$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f87d194b-3fdb-3588-99aa-d1736f01fe36.roa File: f87d194b-3fdb-3588-99aa-d1736f01fe36.roa (raw, json) Hash identifier: djLOp5C8T4Plsy5c9KKnqSEI1oYqHXtIDsnDua9YtKc= Subject key identifier: 79:19:7D:F0:86:47:D8:1B:FF:C5:1D:17:D4:47:EE:5D:EA:96:66:39 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B609C998129C35F751AFD3A80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f87d194b-3fdb-3588-99aa-d1736f01fe36.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 6167 IP address blocks: 174.203.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:99:81:29:c3:5f:75:1a:fd:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=9417a7a4-1faf-4929-ba31-56cf297fcae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f2:34:13:a1:9a:ee:e3:f4:3d:85:ce:9e:11: 17:24:17:30:01:32:78:0c:a3:21:5a:d5:16:22:53: db:2b:cf:1d:34:cc:9c:e4:e4:f9:af:a0:eb:2f:bd: 3b:3a:3a:14:34:62:8a:af:18:24:9b:b2:aa:6d:9f: d7:8d:54:96:1e:9f:c7:f6:dd:39:c4:82:82:85:d9: 4e:77:6b:10:d4:24:ff:da:09:7a:07:a9:9d:71:18: e8:07:20:05:7f:90:13:80:c3:cf:db:de:ee:ac:ba: d0:c2:38:87:ea:12:c6:e1:ee:26:b8:61:98:3b:b9: 16:82:81:20:49:de:b6:b1:db:fa:ce:1a:1a:cf:ab: 44:a8:b3:b6:1f:57:8f:d9:54:0d:f4:96:5d:a3:7e: 5a:21:4d:f1:c5:9c:f6:a5:c8:69:48:9d:a8:0e:b2: 0e:a6:38:aa:a4:7e:62:c7:c8:af:b9:6b:06:5b:8d: 45:d5:58:7a:c7:a3:01:dd:a7:9c:a7:77:27:76:5d: e7:78:33:c9:ad:f8:c4:1d:ef:79:70:66:72:21:a9: c4:df:fb:00:db:b0:66:8b:17:12:3a:0d:db:cf:18: 22:3b:1a:9c:92:a0:8e:3c:99:43:7d:4e:b4:fa:ce: 9f:32:ef:3b:8e:5f:54:90:94:30:cf:35:ac:65:da: 72:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:19:7D:F0:86:47:D8:1B:FF:C5:1D:17:D4:47:EE:5D:EA:96:66:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f87d194b-3fdb-3588-99aa-d1736f01fe36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.203.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:30:4f:58:57:44:c8:47:35:90:65:cd:62:58:ba:d0:39:ae: 1a:87:83:42:ac:5b:2e:cd:fa:34:ee:9b:95:a8:cf:3b:a1:23: 0f:6b:11:1c:fe:45:df:10:38:16:aa:02:74:72:19:10:ac:0c: 75:2f:82:c3:03:98:23:84:78:06:ff:bf:8c:da:91:73:11:50: 54:e0:46:f6:0a:3c:8f:6b:d9:68:97:57:3d:6b:9e:6c:69:14: 39:5d:3e:ed:91:b4:f5:f6:1f:35:7d:16:eb:02:51:a0:60:af: 99:9e:29:95:f6:e1:1b:cd:55:2e:4c:29:bc:d5:69:46:1e:19: 00:11:c7:29:7c:3e:88:9b:6e:33:29:a7:24:4d:98:7c:6d:0c: 6f:71:e0:33:9e:0a:4b:91:46:cb:30:06:c6:f8:fc:44:24:44: 8a:2a:00:33:63:4f:9e:f4:01:7e:2b:c8:62:da:da:80:e6:09: f8:fe:71:c3:25:f6:7a:f0:cb:69:40:b7:29:e1:fe:6e:1e:d2: 8b:c9:87:15:1a:d9:11:b9:13:6e:d4:c8:92:7c:9f:f9:0d:b5: 40:e3:e0:f0:fe:04:46:48:ef:c1:c7:c0:2c:68:df:4d:85:b9: f7:ce:9d:b0:83:80:e2:09:40:b4:4c:4a:35:1c:d5:14:ff:2c: 3a:57:25:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnJmBKcNfdRr9OoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk OTQxN2E3YTQtMWZhZi00OTI5LWJhMzEtNTZjZjI5N2ZjYWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/I0E6Ga7uP0PYXOnhEXJBcwATJ4DKMhWtUW IlPbK88dNMyc5OT5r6DrL707OjoUNGKKrxgkm7KqbZ/XjVSWHp/H9t05xIKChdlO d2sQ1CT/2gl6B6mdcRjoByAFf5ATgMPP297urLrQwjiH6hLG4e4muGGYO7kWgoEg Sd62sdv6zhoaz6tEqLO2H1eP2VQN9JZdo35aIU3xxZz2pchpSJ2oDrIOpjiqpH5i x8ivuWsGW41F1Vh6x6MB3aecp3cndl3neDPJrfjEHe95cGZyIanE3/sA27BmixcS Og3bzxgiOxqckqCOPJlDfU60+s6fMu87jl9UkJQwzzWsZdpy9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkZffCGR9gb/8UdF9RH7l3qlmY5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjg3ZDE5NGItM2ZkYi0z NTg4LTk5YWEtZDE3MzZmMDFmZTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErsvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8wT1hXRMhHNZBlzWJYutA5rhqHg0KsWy7N+jTum5WozzuhIw9rERz+ Rd8QOBaqAnRyGRCsDHUvgsMDmCOEeAb/v4zakXMRUFTgRvYKPI9r2WiXVz1rnmxp FDldPu2RtPX2HzV9FusCUaBgr5meKZX24RvNVS5MKbzVaUYeGQARxyl8PoibbjMp pyRNmHxtDG9x4DOeCkuRRsswBsb4/EQkRIoqADNjT570AX4ryGLa2oDmCfj+ccMl 9nrwy2lAtynh/m4e0ovJhxUa2RG5E27UyJJ8n/kNtUDj4PD+BEZI78HHwCxo302F uffOnbCDgOIJQLRMSjUc1RT/LDpXJVs= -----END CERTIFICATE-----Generated at Fri Oct 10 22:04:30 2025 by rpki-client