$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bcaab78c-ce5c-311e-8713-37d6f82d0e2d.roa File: bcaab78c-ce5c-311e-8713-37d6f82d0e2d.roa (raw, json) Hash identifier: SVLgN09wFjd0Ygv0faQ17QxjihVFpn34oYpJMInW2Xg= Subject key identifier: 69:2A:31:96:F1:38:5F:3D:F0:4C:CD:C2:E7:F5:CF:A2:11:54:48:D4 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B609CA384356B8C903DD76980 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bcaab78c-ce5c-311e-8713-37d6f82d0e2d.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 6167 IP address blocks: 174.218.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:a3:84:35:6b:8c:90:3d:d7:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=5a54ee0e-79c9-462e-aab0-7072d84219d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:74:3c:50:91:30:66:70:02:c6:ae:c0:d4:5f: fa:16:a5:36:23:49:b7:d8:94:a0:9e:2a:cd:20:a7: 6d:f3:23:34:02:cf:83:a3:0a:28:98:c6:24:e2:73: fa:1b:97:01:fc:6a:35:ea:3c:8a:e4:3b:26:75:d1: 7e:15:7e:9c:a0:b8:a5:49:a1:50:1f:74:aa:85:7b: 0c:8b:ae:f0:83:bb:f7:6d:ef:5c:68:02:5f:c0:00: 88:17:5e:d4:35:21:e2:01:93:0d:eb:58:5f:c3:f0: f6:7f:bd:bd:ac:4d:39:2d:69:15:bc:01:16:59:14: 83:04:19:40:75:96:b7:25:76:70:e6:e8:4a:67:75: ab:2b:de:4a:26:95:58:1a:9e:4b:0a:56:4f:38:38: c2:89:c9:be:89:c2:73:3e:c1:f5:43:3d:a0:18:84: dd:f1:e0:fb:ed:51:43:a2:28:33:0f:42:ad:8a:07: 94:8b:60:dd:2b:2c:16:3f:d7:7d:2f:db:02:b6:36: 58:d9:e6:3d:43:72:cd:5e:eb:be:c1:41:18:ec:5d: 62:fa:e4:b3:14:6d:63:e6:c1:07:14:97:72:90:43: 99:45:2c:5b:70:13:5f:71:a2:83:20:13:73:69:9c: 75:1a:e5:4a:c7:ce:2a:a7:3f:22:ef:50:f0:b6:26: 9e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:2A:31:96:F1:38:5F:3D:F0:4C:CD:C2:E7:F5:CF:A2:11:54:48:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bcaab78c-ce5c-311e-8713-37d6f82d0e2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.218.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:f1:d5:c9:17:b1:7c:8c:fa:7a:d1:11:8a:06:31:42:14:68: 6d:9b:ca:1d:03:22:bc:16:e4:96:fd:d3:45:55:9a:a0:a7:c6: ee:82:50:6a:fa:2c:cc:8b:65:74:ab:e5:7e:66:76:5a:7b:84: 1c:bc:ae:d6:cd:81:aa:b8:2f:9e:dc:c5:e4:21:94:db:d9:4d: f0:22:61:1b:ec:30:79:26:51:a8:b1:00:f6:a5:c9:52:7a:d3: 98:d5:17:2b:8d:e4:f1:fd:4d:28:04:2e:73:31:fc:53:0c:43: 6f:6f:95:1c:5e:d6:83:aa:17:30:1c:d8:b8:96:e8:da:83:07: 58:15:8f:3b:15:a4:5e:f0:13:93:67:2e:46:fd:e7:c3:73:93: 4a:a5:f9:7a:54:d9:fb:5b:ba:97:bb:e0:ab:92:b5:a5:e7:c1: c4:f7:16:05:32:39:ba:4b:4a:0c:e0:4d:7b:50:dc:4e:58:53: 23:94:d6:46:f5:bd:f9:84:54:71:bd:57:a9:d1:c4:cd:ed:43: a1:09:6b:36:6f:1e:cb:c0:22:5b:60:c5:1c:33:97:fe:ec:8d: 3b:54:74:30:3a:3b:e0:68:43:47:16:8c:8b:e8:fd:74:e7:1d: d3:b1:a1:b1:9a:57:29:ce:6a:98:65:37:45:16:dd:b2:3a:2d: 30:d9:0a:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnKOENWuMkD3XaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk NWE1NGVlMGUtNzljOS00NjJlLWFhYjAtNzA3MmQ4NDIxOWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3Q8UJEwZnACxq7A1F/6FqU2I0m32JSgnirN IKdt8yM0As+DowoomMYk4nP6G5cB/Go16jyK5DsmddF+FX6coLilSaFQH3SqhXsM i67wg7v3be9caAJfwACIF17UNSHiAZMN61hfw/D2f729rE05LWkVvAEWWRSDBBlA dZa3JXZw5uhKZ3WrK95KJpVYGp5LClZPODjCicm+icJzPsH1Qz2gGITd8eD77VFD oigzD0KtigeUi2DdKywWP9d9L9sCtjZY2eY9Q3LNXuu+wUEY7F1i+uSzFG1j5sEH FJdykEOZRSxbcBNfcaKDIBNzaZx1GuVKx84qpz8i71DwtiaegQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkqMZbxOF898EzNwuf1z6IRVEjUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmNhYWI3OGMtY2U1Yy0z MTFlLTg3MTMtMzdkNmY4MmQwZTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK/x1ckXsXyM+nrREYoGMUIUaG2byh0DIrwW5Jb900VVmqCnxu6CUGr6 LMyLZXSr5X5mdlp7hBy8rtbNgaq4L57cxeQhlNvZTfAiYRvsMHkmUaixAPalyVJ6 05jVFyuN5PH9TSgELnMx/FMMQ29vlRxe1oOqFzAc2LiW6NqDB1gVjzsVpF7wE5Nn Lkb958Nzk0ql+XpU2ftbupe74KuStaXnwcT3FgUyObpLSgzgTXtQ3E5YUyOU1kb1 vfmEVHG9V6nRxM3tQ6EJazZvHsvAIltgxRwzl/7sjTtUdDA6O+BoQ0cWjIvo/XTn HdOxobGaVynOaphlN0UW3bI6LTDZCsI= -----END CERTIFICATE-----Generated at Fri Oct 10 17:49:28 2025 by rpki-client