$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c6c2550a-1f23-3952-9146-9e7d9e60d526.roa File: c6c2550a-1f23-3952-9146-9e7d9e60d526.roa (raw, json) Hash identifier: UoNyMmaOyyrlsXNXSopHBfMMBZTl+ulpbeJdi4yBjq0= Subject key identifier: 48:1D:48:11:04:CA:56:30:0B:0B:24:67:D5:AB:3D:38:31:90:C8:21 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B8EACFB6FFD5FEEA489E7C280 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c6c2550a-1f23-3952-9146-9e7d9e60d526.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 22394 IP address blocks: 174.41.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:fb:6f:fd:5f:ee:a4:89:e7:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=ae432ecc-7137-4574-aa0e-3099940dda3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5c:91:a3:dd:55:0c:ba:60:55:67:70:15:8b: 75:94:eb:4a:97:12:83:b1:3b:5e:9d:a7:a6:2a:08: ea:22:e9:85:c8:02:cd:38:e9:43:76:db:06:b9:f7: 96:1d:c8:25:e7:e7:20:79:b2:69:1f:21:97:60:05: b7:7e:15:da:b4:31:56:dc:eb:e1:bc:97:ad:34:d8: 0e:86:58:f7:87:6c:23:35:9b:40:1a:08:cc:5a:9b: 5e:94:86:24:91:50:67:4e:6d:2f:0c:79:9e:80:32: fb:b3:9d:fd:71:79:4f:b2:1c:d8:0c:f2:19:a1:7e: df:6f:7b:d8:73:97:b7:28:69:ab:b1:8b:11:5a:bb: af:cb:8a:6c:f0:d2:5e:7e:c2:d1:81:2b:0d:1d:e7: 20:28:9b:e0:c5:40:b6:4b:47:19:24:b0:24:ab:a9: 68:08:84:fa:21:ca:f7:a7:80:a3:02:c3:fb:78:3f: 55:7a:0e:14:cf:75:02:c7:08:35:84:6a:96:33:59: 9c:b3:f9:89:d8:d5:e7:26:ab:78:12:2a:0c:43:ed: 2d:eb:dc:ee:7a:35:c1:f0:55:df:ba:24:be:1b:11: a3:ae:2b:93:9c:10:2f:84:31:f7:91:1b:26:85:b3: 39:f9:7c:0b:a7:a1:7e:13:1e:dd:bf:f9:ec:9a:66: 6c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:1D:48:11:04:CA:56:30:0B:0B:24:67:D5:AB:3D:38:31:90:C8:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c6c2550a-1f23-3952-9146-9e7d9e60d526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.41.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:67:5d:10:06:96:79:84:cc:e0:98:92:0d:19:cf:0b:78:bf: c9:0e:e1:77:8b:03:d1:87:a9:29:c1:ef:18:a0:23:51:50:79: 3d:c9:fe:ac:fe:08:96:c4:c1:e7:58:e9:65:1c:09:c6:26:66: 05:e4:3b:30:1c:c4:a4:fe:d9:59:25:1e:9b:d6:d0:32:83:f4: de:d4:71:be:fe:d8:67:b7:22:93:4c:6b:ff:bd:72:e7:db:6e: b5:62:ec:eb:83:2a:57:ee:9f:82:da:0e:82:a1:53:f5:c1:d6: 31:45:9e:77:44:cc:ab:4a:00:64:b2:75:b9:c0:6b:03:76:97: 2d:31:71:d7:ef:50:78:dd:29:67:b1:8c:ca:3b:5b:63:d3:8c: 22:4d:0b:95:a4:69:bd:05:0c:dd:3b:1e:a5:cd:c0:21:68:db: d7:4d:c9:b9:a2:56:46:1d:eb:0f:37:61:b7:54:d0:00:0b:0c: 71:0e:33:6d:ba:0a:2e:98:a6:5d:63:5e:2e:eb:7c:b1:ef:f8: 16:d9:3c:a9:7d:06:84:da:2d:58:7a:5d:4f:73:20:e1:b8:fe: 4a:ba:b6:dd:18:22:de:76:c2:8d:9e:fd:d4:dc:48:ad:e9:2a: 5d:43:98:07:2d:be:06:09:ab:8f:38:22:cc:29:3a:92:34:1f: da:db:0d:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrPtv/V/upInnwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk YWU0MzJlY2MtNzEzNy00NTc0LWFhMGUtMzA5OTk0MGRkYTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01yRo91VDLpgVWdwFYt1lOtKlxKDsTtenaem KgjqIumFyALNOOlDdtsGufeWHcgl5+cgebJpHyGXYAW3fhXatDFW3OvhvJetNNgO hlj3h2wjNZtAGgjMWptelIYkkVBnTm0vDHmegDL7s539cXlPshzYDPIZoX7fb3vY c5e3KGmrsYsRWruvy4ps8NJefsLRgSsNHecgKJvgxUC2S0cZJLAkq6loCIT6Icr3 p4CjAsP7eD9Veg4Uz3UCxwg1hGqWM1mcs/mJ2NXnJqt4EioMQ+0t69zuejXB8FXf uiS+GxGjriuTnBAvhDH3kRsmhbM5+XwLp6F+Ex7dv/nsmmZsjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgdSBEEylYwCwskZ9WrPTgxkMghMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzZjMjU1MGEtMWYyMy0z OTUyLTkxNDYtOWU3ZDllNjBkNTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrimOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhnXRAGlnmEzOCYkg0Zzwt4v8kO4XeLA9GHqSnB7xigI1FQeT3J/qz+ CJbEwedY6WUcCcYmZgXkOzAcxKT+2VklHpvW0DKD9N7Ucb7+2Ge3IpNMa/+9cufb brVi7OuDKlfun4LaDoKhU/XB1jFFnndEzKtKAGSydbnAawN2ly0xcdfvUHjdKWex jMo7W2PTjCJNC5Wkab0FDN07HqXNwCFo29dNybmiVkYd6w83YbdU0AALDHEOM226 Ci6Ypl1jXi7rfLHv+BbZPKl9BoTaLVh6XU9zIOG4/kq6tt0YIt52wo2e/dTcSK3p Kl1DmActvgYJq484IswpOpI0H9rbDWM= -----END CERTIFICATE-----Generated at Wed Nov 5 09:02:59 2025 by rpki-client