$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d7fe30dc-5f89-3965-a504-32c75043f39b.roa File: d7fe30dc-5f89-3965-a504-32c75043f39b.roa (raw, json) Hash identifier: quFeXyuUlfY7D/Nv22wxxv13ZAHzDKUu4rdvt/RY72s= Subject key identifier: 10:B7:BB:51:5B:E1:B7:21:C3:DF:C2:5A:0E:F6:F1:62:DE:C2:AE:F7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BABFD398CE1F22A34AFCF2E00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d7fe30dc-5f89-3965-a504-32c75043f39b.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 6167 IP address blocks: 174.221.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:39:8c:e1:f2:2a:34:af:cf:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=948e7b48-10b9-4c7d-a2bc-ae60cfb07a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6b:06:57:32:3a:d3:95:66:ac:ac:3a:38:32: 74:da:1e:8c:a7:62:cf:04:ca:8b:85:52:3a:e2:46: d0:7c:eb:b2:89:cc:1a:73:55:60:ed:f3:46:23:45: 2b:14:c9:0b:3a:87:46:3c:bd:7c:1f:3b:3f:9f:09: 15:49:f2:78:ba:31:83:db:f5:8b:ab:a1:07:dd:04: e3:4a:80:ff:3e:75:80:9a:31:e4:d5:71:05:ec:b0: d8:bd:7f:c9:fb:85:b9:15:39:24:ab:71:30:6a:76: ba:2d:4a:a0:a3:83:f5:5f:44:9e:b0:d2:67:32:a4: c5:1a:94:e4:e1:86:28:0e:a8:91:f5:a4:e4:2e:13: 8b:63:0c:b8:96:ef:72:0b:8f:01:ff:31:70:3b:12: 73:98:0a:c8:7f:88:2e:d4:4a:6d:b3:d3:ea:4a:ca: 3f:94:9c:04:a5:72:db:31:52:27:ad:3f:7e:7d:07: 36:88:94:87:45:9b:41:c3:63:32:06:c5:3c:f0:cd: f1:41:9a:0b:f0:91:ae:2f:52:96:dd:42:ae:56:0c: 2e:f1:3e:19:9a:d8:e7:aa:89:ec:0f:30:9b:ca:67: cc:6e:b7:c5:0d:cc:eb:8b:c0:f8:2d:7f:7a:d4:4b: 07:09:29:69:85:a6:cc:47:c4:46:89:84:bb:62:4c: f4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B7:BB:51:5B:E1:B7:21:C3:DF:C2:5A:0E:F6:F1:62:DE:C2:AE:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d7fe30dc-5f89-3965-a504-32c75043f39b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.221.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:89:9a:01:c3:90:77:f0:80:af:24:ae:ab:02:7e:e3:de:39: a8:04:7f:4f:27:96:91:91:70:d6:ed:37:63:b4:87:19:0a:55: 01:a9:cd:46:19:c8:b7:89:7d:f4:8d:c1:ed:f8:a9:cf:77:f2: 7d:04:5d:c8:0d:a9:74:0b:a8:38:2b:d7:19:3d:e4:2f:31:86: 4f:8c:00:8c:ba:b7:01:b4:de:cc:97:39:90:69:ec:88:55:4f: 72:7c:a8:54:46:6c:f7:a1:9c:21:b2:32:67:99:c3:5a:33:11: b9:b1:de:61:27:2b:b3:a0:c5:be:13:45:f2:2c:a5:de:02:08: 6a:20:10:e8:99:bc:9c:4e:69:0e:8b:de:f8:e4:99:d5:c1:ba: 73:08:05:a2:17:83:e6:d3:ee:87:e2:36:9d:79:20:82:f8:59: fa:14:27:20:1c:8a:5b:5f:ad:60:f6:28:24:d3:39:f2:3c:2f: 01:4b:1b:99:04:77:9d:20:11:6f:fd:25:5f:70:19:82:43:54: bc:bc:3b:a0:d9:5c:6b:d0:af:5b:60:ca:38:e9:09:bd:55:86: 9d:17:42:9b:e3:4b:0e:07:6f:9f:2d:7c:b4:fd:32:c9:c0:d8: 3d:0a:5d:cb:ba:19:27:ec:53:11:e9:01:57:4d:8e:16:93:9a: be:1c:75:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/TmM4fIqNK/PLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk OTQ4ZTdiNDgtMTBiOS00YzdkLWEyYmMtYWU2MGNmYjA3YTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGsGVzI605VmrKw6ODJ02h6Mp2LPBMqLhVI6 4kbQfOuyicwac1Vg7fNGI0UrFMkLOodGPL18Hzs/nwkVSfJ4ujGD2/WLq6EH3QTj SoD/PnWAmjHk1XEF7LDYvX/J+4W5FTkkq3Ewana6LUqgo4P1X0SesNJnMqTFGpTk 4YYoDqiR9aTkLhOLYwy4lu9yC48B/zFwOxJzmArIf4gu1Epts9PqSso/lJwEpXLb MVInrT9+fQc2iJSHRZtBw2MyBsU88M3xQZoL8JGuL1KW3UKuVgwu8T4Zmtjnqons DzCbymfMbrfFDczri8D4LX961EsHCSlphabMR8RGiYS7Ykz0twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBC3u1Fb4bchw9/CWg728WLewq73MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDdmZTMwZGMtNWY4OS0z OTY1LWE1MDQtMzJjNzUwNDNmMzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErt2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmJmgHDkHfwgK8krqsCfuPeOagEf08nlpGRcNbtN2O0hxkKVQGpzUYZ yLeJffSNwe34qc938n0EXcgNqXQLqDgr1xk95C8xhk+MAIy6twG03syXOZBp7IhV T3J8qFRGbPehnCGyMmeZw1ozEbmx3mEnK7Ogxb4TRfIspd4CCGogEOiZvJxOaQ6L 3vjkmdXBunMIBaIXg+bT7ofiNp15IIL4WfoUJyAciltfrWD2KCTTOfI8LwFLG5kE d50gEW/9JV9wGYJDVLy8O6DZXGvQr1tgyjjpCb1Vhp0XQpvjSw4Hb58tfLT9MsnA 2D0KXcu6GSfsUxHpAVdNjhaTmr4cdQ8= -----END CERTIFICATE-----Generated at Wed Nov 5 12:22:48 2025 by rpki-client