$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/532ec924-7654-3814-a116-3bbc705752cf.roa File: 532ec924-7654-3814-a116-3bbc705752cf.roa (raw, json) Hash identifier: +iAVVKeWQLyqnFFnGyW5L3pj1TSg3NTbI9xNbEzDuZY= Subject key identifier: FE:8F:59:9A:18:71:FF:01:70:A4:D1:98:59:12:1E:1D:22:0E:E5:B0 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B196C1C7F2465D30C08455D80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/532ec924-7654-3814-a116-3bbc705752cf.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 6167 IP address blocks: 174.214.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:1c:7f:24:65:d3:0c:08:45:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=cdf5a731-48c1-43a3-ba38-299d1ca97082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ff:70:27:90:8a:f5:5f:5f:be:7d:a3:71:33: 9a:20:53:62:f5:69:3e:2a:28:32:77:d8:91:b4:c1: aa:cf:43:c7:bf:e5:84:4b:c1:33:9e:6e:04:93:08: 07:41:7d:fe:1e:0c:28:91:ac:7a:c9:3a:24:dc:76: 3c:9c:d6:b1:39:ef:65:bb:00:20:a9:e0:fd:53:81: a5:70:fe:ef:bd:35:92:1b:95:48:af:df:23:6e:c5: cf:ee:33:b1:75:2d:99:8f:01:6d:96:d8:f2:76:c0: 56:2f:69:4d:69:6d:9a:21:c0:40:f4:47:1c:df:cf: 58:0a:0a:91:cc:c2:1b:52:5a:0a:4c:3a:49:a7:b8: c3:90:78:9c:67:92:a6:de:73:15:fb:d3:a4:33:31: 85:1b:7a:9a:63:10:32:22:35:71:3a:9e:5f:d0:4e: fa:81:a7:9e:f8:55:77:6b:9a:68:07:e0:8e:47:25: 46:8a:c6:8c:d5:c3:cb:e7:c4:c1:96:af:88:3b:00: 5a:9c:1e:4c:87:aa:d1:c1:af:18:db:91:8f:77:7b: 7f:ba:b9:b9:6c:fc:06:d6:95:d1:9f:4d:cf:89:60: 6f:45:c0:99:7f:79:91:6b:b7:85:4c:72:94:d2:ea: bb:cd:b2:42:d3:4e:b5:5e:0a:64:98:15:cc:b2:61: 44:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:8F:59:9A:18:71:FF:01:70:A4:D1:98:59:12:1E:1D:22:0E:E5:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/532ec924-7654-3814-a116-3bbc705752cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.214.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:a4:bf:71:05:bd:c5:c0:a4:78:fd:64:42:14:f0:f0:6f:97: b0:63:80:ae:dc:81:7e:fa:6f:25:93:a8:04:26:61:90:bc:8f: 85:1a:10:6d:55:6b:04:cc:a4:f6:94:a5:78:8c:45:4e:e4:ec: 04:00:a6:08:55:9a:e6:a3:74:40:5d:c8:58:ea:29:c7:a7:ed: 38:60:71:e7:2b:5f:5e:8a:5e:9b:a9:b2:ba:4b:43:4d:67:54: da:90:35:fc:e6:86:47:1e:f6:7c:af:3e:78:b9:8b:28:0a:7e: 01:87:d5:0c:6b:d3:f6:13:bc:c2:e7:36:85:53:4d:4c:ae:d5: 7a:2a:d8:57:a2:94:ea:14:20:40:13:25:9a:d1:88:5d:81:69: d0:f7:82:98:f9:6c:c0:0d:22:1a:17:fa:3f:f1:fa:bf:5a:d4: b5:07:e3:47:3a:d2:09:c7:b2:91:0f:96:4a:5e:26:74:0e:7f: ff:8f:81:44:1f:dc:af:0c:c7:68:ee:00:27:b2:25:a3:86:b0: b1:79:b7:7c:e3:62:3a:6c:c7:a5:9c:15:34:af:4f:34:3e:0d: 2d:4d:d6:d6:27:08:9e:52:c3:61:e7:6e:25:30:32:70:14:26: 4c:5f:e6:c2:b3:f8:a3:7c:b5:b7:62:8f:78:f8:b7:dc:69:83: 5a:15:86:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbBx/JGXTDAhFXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk Y2RmNWE3MzEtNDhjMS00M2EzLWJhMzgtMjk5ZDFjYTk3MDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/9wJ5CK9V9fvn2jcTOaIFNi9Wk+Kigyd9iR tMGqz0PHv+WES8Eznm4EkwgHQX3+Hgwokax6yTok3HY8nNaxOe9luwAgqeD9U4Gl cP7vvTWSG5VIr98jbsXP7jOxdS2ZjwFtltjydsBWL2lNaW2aIcBA9Ecc389YCgqR zMIbUloKTDpJp7jDkHicZ5Km3nMV+9OkMzGFG3qaYxAyIjVxOp5f0E76gaee+FV3 a5poB+CORyVGisaM1cPL58TBlq+IOwBanB5Mh6rRwa8Y25GPd3t/urm5bPwG1pXR n03PiWBvRcCZf3mRa7eFTHKU0uq7zbJC0061XgpkmBXMsmFEbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6PWZoYcf8BcKTRmFkSHh0iDuWwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTMyZWM5MjQtNzY1NC0z ODE0LWExMTYtM2JiYzcwNTc1MmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+kv3EFvcXApHj9ZEIU8PBvl7BjgK7cgX76byWTqAQmYZC8j4UaEG1V awTMpPaUpXiMRU7k7AQApghVmuajdEBdyFjqKcen7ThgcecrX16KXpupsrpLQ01n VNqQNfzmhkce9nyvPni5iygKfgGH1Qxr0/YTvMLnNoVTTUyu1Xoq2FeilOoUIEAT JZrRiF2BadD3gpj5bMANIhoX+j/x+r9a1LUH40c60gnHspEPlkpeJnQOf/+PgUQf 3K8Mx2juACeyJaOGsLF5t3zjYjpsx6WcFTSvTzQ+DS1N1tYnCJ5Sw2HnbiUwMnAU Jkxf5sKz+KN8tbdij3j4t9xpg1oVhkQ= -----END CERTIFICATE-----Generated at Fri Oct 10 17:55:37 2025 by rpki-client