$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cdea2fef-cbf0-3d85-be9a-750e9d547788.roa File: cdea2fef-cbf0-3d85-be9a-750e9d547788.roa (raw, json) Hash identifier: wx+p4poAAFSlXoL5ZgzKWu17xtmIIH+VZXhGFxds0uA= Subject key identifier: D2:43:CF:0C:78:BA:77:21:DB:CB:B3:8A:48:A6:30:00:12:6F:F1:71 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B477C96DB16EB4F6B50C54300 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cdea2fef-cbf0-3d85-be9a-750e9d547788.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 6167 IP address blocks: 174.221.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:96:db:16:eb:4f:6b:50:c5:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=204b6105-353e-459e-8c30-20176d1fcc98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9a:21:bc:ba:4f:b7:c5:f9:ab:3a:38:ae:41: 6d:cd:f2:d1:9d:03:db:ee:61:a7:6b:bf:be:84:25: 13:2b:fe:f3:89:40:b1:b3:ae:d1:87:38:1f:5f:fe: c3:fe:46:80:12:5a:6e:1f:bd:27:cb:5e:2d:64:77: c9:82:4f:95:96:64:fb:95:87:6f:8c:41:c6:48:02: 2f:85:2d:6c:91:e5:8d:de:92:b7:91:b8:81:22:94: 26:99:6e:79:f7:5c:cb:65:62:01:90:09:44:2f:f6: 79:d5:2b:9c:26:e5:40:24:51:6f:6a:47:6a:0b:c5: dc:ea:4b:a2:79:89:2a:f4:cd:d9:60:25:7e:7b:6e: 47:e5:dc:a5:3d:b8:15:35:bb:c8:41:ce:5f:60:8d: a4:fd:03:e5:8f:a9:99:a1:d5:d7:3f:08:ba:0b:41: 1d:4d:47:6b:83:7c:ab:30:f0:8f:37:f3:f7:32:fa: a2:30:9c:9e:9f:36:cb:66:6a:bc:ce:46:36:94:61: bb:0d:2b:aa:96:79:e2:ce:68:17:31:88:45:54:81: 37:45:90:67:88:c4:5f:25:67:73:a4:8b:1e:57:b7: d3:b5:9f:37:a9:21:67:aa:5b:fa:f0:4e:9d:87:2a: c7:b5:a4:8f:5a:45:4c:32:2f:7a:d9:4f:42:95:f5: 50:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:43:CF:0C:78:BA:77:21:DB:CB:B3:8A:48:A6:30:00:12:6F:F1:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cdea2fef-cbf0-3d85-be9a-750e9d547788.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.221.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:77:8e:53:be:b7:04:8a:ce:82:a0:91:8f:98:24:46:1b:74: a5:71:cd:c2:77:ba:b8:c5:5b:32:5b:03:2e:b3:65:f1:5c:d1: 9f:75:b6:1c:b2:80:f6:79:32:2e:c4:38:74:04:a4:88:46:05: 87:7f:6f:9a:2f:ed:38:f0:34:ad:10:61:55:61:1c:e7:13:95: 4b:22:15:36:83:57:bb:5c:22:33:30:2e:46:c3:f4:53:aa:0b: 34:30:44:21:89:d6:7d:89:f2:97:71:01:43:de:ec:9f:43:2d: 56:ae:70:f5:d2:d3:82:b4:e7:a5:17:65:9c:e8:d2:b7:2e:7c: e1:9d:a4:17:e0:bb:1a:04:96:a0:a1:03:74:c2:e5:45:75:38: 29:e4:3d:e4:b4:5e:08:fc:3f:77:54:66:f5:47:31:e5:6a:ca: 33:b5:96:2f:30:83:4f:34:58:f0:4f:90:64:50:e1:30:e8:13: 0a:3f:ab:27:c6:e0:4d:3c:38:0f:67:87:a1:ec:97:53:39:0c: 56:ec:45:ad:fb:c9:85:9e:ab:be:77:4a:9f:45:fd:d1:da:fe: f4:7f:34:00:2a:4c:cd:e9:99:27:cc:17:24:6f:0b:12:24:c2: 22:61:84:b0:b8:6e:16:ce:74:09:37:a2:4f:60:39:5c:11:d2: d4:3e:79:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfJbbFutPa1DFQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk MjA0YjYxMDUtMzUzZS00NTllLThjMzAtMjAxNzZkMWZjYzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJohvLpPt8X5qzo4rkFtzfLRnQPb7mGna7++ hCUTK/7ziUCxs67RhzgfX/7D/kaAElpuH70ny14tZHfJgk+VlmT7lYdvjEHGSAIv hS1skeWN3pK3kbiBIpQmmW5591zLZWIBkAlEL/Z51SucJuVAJFFvakdqC8Xc6kui eYkq9M3ZYCV+e25H5dylPbgVNbvIQc5fYI2k/QPlj6mZodXXPwi6C0EdTUdrg3yr MPCPN/P3MvqiMJyenzbLZmq8zkY2lGG7DSuqlnnizmgXMYhFVIE3RZBniMRfJWdz pIseV7fTtZ83qSFnqlv68E6dhyrHtaSPWkVMMi962U9ClfVQCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJDzwx4unch28uzikimMAASb/FxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2RlYTJmZWYtY2JmMC0z ZDg1LWJlOWEtNzUwZTlkNTQ3Nzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErt0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGt3jlO+twSKzoKgkY+YJEYbdKVxzcJ3urjFWzJbAy6zZfFc0Z91thyy gPZ5Mi7EOHQEpIhGBYd/b5ov7TjwNK0QYVVhHOcTlUsiFTaDV7tcIjMwLkbD9FOq CzQwRCGJ1n2J8pdxAUPe7J9DLVaucPXS04K056UXZZzo0rcufOGdpBfguxoElqCh A3TC5UV1OCnkPeS0Xgj8P3dUZvVHMeVqyjO1li8wg080WPBPkGRQ4TDoEwo/qyfG 4E08OA9nh6Hsl1M5DFbsRa37yYWeq753Sp9F/dHa/vR/NAAqTM3pmSfMFyRvCxIk wiJhhLC4bhbOdAk3ok9gOVwR0tQ+eYw= -----END CERTIFICATE-----Generated at Fri Oct 10 20:06:57 2025 by rpki-client