$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c88fa91b-0393-3016-b5c9-ce2e0a8b370f.roa File: c88fa91b-0393-3016-b5c9-ce2e0a8b370f.roa (raw, json) Hash identifier: VBcr5NtkvgRPub2fTgZWZr78HpehynZU5uKs1VtVk0Y= Subject key identifier: F1:6E:FE:70:D9:7E:A9:D2:19:B3:B1:8D:87:BD:BD:C8:52:3D:A0:1F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B609CAC1B82FD72E3F814B0C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c88fa91b-0393-3016-b5c9-ce2e0a8b370f.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 6167 IP address blocks: 174.196.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:ac:1b:82:fd:72:e3:f8:14:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=9a815d25-46a4-4775-8d44-1f22f38fa772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4e:80:f9:f5:d0:16:fc:60:63:74:84:a9:ed: 61:19:3c:65:58:99:b5:8e:f1:65:e1:aa:8c:c5:b4: 06:71:07:d2:01:a0:f5:7f:b4:84:e9:f2:c5:c8:e3: 44:bb:93:b3:1d:02:6a:bc:c3:b9:a8:f5:3d:81:4b: 1c:de:9d:08:46:e9:2c:1e:47:6b:2d:28:ac:aa:0c: 92:53:c3:40:13:25:dd:b1:02:93:85:ad:aa:f7:7c: d0:21:55:d6:06:76:c7:19:0d:c4:97:ff:62:98:f9: 58:1c:b5:a4:2b:21:f3:94:3b:e3:44:d1:c4:19:86: c8:d7:54:fd:9d:ba:27:cc:25:15:ec:76:b0:50:21: ec:e2:50:52:f9:9c:ee:22:48:e5:98:d9:6f:ba:f0: 3b:67:65:38:c4:aa:b6:50:45:3d:ea:a1:48:e4:2b: 08:5f:9d:81:36:eb:c2:45:42:af:97:22:69:47:49: 15:28:19:2d:d3:5e:a3:74:31:a9:91:e1:cc:42:00: 63:98:d6:4e:92:04:78:67:e7:f7:0e:df:6e:98:4f: 1a:82:2f:d2:8f:38:e2:27:9c:d1:44:8c:e5:cf:36: 83:fc:b9:2a:85:6a:64:2a:03:27:8a:82:d2:e4:fc: fc:45:25:03:7a:a5:cc:8f:a1:47:03:01:ee:c4:4c: 96:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:6E:FE:70:D9:7E:A9:D2:19:B3:B1:8D:87:BD:BD:C8:52:3D:A0:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c88fa91b-0393-3016-b5c9-ce2e0a8b370f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.196.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:70:c9:86:f5:05:d6:95:a8:56:44:c9:dd:23:72:d6:a8:d3: 63:fe:c4:62:f0:90:0d:e8:aa:31:78:3e:bc:bf:1f:50:56:0e: 82:84:d6:76:b7:28:20:20:fa:cc:61:83:20:b0:a3:7a:70:d6: e5:0f:7b:b6:9f:01:31:1b:68:a0:6e:fd:11:db:2e:64:f1:74: 5d:ee:72:90:17:5b:6a:31:bb:b0:10:ad:df:e8:90:52:0d:3f: b8:ac:5f:4e:fd:40:93:03:49:f4:41:aa:2f:4d:a8:b1:9b:85: e3:3c:18:84:a2:d9:9e:89:b3:15:f3:15:eb:e1:ea:72:d1:ca: 2a:a0:33:3f:ef:a6:60:9e:f2:41:44:57:36:b1:e1:e8:8b:e9: 36:ab:42:33:8e:50:c3:94:80:e9:97:e2:9d:63:95:1b:d8:78: dd:79:4c:98:92:cd:2a:6b:4b:8a:89:cf:48:17:3d:06:46:a2: ad:c2:65:95:99:3e:74:01:68:0f:bc:6b:b5:48:ff:c2:3e:92: 9f:2d:8e:92:66:14:27:20:33:64:64:54:29:04:a9:1f:05:30: 57:59:85:70:65:cf:c5:0a:4d:19:ae:aa:01:33:6f:9e:af:7a: ce:8f:24:0f:ad:46:19:93:94:ae:7c:17:18:35:be:1e:58:74: e2:26:74:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnKwbgv1y4/gUsMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk OWE4MTVkMjUtNDZhNC00Nzc1LThkNDQtMWYyMmYzOGZhNzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp06A+fXQFvxgY3SEqe1hGTxlWJm1jvFl4aqM xbQGcQfSAaD1f7SE6fLFyONEu5OzHQJqvMO5qPU9gUsc3p0IRuksHkdrLSisqgyS U8NAEyXdsQKTha2q93zQIVXWBnbHGQ3El/9imPlYHLWkKyHzlDvjRNHEGYbI11T9 nbonzCUV7HawUCHs4lBS+ZzuIkjlmNlvuvA7Z2U4xKq2UEU96qFI5CsIX52BNuvC RUKvlyJpR0kVKBkt016jdDGpkeHMQgBjmNZOkgR4Z+f3Dt9umE8agi/SjzjiJ5zR RIzlzzaD/LkqhWpkKgMnioLS5Pz8RSUDeqXMj6FHAwHuxEyWjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFu/nDZfqnSGbOxjYe9vchSPaAfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzg4ZmE5MWItMDM5My0z MDE2LWI1YzktY2UyZTBhOGIzNzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrsQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKtwyYb1BdaVqFZEyd0jctao02P+xGLwkA3oqjF4Pry/H1BWDoKE1na3 KCAg+sxhgyCwo3pw1uUPe7afATEbaKBu/RHbLmTxdF3ucpAXW2oxu7AQrd/okFIN P7isX079QJMDSfRBqi9NqLGbheM8GISi2Z6JsxXzFevh6nLRyiqgMz/vpmCe8kFE Vzax4eiL6TarQjOOUMOUgOmX4p1jlRvYeN15TJiSzSprS4qJz0gXPQZGoq3CZZWZ PnQBaA+8a7VI/8I+kp8tjpJmFCcgM2RkVCkEqR8FMFdZhXBlz8UKTRmuqgEzb56v es6PJA+tRhmTlK58Fxg1vh5YdOImdP8= -----END CERTIFICATE-----Generated at Fri Oct 10 20:01:19 2025 by rpki-client