$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e9a4393e-3212-3a84-bbed-bae0087d2925.roa File: e9a4393e-3212-3a84-bbed-bae0087d2925.roa (raw, json) Hash identifier: d1ZlER/fV8nJ8ujtHkYhZOIkZz/PrDW+9Xen9wOFU5A= Subject key identifier: 8D:CC:58:DC:C0:0F:83:2F:19:B3:5B:4D:9B:D7:21:6F:5A:68:32:0F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B7B220B520C0EDD5E10A99D80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e9a4393e-3212-3a84-bbed-bae0087d2925.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 6167 IP address blocks: 174.255.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:22:0b:52:0c:0e:dd:5e:10:a9:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=896fe38e-c864-4421-a0f8-97b2741f9edd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ff:be:5b:23:13:e0:d1:84:f7:04:10:e6:21: bf:58:a8:bc:8d:f7:81:07:18:0e:40:13:57:99:a2: 32:49:15:03:86:2d:2d:72:45:5d:0e:78:43:e5:77: 6f:5e:fd:a0:99:83:d1:cf:d6:ac:39:98:d7:a0:5f: a7:fc:05:5b:5a:ce:1d:56:cb:aa:4e:34:d9:82:38: 2a:5f:43:1a:80:6b:c2:bb:da:fe:97:d9:f2:00:9f: 39:f0:17:92:9f:9d:1e:49:6d:12:07:79:6d:ad:60: bd:ab:b0:d3:73:dd:83:e1:6b:4d:95:34:89:77:85: f5:7f:74:d4:6a:92:11:01:b4:f2:b7:91:4d:5b:43: 78:ea:4e:36:e0:85:1e:cf:78:1b:8a:21:09:d9:90: 43:a2:d1:96:c1:c1:de:7e:e9:25:5e:2a:a0:6d:99: aa:e4:32:aa:01:a1:89:71:8b:cd:e3:8d:62:a9:cd: 85:e8:44:68:46:53:62:27:4b:e6:8f:bf:d2:3c:dd: ff:b0:b4:c9:92:54:71:9b:b9:d1:37:0c:a4:f9:03: 3b:81:13:8b:d5:76:34:2f:01:f7:95:52:28:fd:9b: d6:85:d5:3b:00:76:46:9a:5d:fa:f8:f7:7c:32:3e: 41:94:38:9e:82:9a:80:23:8d:f7:9c:c2:9b:9c:7c: 38:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:CC:58:DC:C0:0F:83:2F:19:B3:5B:4D:9B:D7:21:6F:5A:68:32:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e9a4393e-3212-3a84-bbed-bae0087d2925.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.255.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:ed:3e:04:c5:58:7a:64:96:b2:d3:50:47:0f:4f:af:92:ed: 5a:9e:c1:34:ba:ee:6f:d3:a8:4e:75:9d:f5:12:b3:d3:6a:6a: ba:0d:b3:73:b0:3c:6f:7f:d4:fd:15:bd:fc:5a:d4:d8:0c:8b: 7c:64:48:bf:6c:7e:3a:7c:77:af:2b:d7:1d:a8:13:88:eb:7e: 63:60:07:a1:95:ab:12:89:7b:f1:08:89:d5:e8:c5:f9:b4:09: 99:70:c0:23:8e:89:a0:f8:cf:81:4f:db:59:90:88:b8:64:09: ae:ac:bb:56:88:c3:07:42:44:4c:43:2b:71:d4:c0:15:2f:f0: 50:11:3a:0f:e8:37:64:fb:ff:43:4f:b7:c1:1f:dc:5a:ff:d7: cf:b1:d3:48:7b:89:04:12:c0:f0:ca:7a:16:ab:4b:55:68:d7: be:13:a1:fe:ed:03:ee:47:77:f5:28:ec:22:27:ac:3c:36:be: b2:73:e7:35:c8:b6:94:1c:16:d1:b5:b7:26:74:18:f0:c2:0c: 7b:e9:c0:ea:22:5c:f4:2a:78:71:7e:8f:ae:97:83:4a:93:cd: c4:b4:3a:f9:eb:25:25:f0:3e:cf:f3:cc:49:88:3e:08:11:17: 31:4f:92:aa:39:66:8d:e1:26:24:3f:06:94:e0:d0:79:3d:fc: 4b:ec:56:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7IgtSDA7dXhCpnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk ODk2ZmUzOGUtYzg2NC00NDIxLWEwZjgtOTdiMjc0MWY5ZWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/++WyMT4NGE9wQQ5iG/WKi8jfeBBxgOQBNX maIySRUDhi0tckVdDnhD5XdvXv2gmYPRz9asOZjXoF+n/AVbWs4dVsuqTjTZgjgq X0MagGvCu9r+l9nyAJ858BeSn50eSW0SB3ltrWC9q7DTc92D4WtNlTSJd4X1f3TU apIRAbTyt5FNW0N46k424IUez3gbiiEJ2ZBDotGWwcHefuklXiqgbZmq5DKqAaGJ cYvN441iqc2F6ERoRlNiJ0vmj7/SPN3/sLTJklRxm7nRNwyk+QM7gROL1XY0LwH3 lVIo/ZvWhdU7AHZGml36+Pd8Mj5BlDiegpqAI433nMKbnHw4/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI3MWNzAD4MvGbNbTZvXIW9aaDIPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTlhNDM5M2UtMzIxMi0z YTg0LWJiZWQtYmFlMDA4N2QyOTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrv+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3tPgTFWHpklrLTUEcPT6+S7VqewTS67m/TqE51nfUSs9NqaroNs3Ow PG9/1P0Vvfxa1NgMi3xkSL9sfjp8d68r1x2oE4jrfmNgB6GVqxKJe/EIidXoxfm0 CZlwwCOOiaD4z4FP21mQiLhkCa6su1aIwwdCRExDK3HUwBUv8FAROg/oN2T7/0NP t8Ef3Fr/18+x00h7iQQSwPDKeharS1Vo174Tof7tA+5Hd/Uo7CInrDw2vrJz5zXI tpQcFtG1tyZ0GPDCDHvpwOoiXPQqeHF+j66Xg0qTzcS0OvnrJSXwPs/zzEmIPggR FzFPkqo5Zo3hJiQ/BpTg0Hk9/EvsVlE= -----END CERTIFICATE-----Generated at Wed Nov 5 12:22:55 2025 by rpki-client