$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f8942720-130a-31b6-8fc0-d586e4dff4a1.roa File: f8942720-130a-31b6-8fc0-d586e4dff4a1.roa (raw, json) Hash identifier: ypmDYtp/KaXN4PPinnXkevylvsKZYmI+x5pz6qdOuGg= Subject key identifier: B0:78:29:93:A5:42:A4:96:AF:F8:9A:D5:8F:21:18:C8:AB:85:C7:96 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B609CA6EE9DFC3CD0DFBE1BC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f8942720-130a-31b6-8fc0-d586e4dff4a1.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 6167 IP address blocks: 174.220.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:a6:ee:9d:fc:3c:d0:df:be:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=0f4b802a-8df5-483e-8146-814acff5508c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:28:d1:b1:4a:bd:96:b9:81:71:7a:4f:25:f8: e4:ad:a0:56:24:f5:88:75:d6:b0:52:48:7e:f8:28: ea:02:0b:d2:23:e4:f4:4c:84:f8:53:c7:35:4a:77: 5d:0a:dc:39:9e:f8:8d:5f:7e:aa:c5:35:31:a4:a3: 90:88:ff:34:89:81:39:02:7e:38:77:51:3b:44:08: ae:d8:59:78:e2:81:4b:56:1e:2f:88:fe:58:f2:6e: c1:6b:b0:59:e2:7f:90:c8:e6:e9:1c:aa:d7:4f:d6: 6a:38:e3:e6:c5:81:4b:b9:f7:f3:eb:22:04:38:11: 6b:e3:d4:3c:77:6c:a4:63:6a:13:01:a8:65:cb:7d: ec:d8:3e:94:9f:00:f6:25:47:ca:3b:60:7d:b3:ff: bb:a7:af:26:e6:ab:b0:a6:ab:43:81:e1:38:f7:61: fb:38:d2:c8:fb:93:54:7a:91:4e:2a:76:8b:2b:d1: 8b:4d:16:97:92:06:05:d4:0f:95:af:d6:ae:8e:7f: ce:87:fe:f2:0b:2f:9e:70:0b:05:23:cd:6e:1f:7b: 88:3d:06:72:8b:4c:86:a8:9d:18:b2:47:98:a0:7c: 3d:b9:f6:bb:36:3e:8d:e3:09:bc:85:c6:e7:eb:94: 0b:91:dd:20:f4:41:04:97:93:e4:09:ec:56:2d:f5: 52:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:78:29:93:A5:42:A4:96:AF:F8:9A:D5:8F:21:18:C8:AB:85:C7:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f8942720-130a-31b6-8fc0-d586e4dff4a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.220.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:d3:3f:1b:0b:13:89:25:3c:c7:f0:fe:ac:32:20:af:51:7c: 26:64:21:b2:fd:9c:b5:24:14:70:f4:71:5f:a5:ed:d7:6b:4b: eb:fe:19:b4:2e:31:25:25:6a:25:70:bc:b8:f8:17:2e:32:85: f3:6a:17:4c:49:11:dc:31:69:58:dc:98:9f:6c:0e:1c:6d:60: 9f:ef:fe:61:44:77:b8:eb:ba:23:6c:be:76:f4:81:50:30:e9: f6:ab:f5:21:c2:e8:af:12:1a:8e:50:9b:12:50:3e:d3:ad:dd: 3e:a6:70:de:32:d9:5b:3b:51:cd:9e:d5:8b:bb:0c:f3:54:37: aa:9a:76:ba:2d:af:d5:3b:5d:e6:d7:5a:0b:0a:ed:7e:cf:aa: e2:69:aa:5c:c8:ea:fe:23:a6:b3:07:b2:34:d7:ff:f1:06:d9: c5:43:e8:da:5e:07:c8:ad:d5:46:41:09:da:f0:7f:c3:dd:c7: a3:f5:b8:4a:5b:87:5c:f1:b7:4c:fa:e5:92:57:0f:95:03:09: 5b:55:c8:d7:4a:28:b7:63:00:53:06:4e:71:01:7f:ff:12:1b: 65:8d:94:fb:42:2e:76:23:50:20:98:3f:23:a7:c8:f4:0a:bc: ea:5b:5b:20:75:b2:26:ff:5b:5f:e6:b6:e2:a0:ca:b8:14:22: 4e:91:0a:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnKbunfw80N++G8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk MGY0YjgwMmEtOGRmNS00ODNlLTgxNDYtODE0YWNmZjU1MDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArijRsUq9lrmBcXpPJfjkraBWJPWIddawUkh+ +CjqAgvSI+T0TIT4U8c1SnddCtw5nviNX36qxTUxpKOQiP80iYE5An44d1E7RAiu 2Fl44oFLVh4viP5Y8m7Ba7BZ4n+QyObpHKrXT9ZqOOPmxYFLuffz6yIEOBFr49Q8 d2ykY2oTAahly33s2D6UnwD2JUfKO2B9s/+7p68m5quwpqtDgeE492H7ONLI+5NU epFOKnaLK9GLTRaXkgYF1A+Vr9aujn/Oh/7yCy+ecAsFI81uH3uIPQZyi0yGqJ0Y skeYoHw9ufa7Nj6N4wm8hcbn65QLkd0g9EEEl5PkCexWLfVSKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLB4KZOlQqSWr/ia1Y8hGMirhceWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjg5NDI3MjAtMTMwYS0z MWI2LThmYzAtZDU4NmU0ZGZmNGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrTPxsLE4klPMfw/qwyIK9RfCZkIbL9nLUkFHD0cV+l7ddrS+v+GbQu MSUlaiVwvLj4Fy4yhfNqF0xJEdwxaVjcmJ9sDhxtYJ/v/mFEd7jruiNsvnb0gVAw 6far9SHC6K8SGo5QmxJQPtOt3T6mcN4y2Vs7Uc2e1Yu7DPNUN6qadrotr9U7XebX WgsK7X7PquJpqlzI6v4jprMHsjTX//EG2cVD6NpeB8it1UZBCdrwf8Pdx6P1uEpb h1zxt0z65ZJXD5UDCVtVyNdKKLdjAFMGTnEBf/8SG2WNlPtCLnYjUCCYPyOnyPQK vOpbWyB1sib/W1/mtuKgyrgUIk6RCiI= -----END CERTIFICATE-----Generated at Fri Oct 10 17:54:33 2025 by rpki-client