$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b9515c62-622e-3d04-ad05-083282dbf5e9.roa File: b9515c62-622e-3d04-ad05-083282dbf5e9.roa (raw, json) Hash identifier: zD1o0P/8vN87/gxfwmqPAi2xsxAVJBmdILn0U5+rp3U= Subject key identifier: C7:D3:F2:C5:64:97:34:B9:62:EC:32:0F:7C:22:76:7E:EF:59:F5:0D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B2CF71BD15895FD79B2E86940 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b9515c62-622e-3d04-ad05-083282dbf5e9.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 6167 IP address blocks: 174.255.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f7:1b:d1:58:95:fd:79:b2:e8:69:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=6bd93b8f-cc8b-4878-a4f1-a4248bb37eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:6c:f3:0a:3c:10:d3:a1:a6:f8:99:68:10:65: ba:b6:c9:31:2a:4c:53:e1:73:42:e7:c4:50:2d:c3: a7:34:01:ac:b8:a2:cf:c0:cb:8c:db:32:93:96:37: fe:df:d6:c8:68:2f:17:37:52:40:b9:3f:cd:8f:98: c8:bd:77:a5:18:cf:15:d6:ef:e8:68:8e:2f:3a:cd: c6:42:62:5d:54:c0:9b:87:8a:e2:96:1f:0f:1c:36: a0:4e:f8:5c:b2:a7:53:b8:d4:5d:76:d0:37:c9:40: 23:50:ca:ff:48:aa:9b:6c:16:67:1b:0b:27:65:69: dd:b2:14:4e:21:a1:f1:d1:f7:25:f4:a8:9d:92:96: 1a:f9:06:e1:ce:e9:7c:11:0c:72:59:19:8a:27:15: e6:a8:f5:d3:9f:75:a7:f8:f8:3e:cc:a5:7e:96:08: 20:b1:29:09:db:95:83:35:6b:48:9a:04:34:44:89: ea:71:71:e5:d6:20:66:0b:f9:93:64:b1:bc:aa:f2: d3:49:ff:2b:23:5c:51:79:f6:11:17:f6:02:1e:b4: 3b:5b:02:88:ae:1c:bd:3d:9b:87:06:b9:e3:18:06: 7a:9c:49:53:9e:d1:42:5a:99:3e:b7:d4:69:e3:0a: 90:47:3e:d7:a8:9d:19:25:0d:73:89:c4:cd:f7:c0: 72:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D3:F2:C5:64:97:34:B9:62:EC:32:0F:7C:22:76:7E:EF:59:F5:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b9515c62-622e-3d04-ad05-083282dbf5e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.255.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:48:f0:54:6e:46:51:84:15:c6:84:66:2a:fb:ca:f6:09:f4: 5c:1d:77:f4:72:6b:cf:8c:57:d1:f6:95:17:c1:11:33:85:3c: 3b:81:01:01:3b:6b:d5:34:69:db:00:05:4e:b0:03:ac:48:22: 38:0e:19:4e:f9:88:fc:7f:16:86:0f:d4:de:d4:2d:d8:ea:02: 60:52:8b:ad:0a:54:7d:85:90:8b:3f:3d:da:c7:f4:42:11:96: 13:ce:c1:ad:ff:97:93:57:77:6f:17:32:ec:0d:f1:f3:55:78: f4:c3:dd:a7:c9:b7:73:d9:ca:c8:b7:e8:ea:b9:79:f8:8f:1e: e3:8b:c3:9c:94:3a:7f:6e:11:90:62:0f:f4:1a:a0:76:93:24: d8:dc:b8:32:7c:16:8d:c5:08:7f:b4:7a:83:cf:4e:7e:3e:58: 92:42:08:52:2e:45:45:18:85:ff:d8:43:b2:10:4f:ff:a5:66: e7:17:3b:e8:f0:13:90:9f:8c:15:e2:dc:b5:bf:ef:c6:2c:e0: ae:cb:1e:71:ea:3e:3c:38:6d:16:78:32:b4:2b:b5:48:26:05: bf:19:a7:9a:4f:48:fa:83:33:38:72:0a:2f:f2:9f:ff:e2:88: bb:5e:e4:f0:a8:bd:2e:7d:ab:e2:b5:d5:37:4a:27:ee:ee:bf: 39:9f:3b:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9xvRWJX9ebLoaUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk NmJkOTNiOGYtY2M4Yi00ODc4LWE0ZjEtYTQyNDhiYjM3ZWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WzzCjwQ06Gm+JloEGW6tskxKkxT4XNC58RQ LcOnNAGsuKLPwMuM2zKTljf+39bIaC8XN1JAuT/Nj5jIvXelGM8V1u/oaI4vOs3G QmJdVMCbh4rilh8PHDagTvhcsqdTuNRddtA3yUAjUMr/SKqbbBZnGwsnZWndshRO IaHx0fcl9KidkpYa+Qbhzul8EQxyWRmKJxXmqPXTn3Wn+Pg+zKV+lgggsSkJ25WD NWtImgQ0RInqcXHl1iBmC/mTZLG8qvLTSf8rI1xRefYRF/YCHrQ7WwKIrhy9PZuH BrnjGAZ6nElTntFCWpk+t9Rp4wqQRz7XqJ0ZJQ1zicTN98ByRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfT8sVklzS5YuwyD3widn7vWfUNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjk1MTVjNjItNjIyZS0z ZDA0LWFkMDUtMDgzMjgyZGJmNWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrv/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhI8FRuRlGEFcaEZir7yvYJ9Fwdd/Rya8+MV9H2lRfBETOFPDuBAQE7 a9U0adsABU6wA6xIIjgOGU75iPx/FoYP1N7ULdjqAmBSi60KVH2FkIs/PdrH9EIR lhPOwa3/l5NXd28XMuwN8fNVePTD3afJt3PZysi36Oq5efiPHuOLw5yUOn9uEZBi D/QaoHaTJNjcuDJ8Fo3FCH+0eoPPTn4+WJJCCFIuRUUYhf/YQ7IQT/+lZucXO+jw E5CfjBXi3LW/78Ys4K7LHnHqPjw4bRZ4MrQrtUgmBb8Zp5pPSPqDMzhyCi/yn//i iLte5PCovS59q+K11TdKJ+7uvzmfO8k= -----END CERTIFICATE-----Generated at Fri Oct 10 19:58:39 2025 by rpki-client