$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/813a4ca2-02b1-395f-b44e-1aafd47744a4.roa File: 813a4ca2-02b1-395f-b44e-1aafd47744a4.roa (raw, json) Hash identifier: qj+G2v5g7hPY39hryrOU/amUHnwHa9JOFq/trbVQE6g= Subject key identifier: B3:B0:46:A5:90:81:EA:47:1F:E6:1E:A2:A3:2F:38:CB:81:5A:07:9F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B0A11745ABE8C1C5E6C1F0B00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/813a4ca2-02b1-395f-b44e-1aafd47744a4.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 6167 IP address blocks: 174.241.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:74:5a:be:8c:1c:5e:6c:1f:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=228c281a-ce8d-43b0-8830-4b4162e08f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:11:ff:28:b1:59:be:42:b7:4c:cb:b3:f9:c3: 3a:3a:20:5a:6e:84:49:fb:f9:e0:92:ef:07:4d:ac: 5c:51:52:43:5e:64:6e:0c:03:87:48:f5:92:da:44: 02:f2:2c:33:7f:14:67:1c:4a:02:cb:62:99:fa:7f: 02:32:29:9e:56:4e:7e:56:6d:a6:71:06:4d:93:f1: 58:86:9f:92:b2:19:a2:b0:d7:f3:ec:2f:7e:69:29: 19:a1:e1:19:c1:73:d7:a0:9b:09:1e:71:ca:49:9c: 0b:1a:50:1b:63:a7:1b:69:9c:2a:0f:f9:06:95:d8: 93:1c:6f:b4:93:ca:72:4f:53:6c:b4:b6:41:2a:18: cc:f2:45:72:aa:69:44:c7:c6:ce:bb:8f:45:95:7a: 13:d1:44:f5:9f:4f:8f:5a:01:b0:15:8e:6f:cb:99: a4:dc:bc:8e:03:dd:bf:ea:2c:fb:ca:21:74:a6:ec: ec:59:00:30:eb:8b:ff:bf:02:13:c8:14:06:22:5e: 93:1f:16:9c:fa:f0:8b:31:39:e1:ca:8d:3e:1a:35: 92:bf:0d:5d:8e:8f:b7:de:b3:6c:a1:df:b1:84:4c: c3:a7:8f:d8:2e:d3:78:18:5d:50:c9:ac:ea:cd:bf: 8c:51:d6:89:1e:ab:cd:fe:40:b2:e3:36:82:25:49: 93:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B0:46:A5:90:81:EA:47:1F:E6:1E:A2:A3:2F:38:CB:81:5A:07:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/813a4ca2-02b1-395f-b44e-1aafd47744a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.241.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:5f:ff:29:d4:37:e5:d1:ec:92:25:50:ef:6f:9e:24:0c:f7: 5c:33:f5:8d:bf:88:7b:54:0a:5d:5a:c4:2f:63:b1:cc:a0:73: 73:8a:ed:59:70:8d:46:72:d1:d0:6e:79:9e:6a:92:ca:62:6f: 08:a7:63:61:8c:d7:36:64:02:ce:d4:dc:6b:63:af:e7:41:10: 7c:a3:f1:f1:91:31:a2:b0:74:37:10:26:03:ab:cf:67:e0:11: c3:1e:59:21:9a:02:ae:e6:f7:4a:f3:b5:8a:e1:1a:e9:8e:44: fd:95:d5:a1:1b:c3:3f:62:63:76:3c:4c:d7:0d:8b:99:7e:26: 7f:b0:0b:03:5a:4b:af:91:37:af:60:ac:62:2b:33:b6:3c:31: 20:9f:f9:81:e3:2b:36:33:bb:58:4e:dd:47:7f:33:91:93:ac: 2e:89:80:95:be:2b:06:26:1f:07:d8:78:11:9a:b1:80:92:56: d6:f5:82:c0:2c:8f:e4:81:41:9c:23:50:75:0e:cf:c1:fa:c7: 56:eb:59:76:69:c2:4b:68:c7:9c:fc:0d:1b:0c:a1:d6:a2:ed: fd:e4:d4:7d:57:a4:2f:ad:07:20:55:e1:89:3b:e3:84:38:a2: 78:37:a4:26:a6:05:d8:1e:1a:89:df:7f:44:b8:c3:d7:cc:3d: 7c:cd:ad:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEXRavowcXmwfCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk MjI4YzI4MWEtY2U4ZC00M2IwLTg4MzAtNGI0MTYyZTA4ZjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihH/KLFZvkK3TMuz+cM6OiBaboRJ+/ngku8H TaxcUVJDXmRuDAOHSPWS2kQC8iwzfxRnHEoCy2KZ+n8CMimeVk5+Vm2mcQZNk/FY hp+SshmisNfz7C9+aSkZoeEZwXPXoJsJHnHKSZwLGlAbY6cbaZwqD/kGldiTHG+0 k8pyT1NstLZBKhjM8kVyqmlEx8bOu49FlXoT0UT1n0+PWgGwFY5vy5mk3LyOA92/ 6iz7yiF0puzsWQAw64v/vwITyBQGIl6THxac+vCLMTnhyo0+GjWSvw1djo+33rNs od+xhEzDp4/YLtN4GF1Qyazqzb+MUdaJHqvN/kCy4zaCJUmTcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOwRqWQgepHH+YeoqMvOMuBWgefMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODEzYTRjYTItMDJiMS0z OTVmLWI0NGUtMWFhZmQ0Nzc0NGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrvGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1f/ynUN+XR7JIlUO9vniQM91wz9Y2/iHtUCl1axC9jscygc3OK7Vlw jUZy0dBueZ5qkspibwinY2GM1zZkAs7U3Gtjr+dBEHyj8fGRMaKwdDcQJgOrz2fg EcMeWSGaAq7m90rztYrhGumORP2V1aEbwz9iY3Y8TNcNi5l+Jn+wCwNaS6+RN69g rGIrM7Y8MSCf+YHjKzYzu1hO3Ud/M5GTrC6JgJW+KwYmHwfYeBGasYCSVtb1gsAs j+SBQZwjUHUOz8H6x1brWXZpwktox5z8DRsModai7f3k1H1XpC+tByBV4Yk744Q4 ong3pCamBdgeGonff0S4w9fMPXzNrbE= -----END CERTIFICATE-----Generated at Sat Oct 11 00:19:27 2025 by rpki-client