$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d158e739-84e0-355b-88f2-344ad114981b.roa File: d158e739-84e0-355b-88f2-344ad114981b.roa (raw, json) Hash identifier: zDUL/9hdJLYS5ui6m5b2P7b63qRnKfFJ/rhC7oQcUP0= Subject key identifier: 73:18:2A:3D:5E:CD:FC:26:10:47:FC:10:36:79:D8:30:AB:E7:38:F2 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BB5C26B6970524A860C64A980 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d158e739-84e0-355b-88f2-344ad114981b.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 6167 IP address blocks: 174.226.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:6b:69:70:52:4a:86:0c:64:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=6563a7e9-d134-4de0-8383-a173cdf65b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c9:7d:59:73:80:68:1e:ce:7f:93:0a:08:4b: 71:29:8e:69:03:b4:94:e3:82:6e:a8:1b:1c:12:78: 87:b6:7e:91:f1:01:6d:59:5e:d4:03:f9:7e:6b:f0: 52:a4:80:a5:fa:63:ed:c8:34:30:3c:27:10:07:f2: 5a:e3:08:04:e5:17:6f:d3:4b:4e:0d:8f:07:08:93: db:dc:74:46:85:3a:17:56:de:f1:34:1a:f8:85:c3: 2d:da:be:a6:07:49:46:0e:13:74:12:8f:b4:dd:49: 4e:c5:f6:94:2d:be:a3:68:66:7f:29:db:29:53:71: 70:32:2c:49:e7:a1:a7:70:9f:73:10:f0:2c:98:88: 61:9e:31:5c:e9:36:a5:91:99:f1:00:8a:43:99:80: 51:38:69:b2:9c:54:88:92:d8:45:07:bd:69:94:ca: 18:bf:73:05:13:42:28:07:62:8f:5e:fc:bf:3e:b8: 9b:16:aa:cf:30:8e:15:18:fa:90:75:35:14:9f:64: f3:87:7a:4f:39:6d:7a:60:4c:f6:0a:bb:ce:85:85: d9:ca:f5:c4:06:44:08:74:53:e6:fa:12:c5:65:79: 94:80:81:c2:11:4d:0d:b2:e0:61:d3:b8:67:35:36: d6:4d:b6:d0:0d:a3:a3:ad:b4:52:55:0d:18:39:de: 88:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:18:2A:3D:5E:CD:FC:26:10:47:FC:10:36:79:D8:30:AB:E7:38:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d158e739-84e0-355b-88f2-344ad114981b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.226.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:b1:6d:40:e7:04:a0:83:4f:c3:03:41:d9:6b:81:64:d8:50: b7:7e:3b:2f:5b:81:91:f6:60:41:37:38:37:fa:8f:e7:99:49: ed:be:a5:79:60:f6:3d:30:61:3f:3c:e1:5c:6a:28:9f:7f:7a: 73:b4:12:6e:ce:72:2e:0a:ca:64:b5:ad:9d:c9:48:27:04:56: 83:f1:e7:07:85:21:bc:c2:ab:f0:57:ad:99:c4:72:fe:db:dd: 0f:4e:2a:76:ba:c2:83:ff:be:cd:18:73:e5:59:80:bd:c7:ba: 63:47:e3:de:0b:a0:a0:84:a5:16:22:42:3d:e2:b4:c5:22:76: 43:1f:a7:6a:d2:51:33:a9:00:66:aa:e2:08:6a:79:84:e6:1b: 6a:dc:ac:45:51:0b:62:fa:2e:69:54:9f:47:df:f5:44:41:85: 6f:47:53:95:5d:0f:dc:80:3f:86:31:65:51:24:cf:28:72:7d: 8a:95:23:bc:1d:16:bf:49:fd:a7:6e:03:a0:98:39:6a:de:fc: 66:43:2f:23:6b:1f:e1:8e:23:c8:52:79:c9:c6:16:81:49:3e: a8:fd:aa:59:e7:e7:fa:59:d3:de:3d:a3:e0:6d:52:c3:03:e5: 1b:c6:70:21:69:e6:03:81:c1:87:39:58:2d:a1:29:64:46:de: f1:ee:c2:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wmtpcFJKhgxkqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk NjU2M2E3ZTktZDEzNC00ZGUwLTgzODMtYTE3M2NkZjY1YjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8l9WXOAaB7Of5MKCEtxKY5pA7SU44JuqBsc EniHtn6R8QFtWV7UA/l+a/BSpICl+mPtyDQwPCcQB/Ja4wgE5Rdv00tODY8HCJPb 3HRGhToXVt7xNBr4hcMt2r6mB0lGDhN0Eo+03UlOxfaULb6jaGZ/KdspU3FwMixJ 56GncJ9zEPAsmIhhnjFc6TalkZnxAIpDmYBROGmynFSIkthFB71plMoYv3MFE0Io B2KPXvy/PribFqrPMI4VGPqQdTUUn2Tzh3pPOW16YEz2CrvOhYXZyvXEBkQIdFPm +hLFZXmUgIHCEU0NsuBh07hnNTbWTbbQDaOjrbRSVQ0YOd6ITQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMYKj1ezfwmEEf8EDZ52DCr5zjyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDE1OGU3MzktODRlMC0z NTViLTg4ZjItMzQ0YWQxMTQ5ODFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDruKYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqxbUDnBKCDT8MDQdlrgWTYULd+Oy9bgZH2YEE3ODf6j+eZSe2+pXlg 9j0wYT884VxqKJ9/enO0Em7Oci4KymS1rZ3JSCcEVoPx5weFIbzCq/BXrZnEcv7b 3Q9OKna6woP/vs0Yc+VZgL3HumNH494LoKCEpRYiQj3itMUidkMfp2rSUTOpAGaq 4ghqeYTmG2rcrEVRC2L6LmlUn0ff9URBhW9HU5VdD9yAP4YxZVEkzyhyfYqVI7wd Fr9J/aduA6CYOWre/GZDLyNrH+GOI8hSecnGFoFJPqj9qlnn5/pZ0949o+BtUsMD 5RvGcCFp5gOBwYc5WC2hKWRG3vHuwug= -----END CERTIFICATE-----Generated at Wed Nov 5 13:40:20 2025 by rpki-client