$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1ecc81c-0293-39bf-b909-1001c897d0bd.roa File: a1ecc81c-0293-39bf-b909-1001c897d0bd.roa (raw, json) Hash identifier: su4vtpU4+CyBUFoNTxIv6rq7kFIbWaISVBtLj+uEiDg= Subject key identifier: A0:D3:4D:01:E6:65:F1:68:FD:F0:58:56:C2:FC:CD:A6:C8:EB:58:10 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B609C9D8AEDA52FE7B33EA360 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1ecc81c-0293-39bf-b909-1001c897d0bd.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 6167 IP address blocks: 174.213.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:9d:8a:ed:a5:2f:e7:b3:3e:a3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=6cf93f5e-e484-4848-a61e-57b194766faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:43:35:50:6c:20:99:66:08:b8:bb:26:53:e7: b1:8c:51:cb:e0:6f:7f:89:7a:5e:32:76:f5:8e:27: e9:de:b2:b6:44:36:3b:66:6c:64:35:e8:87:23:99: c1:09:6a:ad:19:ee:9a:ab:c8:f7:6c:02:74:60:46: 16:3f:5e:25:bc:8c:c0:b3:b5:4b:00:29:e3:58:d4: 46:71:53:78:cd:8b:26:64:40:ce:3a:81:4e:3e:85: a8:7a:f2:26:7e:ae:05:e7:0c:12:f4:ce:fa:bc:fa: d7:80:4f:88:0c:cb:41:30:31:e4:61:c9:f8:e8:89: 03:4e:c6:37:38:e8:e3:53:28:41:6f:31:67:bf:57: 90:08:d8:cd:e3:ef:23:57:5b:6e:67:17:1f:29:a9: f7:3c:87:77:33:82:7e:b0:94:f0:54:b1:03:77:29: 10:ce:70:ce:5c:64:0b:e4:c5:b0:a3:c7:65:df:23: 3b:08:42:ce:e9:69:6b:50:9a:e5:f9:ae:0b:27:e3: f3:af:9a:9c:31:2f:b5:69:c5:3f:81:20:74:8c:e6: 90:b4:18:5a:0b:58:98:df:9e:fb:1f:35:10:db:ba: a1:c7:c1:87:3d:75:02:75:ae:28:ec:98:d8:88:d0: 96:55:2b:f1:97:d9:ea:75:62:64:76:f4:23:09:1c: 26:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D3:4D:01:E6:65:F1:68:FD:F0:58:56:C2:FC:CD:A6:C8:EB:58:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a1ecc81c-0293-39bf-b909-1001c897d0bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.213.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:c7:cf:ad:8f:96:d6:96:cf:62:e5:f0:05:fc:2b:f9:b9:dc: c4:3d:64:a6:ab:10:3f:fd:01:35:3f:ca:d9:d8:3e:38:69:08: 3b:37:95:1d:16:e1:34:22:06:1b:8d:5c:1d:10:1a:6e:68:7d: 98:6f:61:b7:41:5d:64:ae:73:f4:9a:22:cb:17:a8:0f:65:72: d2:c0:dd:be:9d:01:5f:5e:90:17:39:27:d8:f0:89:ec:00:2f: ef:d9:4d:36:05:9f:8f:ab:35:03:4e:76:02:8a:fd:ce:ae:80: e8:5d:1f:02:8f:06:ca:82:17:49:aa:86:e0:3d:02:69:fa:2b: 7f:d5:5a:9c:66:b0:6b:f0:80:71:69:c8:4c:b1:a5:09:28:93: a5:6d:28:92:5a:f0:b3:c8:15:bb:97:74:f1:4f:e7:3d:fc:4e: 2f:60:1e:8b:a2:66:64:48:66:63:53:5d:50:ef:0b:d4:6f:96: 17:b0:7a:15:4a:e1:d7:84:29:ab:d0:5f:fc:b3:df:70:62:cd: 3f:a0:e8:8b:de:ea:51:0b:13:c8:99:d3:ab:c3:92:53:08:b5: cf:6d:a3:db:a2:56:1f:e1:ea:7f:4b:2e:92:a6:13:7c:8e:90: ba:fe:89:78:80:45:1e:65:b3:2d:0b:18:2d:f5:7c:17:0f:59: a8:60:fa:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnJ2K7aUv57M+o2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk NmNmOTNmNWUtZTQ4NC00ODQ4LWE2MWUtNTdiMTk0NzY2ZmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkM1UGwgmWYIuLsmU+exjFHL4G9/iXpeMnb1 jifp3rK2RDY7ZmxkNeiHI5nBCWqtGe6aq8j3bAJ0YEYWP14lvIzAs7VLACnjWNRG cVN4zYsmZEDOOoFOPoWoevImfq4F5wwS9M76vPrXgE+IDMtBMDHkYcn46IkDTsY3 OOjjUyhBbzFnv1eQCNjN4+8jV1tuZxcfKan3PId3M4J+sJTwVLEDdykQznDOXGQL 5MWwo8dl3yM7CELO6WlrUJrl+a4LJ+Pzr5qcMS+1acU/gSB0jOaQtBhaC1iY3577 HzUQ27qhx8GHPXUCda4o7JjYiNCWVSvxl9nqdWJkdvQjCRwmGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDTTQHmZfFo/fBYVsL8zabI61gQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTFlY2M4MWMtMDI5My0z OWJmLWI5MDktMTAwMWM4OTdkMGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjHz62PltaWz2Ll8AX8K/m53MQ9ZKarED/9ATU/ytnYPjhpCDs3lR0W 4TQiBhuNXB0QGm5ofZhvYbdBXWSuc/SaIssXqA9lctLA3b6dAV9ekBc5J9jwiewA L+/ZTTYFn4+rNQNOdgKK/c6ugOhdHwKPBsqCF0mqhuA9Amn6K3/VWpxmsGvwgHFp yEyxpQkok6VtKJJa8LPIFbuXdPFP5z38Ti9gHouiZmRIZmNTXVDvC9RvlhewehVK 4deEKavQX/yz33BizT+g6Ive6lELE8iZ06vDklMItc9to9uiVh/h6n9LLpKmE3yO kLr+iXiARR5lsy0LGC31fBcPWahg+hY= -----END CERTIFICATE-----Generated at Fri Oct 10 20:04:27 2025 by rpki-client