$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2449307a-dcc0-3689-bbb5-a3ff72de4cf4.roa File: 2449307a-dcc0-3689-bbb5-a3ff72de4cf4.roa (raw, json) Hash identifier: C4vCzWdysfEzeK6wdQJabGygXa5oA9xNuWJ1zblu9os= Subject key identifier: A1:4D:63:6F:39:72:82:B7:C0:27:00:50:3C:AF:35:F0:E2:0E:8A:1F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B609C9D60A4C4FEE6AE4C2F80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2449307a-dcc0-3689-bbb5-a3ff72de4cf4.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 6167 IP address blocks: 174.213.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:9d:60:a4:c4:fe:e6:ae:4c:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=72dce4bd-0f1b-48eb-92a1-031272824887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2a:21:27:83:4c:b2:12:5e:da:ca:e1:9d:e3: 10:33:e2:c4:20:20:7e:61:e6:1b:22:28:7f:9e:39: 9e:5e:bb:45:d4:ce:be:4f:4e:fa:07:d4:33:3e:ec: 72:c4:75:53:88:02:ec:44:b5:d5:61:6d:c4:62:6f: 93:37:c3:c0:19:ff:20:58:ec:15:e4:41:cf:c1:2f: 53:33:b8:96:36:8c:89:63:e9:be:44:55:5c:a8:34: b6:e3:4e:29:2f:e0:f4:26:ee:8b:5b:73:7b:fe:bc: 77:28:f8:c8:e5:19:67:64:aa:c9:b8:10:58:88:1f: 65:60:bc:fb:2c:02:c3:ca:7b:56:77:bb:10:21:a3: 4d:6f:3b:e5:4f:f8:e1:26:4b:fd:25:99:da:80:7b: 3a:99:4d:84:4e:fe:e0:f4:15:d6:e9:a0:36:1c:d6: 3a:a9:44:03:d8:3b:ba:00:93:60:66:f1:88:9d:88: f7:f0:b8:71:ed:70:58:c3:ee:d8:54:cd:cc:ed:08: 8b:2f:20:44:3d:4f:69:06:5a:30:70:c3:f9:06:81: 3f:f8:8b:f9:bf:0f:69:58:b3:4f:a5:4d:35:07:dd: 88:4a:2d:00:d5:a7:dd:6f:8b:e3:22:df:32:f0:95: 9a:7a:d2:8c:18:73:61:e1:7a:b3:1c:6d:04:f5:ce: 7d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:4D:63:6F:39:72:82:B7:C0:27:00:50:3C:AF:35:F0:E2:0E:8A:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2449307a-dcc0-3689-bbb5-a3ff72de4cf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.213.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:c9:cc:f3:70:4d:55:46:4a:1e:41:e5:ab:d2:2f:51:cd:00: 48:ae:e6:d3:e6:09:a7:9a:ab:d0:61:de:1d:c2:48:e0:06:73: 08:86:11:ba:84:79:d8:f2:07:f9:34:51:4b:79:8d:eb:98:12: ae:72:4e:bc:df:a4:94:fa:59:76:b0:d5:4f:3b:38:7c:66:67: 2b:0d:80:ec:cd:7d:80:e4:f5:b4:4c:14:81:d3:4b:8a:f5:03: 65:1f:4a:01:e7:1f:0b:f4:a5:6e:46:54:83:67:d2:5a:b5:78: b4:c5:9d:2f:32:78:99:23:f5:d3:71:a4:e1:7f:1c:d1:2f:0a: d8:b7:bf:2b:62:93:f5:0f:17:52:40:1d:ab:f2:79:d6:cc:25: 13:2c:f4:b2:cd:87:44:d8:66:35:2d:3f:8c:c9:2a:82:9a:62: 02:e3:c4:44:ab:17:10:4a:4a:a4:a0:f0:d0:13:a6:78:be:59: 85:c2:6f:6f:e4:6d:f6:d6:16:3c:4a:36:19:82:c6:c3:eb:03: a6:2e:93:24:cb:99:14:7d:0a:b9:01:45:75:7a:3c:d7:80:84: 9b:4e:48:4b:a2:e3:67:71:1d:cc:d7:d0:d1:c2:ab:a7:a9:3f: 64:12:66:80:b9:6d:cd:60:01:a6:55:5b:56:c2:38:98:69:d5: ba:75:9e:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnJ1gpMT+5q5ML4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk NzJkY2U0YmQtMGYxYi00OGViLTkyYTEtMDMxMjcyODI0ODg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyohJ4NMshJe2srhneMQM+LEICB+YeYbIih/ njmeXrtF1M6+T076B9QzPuxyxHVTiALsRLXVYW3EYm+TN8PAGf8gWOwV5EHPwS9T M7iWNoyJY+m+RFVcqDS2404pL+D0Ju6LW3N7/rx3KPjI5RlnZKrJuBBYiB9lYLz7 LALDyntWd7sQIaNNbzvlT/jhJkv9JZnagHs6mU2ETv7g9BXW6aA2HNY6qUQD2Du6 AJNgZvGInYj38Lhx7XBYw+7YVM3M7QiLLyBEPU9pBlowcMP5BoE/+Iv5vw9pWLNP pU01B92ISi0A1afdb4vjIt8y8JWaetKMGHNh4XqzHG0E9c59tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFNY285coK3wCcAUDyvNfDiDoofMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjQ0OTMwN2EtZGNjMC0z Njg5LWJiYjUtYTNmZjcyZGU0Y2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrtWIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3JzPNwTVVGSh5B5avSL1HNAEiu5tPmCaeaq9Bh3h3CSOAGcwiGEbqE edjyB/k0UUt5jeuYEq5yTrzfpJT6WXaw1U87OHxmZysNgOzNfYDk9bRMFIHTS4r1 A2UfSgHnHwv0pW5GVINn0lq1eLTFnS8yeJkj9dNxpOF/HNEvCti3vytik/UPF1JA HavyedbMJRMs9LLNh0TYZjUtP4zJKoKaYgLjxESrFxBKSqSg8NATpni+WYXCb2/k bfbWFjxKNhmCxsPrA6YukyTLmRR9CrkBRXV6PNeAhJtOSEui42dxHczX0NHCq6ep P2QSZoC5bc1gAaZVW1bCOJhp1bp1nvQ= -----END CERTIFICATE-----Generated at Fri Oct 10 20:03:44 2025 by rpki-client