$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5a41d72-de62-31af-a776-d58ec1ef355b.roa File: d5a41d72-de62-31af-a776-d58ec1ef355b.roa (raw, json) Hash identifier: ZOdGgUS7DvKaTwyMywHUkxg/bGLaXYNo36TqchByu1g= Subject key identifier: 99:E4:52:4E:86:8F:CF:5E:EE:F3:7F:23:FC:5C:4A:C4:E4:6C:F1:A3 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B98723E4A60BD702D6D000700 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5a41d72-de62-31af-a776-d58ec1ef355b.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 6167 IP address blocks: 174.209.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:3e:4a:60:bd:70:2d:6d:00:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=470dcab8-4682-41cb-a76b-45a558d38afd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:73:c0:43:44:61:cf:98:9a:b7:fe:db:f1:02: 72:a1:0f:69:58:42:5f:a1:b9:c9:b7:43:27:5d:15: 13:9f:ba:e8:5f:da:c9:70:5e:3f:e0:e6:0b:7b:6f: 6f:82:75:42:9b:27:3f:8b:61:6f:7e:dd:b6:0e:d7: 53:79:f2:0d:f6:d2:d2:dc:ea:a5:b5:97:7d:45:4c: f4:a7:ac:05:69:88:80:a9:89:d8:f5:09:7f:71:bd: 43:41:7b:8c:70:16:b9:41:9a:b7:28:67:36:7f:41: 7b:13:6b:52:85:dc:4f:47:42:fd:52:2e:5e:70:c9: 82:47:96:97:a2:68:c0:f4:7c:4b:fb:be:19:bf:eb: 0c:05:9e:84:3f:52:4e:69:4b:af:11:49:14:13:00: 0f:dc:9e:5b:2e:f0:92:e4:c0:15:1f:fd:36:39:3f: f7:40:79:b6:7f:87:02:c0:ff:9a:0e:f2:43:34:c1: 1b:16:94:76:0a:35:cb:82:84:df:23:d3:2e:28:ae: c0:5d:31:a8:e9:7b:59:52:1f:2c:5a:54:d6:bc:97: 54:fd:87:f7:9c:ab:48:c4:ba:a3:71:fd:02:5f:7b: fc:a3:53:69:e1:b3:54:d3:ae:5a:91:75:c3:0b:8d: 99:c1:06:8e:7b:28:bd:f9:65:d4:2b:9e:34:af:10: 8a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E4:52:4E:86:8F:CF:5E:EE:F3:7F:23:FC:5C:4A:C4:E4:6C:F1:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5a41d72-de62-31af-a776-d58ec1ef355b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.209.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:4a:89:d1:65:28:44:9e:a0:84:11:9a:d2:89:b3:a2:0a:61: 14:be:af:05:3d:b7:66:05:c9:42:e0:c5:f7:2e:30:13:bb:83: 16:75:42:26:b2:1e:1d:76:d7:1e:14:91:dc:b4:23:21:e4:ff: 14:c5:d4:7f:3c:ca:71:ea:80:1d:7a:64:aa:60:1b:30:99:ba: f6:3f:d1:28:ea:24:fe:5f:f0:93:0b:bf:ff:70:8c:ae:a8:43: 0b:c8:9f:73:cc:c5:2a:0d:6f:6f:83:ce:0f:8c:7a:db:59:ce: de:44:ab:c1:e7:f8:ba:da:1d:00:7c:e8:76:92:c6:78:4e:a8: 3d:ab:b4:43:3c:55:10:e1:d1:a9:08:f4:47:05:de:fd:b6:f1: e7:3e:79:07:48:28:14:ff:c5:55:50:c4:99:26:94:72:86:0a: 25:90:f7:58:0f:e8:bf:fd:51:70:ba:61:f0:0a:13:8e:e0:46: be:94:1f:7d:97:34:00:10:ae:bd:e3:6f:2b:c7:27:76:0e:c3: d7:8d:e4:19:ae:5e:83:62:46:fd:07:a1:0d:9b:45:3a:96:03: 41:e9:ef:cd:dc:06:d2:b5:47:98:07:76:18:06:02:4d:36:8f: 53:c8:51:fb:92:4a:8c:8b:26:0f:bd:5a:79:e9:76:71:37:ff: a4:46:b0:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYcj5KYL1wLW0ABwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk NDcwZGNhYjgtNDY4Mi00MWNiLWE3NmItNDVhNTU4ZDM4YWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnPAQ0Rhz5iat/7b8QJyoQ9pWEJfobnJt0Mn XRUTn7roX9rJcF4/4OYLe29vgnVCmyc/i2Fvft22DtdTefIN9tLS3OqltZd9RUz0 p6wFaYiAqYnY9Ql/cb1DQXuMcBa5QZq3KGc2f0F7E2tShdxPR0L9Ui5ecMmCR5aX omjA9HxL+74Zv+sMBZ6EP1JOaUuvEUkUEwAP3J5bLvCS5MAVH/02OT/3QHm2f4cC wP+aDvJDNMEbFpR2CjXLgoTfI9MuKK7AXTGo6XtZUh8sWlTWvJdU/Yf3nKtIxLqj cf0CX3v8o1Np4bNU065akXXDC42ZwQaOeyi9+WXUK540rxCKQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnkUk6Gj89e7vN/I/xcSsTkbPGjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDVhNDFkNzItZGU2Mi0z MWFmLWE3NzYtZDU4ZWMxZWYzNTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9KidFlKESeoIQRmtKJs6IKYRS+rwU9t2YFyULgxfcuMBO7gxZ1Qiay Hh121x4Ukdy0IyHk/xTF1H88ynHqgB16ZKpgGzCZuvY/0SjqJP5f8JMLv/9wjK6o QwvIn3PMxSoNb2+Dzg+MettZzt5Eq8Hn+LraHQB86HaSxnhOqD2rtEM8VRDh0akI 9EcF3v228ec+eQdIKBT/xVVQxJkmlHKGCiWQ91gP6L/9UXC6YfAKE47gRr6UH32X NAAQrr3jbyvHJ3YOw9eN5BmuXoNiRv0HoQ2bRTqWA0Hp783cBtK1R5gHdhgGAk02 j1PIUfuSSoyLJg+9WnnpdnE3/6RGsBU= -----END CERTIFICATE-----Generated at Wed Nov 5 11:02:06 2025 by rpki-client