$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a2fe2ba-a63e-377d-8267-11a345a38439.roa File: 0a2fe2ba-a63e-377d-8267-11a345a38439.roa (raw, json) Hash identifier: iIBqvQZg6srSODRrHDH5vFB2BDYnb1fFuf3mzwbrNFE= Subject key identifier: 7B:05:3F:D4:A6:7F:45:4D:74:09:EC:A9:AA:1B:48:A5:90:EE:9E:B0 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B609C9D09651BBD6BFD3C5B00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a2fe2ba-a63e-377d-8267-11a345a38439.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 6167 IP address blocks: 174.213.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:9d:09:65:1b:bd:6b:fd:3c:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=3c08a43a-02bf-43b1-b2b1-45da8b62791c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1d:a1:16:40:14:75:28:08:39:63:92:ed:0f: 1a:49:0c:96:a1:24:4f:eb:3c:c9:de:45:8d:aa:c4: e9:aa:af:09:78:81:30:7e:12:af:41:86:a0:76:5e: 8a:04:26:0b:ee:fc:0a:7a:95:b7:31:38:09:2f:a9: 23:df:8d:e7:6a:41:2d:f7:a5:84:dd:db:37:83:d0: 87:97:ef:1d:18:3a:ae:19:4d:5f:c2:2b:4e:e7:81: 4c:86:6c:1b:ca:cd:39:4f:52:1e:2b:ba:33:60:f3: ab:82:28:70:da:4c:bd:a3:98:39:50:99:27:91:5c: 0f:3c:2a:2b:81:e1:b4:07:e3:d9:c0:0a:08:b4:6e: 34:94:8f:f4:61:99:08:7c:f3:49:60:74:1c:32:06: a4:f0:8e:8c:1f:70:2e:a8:29:95:4e:79:92:1c:23: 77:c3:29:b0:81:df:e5:86:b4:fd:bc:68:07:b8:76: a4:15:9f:f6:dc:d6:b8:30:14:d1:b5:f3:41:17:89: f1:3e:fc:0f:d2:cb:1e:af:e8:a5:14:d7:ea:c9:48: 54:fb:eb:85:cf:b1:70:43:8e:8c:d8:e1:fb:89:96: a2:64:6f:7d:9b:71:0b:19:60:36:28:c5:9e:5a:fe: 8a:85:41:d7:31:26:ba:19:c6:c4:75:99:4e:85:4f: fb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:05:3F:D4:A6:7F:45:4D:74:09:EC:A9:AA:1B:48:A5:90:EE:9E:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a2fe2ba-a63e-377d-8267-11a345a38439.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.213.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:39:5f:32:57:5b:bc:ee:d4:4e:d5:84:45:22:2f:10:36:32: e7:51:27:0c:9a:91:ce:d9:65:0b:63:25:88:3a:63:b0:97:69: 69:3f:c6:63:db:2b:38:cc:f4:88:ac:7f:25:19:06:43:64:ea: 8c:de:c6:b5:d9:df:fe:d2:36:30:3b:74:e4:12:f6:68:0a:e9: fb:e7:7b:0f:bb:c3:cf:20:84:69:25:6e:39:7f:91:68:fa:1b: 99:6c:ee:b2:3e:c2:48:20:3c:4e:42:03:cd:b0:8e:ce:b7:1f: d8:33:a8:d6:16:a9:ec:68:53:d3:6f:77:98:04:71:08:3f:71: 4b:7f:16:96:8f:c9:d0:d7:65:8e:74:e9:0f:c5:69:d2:be:29: df:20:6e:51:f9:e4:aa:b8:8a:f3:c0:02:e7:d8:83:35:b1:20: e4:fb:37:b9:6d:c0:1f:16:e1:aa:cb:d4:fe:31:04:49:e9:16: 6c:82:42:fd:1f:89:60:ce:b9:1c:4d:61:9f:a5:e8:d9:60:88: a9:05:35:0f:02:73:f6:a1:fd:90:a6:95:c9:01:ce:38:e9:f8: 9b:37:39:88:ac:20:9d:dd:7c:13:e9:30:2b:ab:89:a5:5c:16: f7:4c:ed:e1:2d:de:90:b5:e5:cf:09:19:97:8e:12:ce:23:9a: dd:69:68:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnJ0JZRu9a/08WwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk M2MwOGE0M2EtMDJiZi00M2IxLWIyYjEtNDVkYThiNjI3OTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnh2hFkAUdSgIOWOS7Q8aSQyWoSRP6zzJ3kWN qsTpqq8JeIEwfhKvQYagdl6KBCYL7vwKepW3MTgJL6kj343nakEt96WE3ds3g9CH l+8dGDquGU1fwitO54FMhmwbys05T1IeK7ozYPOrgihw2ky9o5g5UJknkVwPPCor geG0B+PZwAoItG40lI/0YZkIfPNJYHQcMgak8I6MH3AuqCmVTnmSHCN3wymwgd/l hrT9vGgHuHakFZ/23Na4MBTRtfNBF4nxPvwP0sser+ilFNfqyUhU++uFz7FwQ46M 2OH7iZaiZG99m3ELGWA2KMWeWv6KhUHXMSa6GcbEdZlOhU/7+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHsFP9Smf0VNdAnsqaobSKWQ7p6wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGEyZmUyYmEtYTYzZS0z NzdkLTgyNjctMTFhMzQ1YTM4NDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrtV0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKU5XzJXW7zu1E7VhEUiLxA2MudRJwyakc7ZZQtjJYg6Y7CXaWk/xmPb KzjM9IisfyUZBkNk6ozexrXZ3/7SNjA7dOQS9mgK6fvnew+7w88ghGklbjl/kWj6 G5ls7rI+wkggPE5CA82wjs63H9gzqNYWqexoU9Nvd5gEcQg/cUt/FpaPydDXZY50 6Q/FadK+Kd8gblH55Kq4ivPAAufYgzWxIOT7N7ltwB8W4arL1P4xBEnpFmyCQv0f iWDOuRxNYZ+l6NlgiKkFNQ8Cc/ah/ZCmlckBzjjp+Js3OYisIJ3dfBPpMCuriaVc FvdM7eEt3pC15c8JGZeOEs4jmt1paOs= -----END CERTIFICATE-----Generated at Fri Oct 10 17:50:51 2025 by rpki-client