65:d5:97:04:55:f5:84:f0:79: 01:7c:42:a0:fc:43:87:22:22:c1:94:b6:42:c2:07:8e:c6:6f: b3:6d:d5:a5:b4:61:12:05:7a:df:8b:52:f2:a6:80:74:50:e0: 05:21:cd:e4:8b:e1:c2:e0:aa:53:19:d6:8c:17:06:0e:77:07: 1c:e3:3f:d6:7f:b6:09:bb:64:75:09:2d:91:2b:3f:9d:c1:4e: 53:27:23:0b:e4:6b:2c:17:08:c0:ba:0a:b5:25:9f:b5:65:77: 50:05:90:50:e6:f3:d3:5d:ef:04:19:ce:fa:66:69:54:42:0f: f4:b5:08:88:ed:00:49:95:f1:fa:b2:e8:ad:35:23:db:aa:72: a0:ff:fe:ca:76:00:a2:b9:e6:8f:e0:e6:7c:c9:b1:40:56:b3: e6:2a:e4:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnKrUmq/XcSiJa3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk YTM2YjI5YmQtNTkwMC00NTkzLWI2NGEtYzFkZTM2Njc1NGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA2prRRALp/EmdGwFoGQwCM3KyCVObP1awxT SYyWmy2h77/OKqOiXajHK1as8WhfuGeozIGBDirs+woE89cr4L5BqYktKx8NX/WD wA08wzGxSbWynQ7PihLz3+clR/z/WSI1ykhTh5xa5k7mNeDti7bvCpui59/r6t6Z YkFrMbRxD9VQXmcIldIoQndvD10mmIbR2W3OaVDgGYYizvY5hPbRB6x/JxGjmrz2 jrfPOuRjOiSPhglhFNmyJFlNamejBL0Ko22uOs8nIPuKAesHhqKq3y00fUge87L2 /DmFaebvBY2NedPjSowl3hlNaEqk5Kx/D8bwTqDyFzbGjlEkKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWeXJjy3Q91VIc72B7hC797W9TSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjU5MWJkMGMtNzE1ZC0z OGJlLTliYTktMmIxMTZmYzU5MmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrsGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmAFLU6/Sk40U5X4wll4t4cFTliFauHtGMsiuBXF2JKRu8lhtkt291o i2uIc72Sk1VLOIb8TGtuGsyjknhDSltZR9ffgawPRTYRj2GEMe+jt4/YBLZp4n8+ jeI2k1cartzvF2XVlwRV9YTweQF8QqD8Q4ciIsGUtkLCB47Gb7Nt1aW0YRIFet+L UvKmgHRQ4AUhzeSL4cLgqlMZ1owXBg53BxzjP9Z/tgm7ZHUJLZErP53BTlMnIwvk aywXCMC6CrUln7Vld1AFkFDm89Nd7wQZzvpmaVRCD/S1CIjtAEmV8fqy6K01I9uq cqD//sp2AKK55o/g5nzJsUBWs+Yq5MU= -----END CERTIFICATE-----Generated at Wed Nov 5 10:57:30 2025 by rpki-client