$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11d8a3d0-98c1-37fd-b666-6e0af3b228e6.roa File: 11d8a3d0-98c1-37fd-b666-6e0af3b228e6.roa (raw, json) Hash identifier: zsdIIm3SFHPz+oweKpAcnYTWpETuletPwPaX+WWViL8= Subject key identifier: AF:15:46:C3:C1:81:EB:89:28:4B:D4:14:C3:8B:53:6B:C1:21:9E:CC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F4C3D60BC17D367BADF0CBA00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11d8a3d0-98c1-37fd-b666-6e0af3b228e6.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 6167 IP address blocks: 174.220.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:60:bc:17:d3:67:ba:df:0c:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=def29ce6-7db1-4d18-83fe-fa2d9c40a4e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:41:cf:15:22:5c:6a:80:95:9d:fb:23:b6:df: a8:ea:76:73:39:37:b2:3e:76:1a:89:3f:b7:45:bd: 98:f7:25:60:5c:51:15:20:3f:32:2b:28:94:9e:dd: 5d:e3:23:a5:8a:4b:f3:7e:be:3f:bf:04:6a:2c:04: 14:e7:96:76:81:93:40:4d:b7:8a:55:86:d6:4e:1b: a7:68:2b:7e:f6:5d:c4:ee:7f:f8:0e:4c:ad:62:ef: b3:21:06:95:1d:fd:cb:5a:47:3b:fa:86:f4:c1:de: b9:9c:3b:b7:70:56:0b:e4:e3:18:2f:1e:a1:a6:f7: b2:5e:81:cb:f2:a2:94:82:bd:fc:8b:35:d5:aa:d6: 0e:4a:ef:90:8f:7a:5e:a2:47:4e:bd:47:72:ab:92: be:e1:b0:57:27:a8:18:99:35:3e:1b:92:8a:1d:95: cf:93:4c:1c:fb:c0:80:60:a7:17:b8:62:04:0f:c5: 1d:dc:32:e1:3f:24:bb:67:f3:09:1f:29:3d:a8:76: 48:62:b4:6c:22:45:94:5c:70:ad:63:c4:10:ef:9f: ba:c9:ba:31:9f:5a:81:91:8d:15:3b:43:31:57:ef: f4:70:4c:70:50:0c:f3:55:c2:4b:2e:18:8a:69:28: 1c:d0:ac:5f:53:31:45:28:d1:b4:d4:33:2c:6d:4f: c1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:15:46:C3:C1:81:EB:89:28:4B:D4:14:C3:8B:53:6B:C1:21:9E:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11d8a3d0-98c1-37fd-b666-6e0af3b228e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.220.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:ad:4d:d1:23:4f:40:bb:1a:2e:9a:ea:22:79:62:14:97:17: 0c:0a:77:a0:ad:97:be:25:f7:c6:e8:2c:4a:4d:96:5c:bf:4a: 92:db:8b:d4:c6:0f:ea:49:3d:04:c2:40:33:c9:cd:04:5d:78: 09:74:c6:b4:9c:ac:37:a4:a4:2d:91:43:fb:d6:bf:6c:17:5e: df:21:fe:2b:a1:80:4d:94:17:d5:04:bf:4d:ae:db:cc:e1:52: 1e:5a:b5:52:99:9c:50:fb:16:ab:ea:32:d6:c0:41:96:d8:61: 74:05:e3:88:d3:e5:b7:65:e1:26:07:4c:38:01:53:dc:08:5f: e8:6e:3b:cb:61:ce:7e:66:69:da:5c:60:9f:e9:6c:5f:d6:1c: b0:57:a0:1c:94:f2:d3:b1:6d:66:66:d9:75:33:ef:53:28:e2: f3:12:62:59:8f:72:5f:18:cb:cc:96:e4:fb:7c:35:aa:af:9c: 56:ea:65:4e:bd:50:a6:2c:08:f8:a2:b5:86:f2:52:57:62:0f: 0f:b8:93:e5:59:f1:f8:9b:df:a7:e7:3d:5d:d3:b1:d8:60:b4: 27:6e:db:e4:32:93:cc:8a:0e:07:2a:e4:1f:a3:33:eb:d3:88: 18:8e:3b:51:82:53:4b:a8:9e:e0:d5:37:2b:32:aa:63:9e:2d: 59:40:a6:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPWC8F9Nnut8MugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZGVmMjljZTYtN2RiMS00ZDE4LTgzZmUtZmEyZDljNDBhNGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0HPFSJcaoCVnfsjtt+o6nZzOTeyPnYaiT+3 Rb2Y9yVgXFEVID8yKyiUnt1d4yOlikvzfr4/vwRqLAQU55Z2gZNATbeKVYbWThun aCt+9l3E7n/4DkytYu+zIQaVHf3LWkc7+ob0wd65nDu3cFYL5OMYLx6hpveyXoHL 8qKUgr38izXVqtYOSu+Qj3peokdOvUdyq5K+4bBXJ6gYmTU+G5KKHZXPk0wc+8CA YKcXuGIED8Ud3DLhPyS7Z/MJHyk9qHZIYrRsIkWUXHCtY8QQ75+6yboxn1qBkY0V O0MxV+/0cExwUAzzVcJLLhiKaSgc0KxfUzFFKNG01DMsbU/BzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8VRsPBgeuJKEvUFMOLU2vBIZ7MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTFkOGEzZDAtOThjMS0z N2ZkLWI2NjYtNmUwYWYzYjIyOGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGitTdEjT0C7Gi6a6iJ5YhSXFwwKd6Ctl74l98boLEpNlly/SpLbi9TG D+pJPQTCQDPJzQRdeAl0xrScrDekpC2RQ/vWv2wXXt8h/iuhgE2UF9UEv02u28zh Uh5atVKZnFD7FqvqMtbAQZbYYXQF44jT5bdl4SYHTDgBU9wIX+huO8thzn5madpc YJ/pbF/WHLBXoByU8tOxbWZm2XUz71Mo4vMSYlmPcl8Yy8yW5Pt8NaqvnFbqZU69 UKYsCPiitYbyUldiDw+4k+VZ8fib36fnPV3TsdhgtCdu2+Qyk8yKDgcq5B+jM+vT iBiOO1GCU0uonuDVNysyqmOeLVlAprs= -----END CERTIFICATE-----Generated at Sat Sep 26 10:59:48 2026 by rpki-client