$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b3bbc20-6665-3e5d-8ac7-78607ea7d606.roa File: 8b3bbc20-6665-3e5d-8ac7-78607ea7d606.roa (raw, json) Hash identifier: XiPaWwnxq2BM7TzPetznS4YszgVzSqz5VxEHRXLAXYY= Subject key identifier: 44:E3:9E:91:C9:9A:3D:F3:37:F3:23:F3:3E:50:AB:B0:99:A3:74:F0 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B609C95EADC50DF9EBCC1FF80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b3bbc20-6665-3e5d-8ac7-78607ea7d606.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 6167 IP address blocks: 174.199.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:95:ea:dc:50:df:9e:bc:c1:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=8ba99fb4-e059-4cbf-9979-462cdfb177f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:dd:00:28:fb:2a:04:3b:13:c9:98:30:22:e4: f5:94:0f:f8:19:1f:e8:c1:b5:e6:3b:e0:a5:3b:25: 03:b3:a8:e0:23:19:7d:ea:be:c3:ac:fb:e9:95:54: 45:45:78:bd:b1:1c:03:00:52:42:cb:6b:38:28:9d: ea:87:b0:a4:41:b8:0c:88:7d:17:19:0c:93:ef:33: 39:8f:e6:61:a2:00:5d:c3:66:a0:7a:45:42:8e:80: c1:95:79:ae:59:45:5a:ee:68:ee:5e:33:6c:4b:87: f3:b0:f7:3a:47:00:b2:ec:a8:b7:19:a0:72:05:67: cf:77:0c:d2:e3:18:42:a8:b9:9f:4e:6e:3b:b0:0d: 87:31:9c:fd:16:32:1d:8b:25:e7:a6:b8:16:6d:dc: 9e:9a:e7:c6:bb:04:85:2d:2a:e5:b2:47:cf:70:be: 97:fe:11:e9:9c:1c:79:d4:7f:5a:e4:7b:76:87:4c: 9e:52:af:6a:e7:b7:a0:62:dd:79:9f:d2:aa:4f:93: 8f:eb:76:b8:96:95:06:f6:62:2c:1c:27:96:95:53: ac:db:4f:2d:c4:dc:24:ef:0b:e7:a2:49:b5:18:80: 34:a1:2a:1d:4d:99:80:10:05:73:02:8c:76:84:93: 00:45:ad:5b:c1:ac:ed:e4:88:d8:0d:f6:f7:ee:1c: da:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E3:9E:91:C9:9A:3D:F3:37:F3:23:F3:3E:50:AB:B0:99:A3:74:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8b3bbc20-6665-3e5d-8ac7-78607ea7d606.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.199.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:a6:80:34:3a:18:fd:7e:11:a2:d7:3c:38:7b:72:9e:79:f9: 4d:46:e0:25:50:df:da:3e:ad:32:33:07:48:80:41:f0:84:35: e4:55:d9:41:0a:4a:3e:46:27:18:5b:ca:03:1f:3c:7e:23:7b: 25:8b:af:fd:f0:c8:cf:06:c9:da:c0:fe:bd:fb:45:72:a7:97: d0:09:e8:61:a8:6e:55:18:5a:f4:ec:35:66:ca:f3:6c:29:90: 3f:fb:11:9c:bd:d4:b4:43:f1:55:94:d5:80:7b:c7:7f:06:2b: 71:34:36:48:87:0d:c5:4a:b4:7d:f0:f4:a1:b4:30:9f:76:df: b8:5a:3a:fd:6a:ce:93:14:d7:1b:83:07:1f:17:b5:84:a1:c8: 8c:c5:f2:9a:a5:82:ff:c6:70:f4:29:d7:aa:b1:95:6a:5c:d3: a8:2b:b8:6e:20:4e:28:cc:00:84:ec:51:47:5a:57:db:7d:bc: b8:04:e1:57:0b:3b:9f:27:68:cc:b9:8f:c5:5a:0d:07:17:fc: 50:36:0f:11:ea:67:e4:c3:30:6e:37:2d:83:6d:fa:3a:a3:f3: 98:5b:ec:8f:b2:10:b7:4e:a9:e5:c7:d9:fd:2b:83:8e:0e:ad: 0d:fc:e2:e2:61:ab:56:60:c7:34:b0:16:4d:d0:33:32:72:d0: 20:f1:32:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnJXq3FDfnrzB/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk OGJhOTlmYjQtZTA1OS00Y2JmLTk5NzktNDYyY2RmYjE3N2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh90AKPsqBDsTyZgwIuT1lA/4GR/owbXmO+Cl OyUDs6jgIxl96r7DrPvplVRFRXi9sRwDAFJCy2s4KJ3qh7CkQbgMiH0XGQyT7zM5 j+ZhogBdw2agekVCjoDBlXmuWUVa7mjuXjNsS4fzsPc6RwCy7Ki3GaByBWfPdwzS 4xhCqLmfTm47sA2HMZz9FjIdiyXnprgWbdyemufGuwSFLSrlskfPcL6X/hHpnBx5 1H9a5Ht2h0yeUq9q57egYt15n9KqT5OP63a4lpUG9mIsHCeWlVOs208txNwk7wvn okm1GIA0oSodTZmAEAVzAox2hJMARa1bwazt5IjYDfb37hza1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETjnpHJmj3zN/Mj8z5Qq7CZo3TwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGIzYmJjMjAtNjY2NS0z ZTVkLThhYzctNzg2MDdlYTdkNjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrseAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALemgDQ6GP1+EaLXPDh7cp55+U1G4CVQ39o+rTIzB0iAQfCENeRV2UEK Sj5GJxhbygMfPH4jeyWLr/3wyM8GydrA/r37RXKnl9AJ6GGoblUYWvTsNWbK82wp kD/7EZy91LRD8VWU1YB7x38GK3E0NkiHDcVKtH3w9KG0MJ9237haOv1qzpMU1xuD Bx8XtYShyIzF8pqlgv/GcPQp16qxlWpc06gruG4gTijMAITsUUdaV9t9vLgE4VcL O58naMy5j8VaDQcX/FA2DxHqZ+TDMG43LYNt+jqj85hb7I+yELdOqeXH2f0rg44O rQ384uJhq1ZgxzSwFk3QMzJy0CDxMtg= -----END CERTIFICATE-----Generated at Fri Oct 10 20:00:27 2025 by rpki-client