$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4cf0200f-e3ee-3d16-86eb-25c32e6fda68.roa File: 4cf0200f-e3ee-3d16-86eb-25c32e6fda68.roa (raw, json) Hash identifier: 2tdHCO77TXEItAAuclicLvyxCBB26Fc140XTderDi+A= Subject key identifier: D6:12:A9:72:49:C1:D7:76:06:08:21:A7:38:61:FB:73:23:11:FF:27 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B609CAF3BAE2F15BC8AA0E280 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4cf0200f-e3ee-3d16-86eb-25c32e6fda68.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 6167 IP address blocks: 174.213.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:af:3b:ae:2f:15:bc:8a:a0:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=d7259b32-fdd8-4d43-b94b-f0c617994ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:19:7e:43:d8:3d:14:a7:50:00:02:75:c6:5c: 9d:9f:b3:1b:33:35:41:25:81:cb:5a:ff:8d:85:4e: 3e:6a:56:05:71:7a:3b:1f:57:b2:70:8a:80:d3:72: 61:97:93:e1:26:b3:fc:18:76:cf:9f:d9:56:bc:50: e7:e7:ae:75:10:3b:a1:8a:90:e3:c4:5c:09:66:a8: ff:3f:b7:80:36:79:4e:c5:d6:de:7a:c1:55:39:52: aa:87:5b:11:e1:eb:e2:af:0a:72:1d:60:4c:fa:bf: 5c:2d:dc:05:03:7a:9c:16:28:9e:64:0a:6b:0e:f9: e3:8b:78:97:eb:67:3a:da:4b:35:50:46:14:ea:00: 97:11:95:89:12:f0:9e:41:29:d8:1f:07:56:97:19: a3:62:35:23:09:a3:91:9f:33:d6:2a:ec:fc:76:11: c7:52:fb:b7:ae:27:34:e2:2a:91:10:bb:e8:71:6f: 34:e1:b6:89:7d:5d:99:ea:38:67:f5:05:26:b9:ad: 64:64:f6:65:e6:22:6d:0a:27:b4:37:78:6a:b7:1c: bc:6c:19:34:68:b4:08:90:2a:ac:46:53:07:c4:5b: 92:6f:28:55:79:e8:ce:83:05:fb:5b:cb:d4:57:3e: b5:81:d2:4c:ef:19:db:b8:e4:75:8b:01:1d:68:6d: 62:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:12:A9:72:49:C1:D7:76:06:08:21:A7:38:61:FB:73:23:11:FF:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4cf0200f-e3ee-3d16-86eb-25c32e6fda68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.213.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:71:6c:7f:ae:92:fd:d9:a7:a9:6d:04:56:05:3e:d2:f2:e1: ff:03:19:de:e6:33:26:04:57:10:83:4d:8b:6d:40:d5:40:68: e0:51:51:66:a7:d8:d0:d3:de:ca:61:24:ce:e8:89:36:68:55: 21:30:c3:9c:5c:26:6a:e3:fb:c4:cb:0a:b5:90:37:6a:21:96: 04:8c:e4:a0:22:82:40:be:c7:79:d8:94:59:12:4f:b4:16:af: 8c:61:48:ec:11:8f:e8:9b:e8:2f:ab:3b:4b:f2:e9:bd:f6:9f: f4:c9:9f:66:9d:40:da:24:cd:fc:17:3b:36:04:ea:9d:68:f3: 3c:0b:be:92:0d:69:06:76:ad:8f:f5:57:3b:ee:88:fb:b2:15: 33:f8:33:74:9e:88:25:c7:d5:0d:ff:f5:fd:e8:e4:3e:4b:c9: 74:e8:5e:e2:c3:ad:98:7d:8c:40:7e:9d:5d:17:6e:18:4e:10: ae:46:a0:df:21:5d:e7:79:1a:0c:8e:32:87:94:d2:59:d4:bc: 77:d0:b0:b3:27:63:3e:a8:68:9a:33:4e:55:85:6f:d4:02:47: 61:b9:4b:cb:7f:c1:c2:bd:7f:60:98:71:82:43:6c:a5:26:89: 63:81:13:9d:da:f4:dc:ba:7c:84:84:81:79:35:26:e7:ac:d5: a6:ed:84:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnK87ri8VvIqg4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk ZDcyNTliMzItZmRkOC00ZDQzLWI5NGItZjBjNjE3OTk0ZWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhl+Q9g9FKdQAAJ1xlydn7MbMzVBJYHLWv+N hU4+alYFcXo7H1eycIqA03Jhl5PhJrP8GHbPn9lWvFDn5651EDuhipDjxFwJZqj/ P7eANnlOxdbeesFVOVKqh1sR4evirwpyHWBM+r9cLdwFA3qcFiieZAprDvnji3iX 62c62ks1UEYU6gCXEZWJEvCeQSnYHwdWlxmjYjUjCaORnzPWKuz8dhHHUvu3ric0 4iqRELvocW804baJfV2Z6jhn9QUmua1kZPZl5iJtCie0N3hqtxy8bBk0aLQIkCqs RlMHxFuSbyhVeejOgwX7W8vUVz61gdJM7xnbuOR1iwEdaG1i2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYSqXJJwdd2Bgghpzhh+3MjEf8nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGNmMDIwMGYtZTNlZS0z ZDE2LTg2ZWItMjVjMzJlNmZkYTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrtUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBxbH+ukv3Zp6ltBFYFPtLy4f8DGd7mMyYEVxCDTYttQNVAaOBRUWan 2NDT3sphJM7oiTZoVSEww5xcJmrj+8TLCrWQN2ohlgSM5KAigkC+x3nYlFkST7QW r4xhSOwRj+ib6C+rO0vy6b32n/TJn2adQNokzfwXOzYE6p1o8zwLvpINaQZ2rY/1 VzvuiPuyFTP4M3SeiCXH1Q3/9f3o5D5LyXToXuLDrZh9jEB+nV0XbhhOEK5GoN8h Xed5GgyOMoeU0lnUvHfQsLMnYz6oaJozTlWFb9QCR2G5S8t/wcK9f2CYcYJDbKUm iWOBE53a9Ny6fISEgXk1Jues1abthOc= -----END CERTIFICATE-----Generated at Fri Oct 10 17:49:21 2025 by rpki-client