$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e2927695-f948-3f88-a0ba-7cd151a55823.roa File: e2927695-f948-3f88-a0ba-7cd151a55823.roa (raw, json) Hash identifier: eKiiGjX5kmN0GU8z7urauKuqIOVT+XT5tKjj+Lx/rN4= Subject key identifier: 17:89:48:2F:F3:FA:5E:67:68:27:81:DD:A1:89:D0:CC:40:91:8E:A1 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B609CA35D2EA60136747CFBC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e2927695-f948-3f88-a0ba-7cd151a55823.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 6167 IP address blocks: 174.218.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:a3:5d:2e:a6:01:36:74:7c:fb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=1f4d92aa-0ba3-4ac2-a995-0c4061ff0f56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c4:37:d8:32:e1:48:8f:1e:a0:90:92:eb:07: 96:26:c4:e5:1f:a1:ec:1d:dd:09:6e:7a:e6:1c:34: e4:92:7c:c7:66:1b:53:11:81:d2:be:ca:c0:c8:b2: 71:9f:4c:d9:b9:e4:d0:6f:f1:8b:8f:cc:4a:91:6e: f5:ed:27:07:a7:b7:75:41:fa:b3:ae:3d:c6:56:e7: 9f:88:4a:c9:72:de:40:49:86:16:28:ea:e9:0d:a9: 44:a0:10:79:43:26:b2:c0:06:0c:81:06:35:48:1c: a7:21:c3:a8:28:93:e6:bb:86:57:15:5e:a5:8b:65: 26:98:70:b4:11:2e:ac:79:87:a3:05:d8:1f:ff:84: 94:02:de:07:32:32:2d:a8:c7:3e:83:7b:a3:29:d3: c9:e8:be:5a:0e:8e:83:0f:e8:ac:e0:16:04:c9:da: b9:ba:51:a5:16:84:05:38:93:28:46:6d:fc:9b:fa: d5:c6:a1:85:ca:54:38:54:50:e6:91:a8:93:c2:be: 9b:fb:1b:e1:04:98:89:db:3c:a5:c1:bf:7f:eb:76: 5c:95:72:74:60:59:80:17:fe:8d:43:2e:ab:35:bc: 43:27:ec:d0:e8:53:fb:b4:24:85:07:e7:53:39:2f: 99:37:cd:2e:45:ea:ed:7a:bd:e7:d2:97:65:01:e8: 1a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:89:48:2F:F3:FA:5E:67:68:27:81:DD:A1:89:D0:CC:40:91:8E:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e2927695-f948-3f88-a0ba-7cd151a55823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.218.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:ec:cd:43:16:84:8a:09:2f:9a:08:c4:27:a8:64:4d:4a:40: 4d:2f:a0:5c:52:fc:c7:1d:13:28:e2:e7:0b:f3:12:26:a6:19: 8b:3e:7b:dd:31:b6:d8:22:45:10:2c:09:87:51:5c:79:6e:e2: 87:b3:d2:08:23:a4:ae:2f:4e:e9:0d:b9:81:01:25:a3:6a:61: 70:4f:7f:48:13:55:93:f7:07:ce:72:87:1b:91:ae:f2:42:af: fe:4b:c1:5e:66:bd:86:67:b3:be:58:0a:81:bd:47:1d:d7:2a: 1d:ff:6b:6d:9e:86:ce:ca:1f:57:d7:76:0c:c4:11:86:ee:39: a8:29:1e:b5:66:70:b8:0c:20:53:02:c5:bb:fc:cc:a9:7f:cb: fd:98:08:93:55:c4:e1:8b:25:9f:53:28:85:94:fa:d3:36:00: a5:b6:4d:d2:c2:3a:f6:25:e2:eb:58:e1:31:b8:f4:14:d9:26: 8a:91:a5:48:c1:4d:ed:b8:ea:95:ba:3a:3c:34:ab:b2:b7:2d: af:b0:cb:62:fa:1d:6d:e0:0d:af:6a:a2:ed:81:14:ee:02:26: 5e:88:27:4a:b7:20:7d:b7:25:06:42:e0:c8:6e:3a:5a:9d:1b: 24:e0:30:f1:37:ce:ce:49:0c:84:b8:0c:0c:75:a8:52:ec:85: a4:c3:b5:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnKNdLqYBNnR8+8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk MWY0ZDkyYWEtMGJhMy00YWMyLWE5OTUtMGM0MDYxZmYwZjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsQ32DLhSI8eoJCS6weWJsTlH6HsHd0Jbnrm HDTkknzHZhtTEYHSvsrAyLJxn0zZueTQb/GLj8xKkW717ScHp7d1Qfqzrj3GVuef iErJct5ASYYWKOrpDalEoBB5QyaywAYMgQY1SBynIcOoKJPmu4ZXFV6li2UmmHC0 ES6seYejBdgf/4SUAt4HMjItqMc+g3ujKdPJ6L5aDo6DD+is4BYEydq5ulGlFoQF OJMoRm38m/rVxqGFylQ4VFDmkaiTwr6b+xvhBJiJ2zylwb9/63ZclXJ0YFmAF/6N Qy6rNbxDJ+zQ6FP7tCSFB+dTOS+ZN80uRerter3n0pdlAega3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeJSC/z+l5naCeB3aGJ0MxAkY6hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTI5Mjc2OTUtZjk0OC0z Zjg4LWEwYmEtN2NkMTUxYTU1ODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrtrQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnszUMWhIoJL5oIxCeoZE1KQE0voFxS/McdEyji5wvzEiamGYs+e90x ttgiRRAsCYdRXHlu4oez0ggjpK4vTukNuYEBJaNqYXBPf0gTVZP3B85yhxuRrvJC r/5LwV5mvYZns75YCoG9Rx3XKh3/a22ehs7KH1fXdgzEEYbuOagpHrVmcLgMIFMC xbv8zKl/y/2YCJNVxOGLJZ9TKIWU+tM2AKW2TdLCOvYl4utY4TG49BTZJoqRpUjB Te246pW6Ojw0q7K3La+wy2L6HW3gDa9qou2BFO4CJl6IJ0q3IH23JQZC4MhuOlqd GyTgMPE3zs5JDIS4DAx1qFLshaTDtZw= -----END CERTIFICATE-----Generated at Fri Oct 10 20:01:09 2025 by rpki-client