$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff94214e-ec50-391b-8867-d06cd6e7d1f0.roa File: ff94214e-ec50-391b-8867-d06cd6e7d1f0.roa (raw, json) Hash identifier: 4sTWjlkA4he9AT02Fo+9600Ekssmeh+0Zy9g7QNjnUE= Subject key identifier: BA:5B:1C:7D:B6:0C:33:55:86:59:3F:17:EE:F9:4B:8E:3B:2F:86:1F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584B609C9F25E10FB62CB8600F80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff94214e-ec50-391b-8867-d06cd6e7d1f0.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 6167 IP address blocks: 174.214.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:9f:25:e1:0f:b6:2c:b8:60:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=bd04f9e0-a345-4f4e-90dd-2d7323316b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:21:70:1d:ee:27:dc:89:3e:88:be:23:91:6b: 02:cb:b4:d6:81:8a:18:37:aa:84:eb:8a:f2:17:65: 4c:b2:ea:82:4c:7c:53:c1:96:7f:e8:ca:9f:66:af: f6:e6:ea:a0:c3:21:0e:8d:c3:a5:68:cb:84:4c:d1: c4:4c:ad:ec:f4:d2:4f:05:29:83:ee:e5:28:af:1a: bc:3c:d8:5b:13:b7:68:7a:a1:23:dd:f5:84:22:d8: a3:a1:ed:0c:98:fd:03:23:1d:c1:4e:4e:e0:7a:69: b1:41:22:91:8a:1f:6f:8c:ca:38:ea:0b:98:ef:06: 03:86:24:49:97:b9:4b:a6:20:86:01:71:b6:b2:a5: 90:b9:4c:86:d3:8e:fd:10:29:27:74:f2:6e:69:96: 4b:53:d4:5b:47:dd:60:bf:dc:72:21:3f:a0:0c:35: b2:c6:fb:43:a1:9c:0f:11:72:63:32:6b:7f:ec:4a: 9c:5d:0a:8a:e5:3c:3e:2f:9d:34:c6:19:d2:0a:63: 61:55:9e:d7:fb:93:27:bc:a5:b4:56:c4:32:2a:bd: db:56:61:33:a2:35:54:fd:25:8e:5e:c6:47:49:6a: e4:be:7e:29:bf:5b:c2:03:74:fc:50:fe:c7:08:26: 20:05:93:ce:f3:30:32:1e:26:54:3d:dc:48:e9:5c: 0b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:5B:1C:7D:B6:0C:33:55:86:59:3F:17:EE:F9:4B:8E:3B:2F:86:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ff94214e-ec50-391b-8867-d06cd6e7d1f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.214.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:c4:db:0d:f8:09:0c:2b:f0:c6:a5:72:4a:5f:67:f8:41:98: 4e:e7:95:d4:7f:d6:33:ca:14:cb:81:99:8a:3f:70:9b:6d:d2: 07:55:99:76:28:ed:e2:4b:4f:c6:6b:04:f1:81:8b:97:c4:39: 20:e1:6c:6c:e1:e0:cd:6b:01:9a:ce:dc:a8:3c:a0:81:94:3b: 25:ba:4e:fc:4f:e8:ca:ac:f9:6f:b4:b8:44:67:25:a4:e5:32: 8a:c2:f7:d2:f0:dc:d7:10:07:d4:8e:95:59:0a:4e:7e:e9:a7: 4b:c5:99:0b:7f:4d:7f:02:4c:4e:9e:97:61:28:dc:01:4e:6e: a0:75:59:f6:16:ee:e7:9a:99:8c:22:90:3d:10:ba:30:52:de: b6:b4:e0:ac:ad:b5:5d:24:b9:b9:e8:de:21:da:24:3c:eb:d8: 35:d6:e7:d5:e7:02:45:56:49:69:fb:8d:0c:5c:68:8c:09:f4: 9a:11:76:51:34:97:2f:31:21:d6:06:7c:07:5f:1a:9d:52:aa: 42:75:cb:6a:0e:e6:2f:ae:be:71:34:aa:8d:00:cc:14:2c:8b: a3:6f:17:07:ef:27:26:f4:6d:31:06:06:9d:db:f1:83:dc:ba: 44:de:36:c6:c2:37:2d:94:1b:0f:d5:3d:09:4c:c7:d9:6a:9c: 85:97:af:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnJ8l4Q+2LLhgD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk YmQwNGY5ZTAtYTM0NS00ZjRlLTkwZGQtMmQ3MzIzMzE2YjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSFwHe4n3Ik+iL4jkWsCy7TWgYoYN6qE64ry F2VMsuqCTHxTwZZ/6MqfZq/25uqgwyEOjcOlaMuETNHETK3s9NJPBSmD7uUorxq8 PNhbE7doeqEj3fWEItijoe0MmP0DIx3BTk7gemmxQSKRih9vjMo46guY7wYDhiRJ l7lLpiCGAXG2sqWQuUyG0479ECkndPJuaZZLU9RbR91gv9xyIT+gDDWyxvtDoZwP EXJjMmt/7EqcXQqK5Tw+L500xhnSCmNhVZ7X+5MnvKW0VsQyKr3bVmEzojVU/SWO XsZHSWrkvn4pv1vCA3T8UP7HCCYgBZPO8zAyHiZUPdxI6VwLtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpbHH22DDNVhlk/F+75S447L4YfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmY5NDIxNGUtZWM1MC0z OTFiLTg4NjctZDA2Y2Q2ZTdkMWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrtb4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzE2w34CQwr8MalckpfZ/hBmE7nldR/1jPKFMuBmYo/cJtt0gdVmXYo 7eJLT8ZrBPGBi5fEOSDhbGzh4M1rAZrO3Kg8oIGUOyW6TvxP6Mqs+W+0uERnJaTl MorC99Lw3NcQB9SOlVkKTn7pp0vFmQt/TX8CTE6el2Eo3AFObqB1WfYW7ueamYwi kD0QujBS3ra04KyttV0kubno3iHaJDzr2DXW59XnAkVWSWn7jQxcaIwJ9JoRdlE0 ly8xIdYGfAdfGp1SqkJ1y2oO5i+uvnE0qo0AzBQsi6NvFwfvJyb0bTEGBp3b8YPc ukTeNsbCNy2UGw/VPQlMx9lqnIWXr2I= -----END CERTIFICATE-----Generated at Fri Oct 10 22:17:09 2025 by rpki-client