$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e0c52a66-cb31-399c-a2d5-cb4b2efcf1fa.roa File: e0c52a66-cb31-399c-a2d5-cb4b2efcf1fa.roa (raw, json) Hash identifier: rRuq7fDEAEzqU5P6FgxCPOeFSXuDO9s3KiddsgoSU5M= Subject key identifier: 2A:CF:27:70:68:E2:33:BE:55:9A:53:7E:2B:96:27:55:A5:D6:AE:67 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B609CA155542326D895307780 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e0c52a66-cb31-399c-a2d5-cb4b2efcf1fa.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 6167 IP address blocks: 174.216.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:a1:55:54:23:26:d8:95:30:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=b8980964-281a-440a-841c-939105b03572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ca:cb:52:38:0d:46:dc:c3:36:a6:c5:ce:f5: c6:8c:fe:81:df:49:2f:72:4a:f5:23:38:29:0b:98: eb:1e:b0:27:db:42:65:60:03:f2:5b:de:0b:2a:ad: 0e:4e:7d:ee:34:5b:cc:2a:8e:62:a1:26:5d:e1:da: 24:a0:ed:aa:2c:d2:17:55:3a:2f:8b:ec:1d:67:f5: 89:be:fd:a5:7f:28:1b:01:cc:98:ff:77:80:28:83: 4f:68:de:b7:08:32:2a:56:02:47:ad:ba:69:bf:25: 82:a1:5c:1f:9c:6a:c4:8d:5d:17:21:ab:cc:95:69: c7:4c:5d:50:47:31:a9:00:5d:a9:81:6b:a6:51:e8: 42:8c:65:e7:4d:89:f1:0f:47:92:11:b8:49:c6:8b: 91:52:0f:7d:08:96:4c:95:0d:7d:04:69:58:77:14: 78:0a:cd:b0:fb:58:93:61:ce:ef:7c:85:0f:de:06: e3:c8:d4:22:f6:f5:eb:2c:39:7a:b5:79:74:1e:1b: 62:06:42:ae:2f:88:2b:34:d8:af:a3:e1:5e:5f:13: cb:fd:8c:11:bd:eb:0b:70:19:15:db:e1:cd:31:b7: e5:02:b0:f5:23:fa:ce:3a:c2:c3:41:5a:32:ca:a8: af:7d:18:1b:91:4e:d0:36:4b:02:9e:e7:b7:42:66: b9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:CF:27:70:68:E2:33:BE:55:9A:53:7E:2B:96:27:55:A5:D6:AE:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e0c52a66-cb31-399c-a2d5-cb4b2efcf1fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.216.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:d2:e8:d5:05:07:d6:ef:15:8d:68:65:50:52:bb:fd:45:2a: 00:d1:2a:c6:49:a9:60:99:6a:d8:aa:49:1d:39:b6:2d:6d:60: 3f:db:b1:80:48:bb:4a:0b:cc:6f:7b:63:d5:92:4a:de:bf:1e: ca:27:02:3e:90:3f:4a:0d:a8:8c:03:7a:54:9a:b6:d9:81:27: e1:02:36:9d:8c:f3:6c:82:c8:24:9c:26:38:eb:4d:a5:a6:be: c2:ce:a5:f1:87:27:d7:df:ad:0f:4f:bc:e8:ed:f8:4b:7e:b5: 3b:28:93:98:c0:f5:63:ef:6a:21:73:01:0a:f0:9a:fe:ec:41: 73:41:0f:36:dc:85:f9:84:50:d2:51:fb:19:2c:0d:5e:aa:85: 98:e0:ae:eb:2e:81:94:b1:cc:5b:5c:ad:ed:45:b7:c7:9f:c3: 18:f2:4f:b0:6c:e7:be:26:4a:e2:75:ee:69:7a:6a:dc:0b:9a: bc:88:2b:14:d9:84:79:00:35:79:e7:9a:6c:c1:45:84:ae:3f: ca:f4:00:a0:78:3e:3f:38:17:2e:4e:7e:3d:08:be:23:89:9c: b3:c4:49:7b:8a:d0:83:dc:28:e5:69:3f:6b:7f:df:3f:b2:19: 37:09:a2:c6:0f:b1:9d:58:da:4d:06:71:1d:0d:33:0e:5f:20: e6:87:23:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnKFVVCMm2JUwd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk Yjg5ODA5NjQtMjgxYS00NDBhLTg0MWMtOTM5MTA1YjAzNTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMrLUjgNRtzDNqbFzvXGjP6B30kvckr1Izgp C5jrHrAn20JlYAPyW94LKq0OTn3uNFvMKo5ioSZd4dokoO2qLNIXVTovi+wdZ/WJ vv2lfygbAcyY/3eAKINPaN63CDIqVgJHrbppvyWCoVwfnGrEjV0XIavMlWnHTF1Q RzGpAF2pgWumUehCjGXnTYnxD0eSEbhJxouRUg99CJZMlQ19BGlYdxR4Cs2w+1iT Yc7vfIUP3gbjyNQi9vXrLDl6tXl0HhtiBkKuL4grNNivo+FeXxPL/YwRvesLcBkV 2+HNMbflArD1I/rOOsLDQVoyyqivfRgbkU7QNksCnue3Qma5IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrPJ3Bo4jO+VZpTfiuWJ1Wl1q5nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTBjNTJhNjYtY2IzMS0z OTljLWEyZDUtY2I0YjJlZmNmMWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELS6NUFB9bvFY1oZVBSu/1FKgDRKsZJqWCZatiqSR05ti1tYD/bsYBI u0oLzG97Y9WSSt6/HsonAj6QP0oNqIwDelSattmBJ+ECNp2M82yCyCScJjjrTaWm vsLOpfGHJ9ffrQ9PvOjt+Et+tTsok5jA9WPvaiFzAQrwmv7sQXNBDzbchfmEUNJR +xksDV6qhZjgrusugZSxzFtcre1Ft8efwxjyT7Bs574mSuJ17ml6atwLmryIKxTZ hHkANXnnmmzBRYSuP8r0AKB4Pj84Fy5Ofj0IviOJnLPESXuK0IPcKOVpP2t/3z+y GTcJosYPsZ1Y2k0GcR0NMw5fIOaHI0g= -----END CERTIFICATE-----Generated at Wed Nov 5 13:27:49 2025 by rpki-client