$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/19440c86-5c4c-3db0-af38-2b6f6718033c.roa File: 19440c86-5c4c-3db0-af38-2b6f6718033c.roa (raw, json) Hash identifier: sXQZmLPN12oZjFuYD2uNIJpsJgpUIsAiyLrGY7Ubzmo= Subject key identifier: 5B:4C:B6:1A:DD:96:3F:23:27:51:C4:2E:6A:EF:49:E6:A4:C0:1F:7D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D47C4FA0064A35A1C8152A880 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/19440c86-5c4c-3db0-af38-2b6f6718033c.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 6167 IP address blocks: 174.239.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:fa:00:64:a3:5a:1c:81:52:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=a5dd2f3b-39af-41bf-a862-aeb38b6de144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:79:39:95:6a:fa:85:3b:d3:4a:10:4f:36:10: e6:97:65:7a:cb:f8:c1:ac:02:2b:71:b7:cc:0a:a6: 16:f7:97:58:54:68:c3:12:26:20:1a:c7:10:c7:66: 7b:67:4d:b5:b2:ef:60:fd:f3:1a:3a:1b:b9:e1:69: e1:8c:8f:bf:a9:8a:fd:96:ba:a3:e9:28:95:05:4b: b1:cd:f5:a7:50:7e:9c:10:30:99:ab:2e:cc:05:19: 69:07:c5:bd:10:ef:9e:1f:a8:15:72:03:df:7c:6c: a6:e6:1b:c2:08:b6:f3:32:84:f2:ed:d6:77:c4:00: fe:54:cf:38:a6:a3:ac:8b:92:12:43:20:eb:68:32: 01:d1:aa:f7:f7:24:72:8b:4e:f5:43:fa:66:5f:24: 75:39:01:10:18:28:5f:e7:3b:cf:76:9d:59:2e:b5: 9f:8d:46:03:65:fd:1e:de:f0:55:25:2f:28:b8:f6: 5c:ad:76:85:a7:ff:fa:18:44:29:bc:5a:b9:d2:06: ee:77:1d:a1:0a:dc:41:3f:a2:51:10:cb:89:9f:d1: 2a:38:b1:26:a8:78:e5:d5:e0:5f:b1:16:0c:ea:ef: 52:4c:1c:89:ac:45:50:52:bf:2d:95:f2:3a:c4:6f: 96:aa:78:ba:ed:b8:42:94:36:5b:f7:87:fc:29:2b: 72:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:4C:B6:1A:DD:96:3F:23:27:51:C4:2E:6A:EF:49:E6:A4:C0:1F:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/19440c86-5c4c-3db0-af38-2b6f6718033c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.239.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:38:ca:23:80:dc:b7:f6:d0:50:53:74:44:38:f3:0d:08:c9: fc:a4:97:9a:41:96:08:fb:6e:0b:25:5a:e2:0c:34:19:03:b4: 8a:a6:2c:83:64:dc:cb:d8:1b:f0:9c:38:ca:f5:7e:7f:63:e7: 70:7f:cd:11:ca:d9:0e:c3:9e:da:58:37:1c:41:cd:e9:05:a0: 7d:63:ef:5c:a7:ab:c9:f3:91:3e:77:aa:ff:6e:39:07:d1:5a: 68:e9:4f:2a:8d:88:f4:03:29:04:bd:06:fd:13:0b:b6:52:2a: 49:b0:27:61:cb:9c:24:99:84:e3:b7:38:ac:02:46:43:19:e1: cf:6a:91:6c:15:c1:52:1c:ab:44:27:11:35:17:3b:eb:2b:12: f0:dd:fe:a0:47:63:4e:f7:9f:33:c3:a1:be:77:0b:ed:62:fe: fe:a8:8f:bf:60:a4:dc:04:1d:46:2f:6b:13:ce:da:61:75:54: 47:f2:88:f8:d3:82:74:46:14:0b:29:fb:c4:14:b9:07:66:fd: de:3d:d3:76:e9:d4:04:76:9e:05:0a:35:58:f9:c2:89:27:46: ac:aa:ff:1d:fb:bb:d9:1a:d6:46:2b:0a:fb:93:4c:b9:3d:b6: 31:2b:b5:16:f7:6d:32:f5:b5:d7:0e:b3:fb:89:c1:16:ae:73: 85:ea:f0:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxPoAZKNaHIFSqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk YTVkZDJmM2ItMzlhZi00MWJmLWE4NjItYWViMzhiNmRlMTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHk5lWr6hTvTShBPNhDml2V6y/jBrAIrcbfM CqYW95dYVGjDEiYgGscQx2Z7Z021su9g/fMaOhu54WnhjI+/qYr9lrqj6SiVBUux zfWnUH6cEDCZqy7MBRlpB8W9EO+eH6gVcgPffGym5hvCCLbzMoTy7dZ3xAD+VM84 pqOsi5ISQyDraDIB0ar39yRyi071Q/pmXyR1OQEQGChf5zvPdp1ZLrWfjUYDZf0e 3vBVJS8ouPZcrXaFp//6GEQpvFq50gbudx2hCtxBP6JREMuJn9EqOLEmqHjl1eBf sRYM6u9STByJrEVQUr8tlfI6xG+Wqni67bhClDZb94f8KStyAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtMthrdlj8jJ1HELmrvSeakwB99MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTk0NDBjODYtNWM0Yy0z ZGIwLWFmMzgtMmI2ZjY3MTgwMzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEru8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF44yiOA3Lf20FBTdEQ48w0Iyfykl5pBlgj7bgslWuIMNBkDtIqmLINk 3MvYG/CcOMr1fn9j53B/zRHK2Q7DntpYNxxBzekFoH1j71ynq8nzkT53qv9uOQfR WmjpTyqNiPQDKQS9Bv0TC7ZSKkmwJ2HLnCSZhOO3OKwCRkMZ4c9qkWwVwVIcq0Qn ETUXO+srEvDd/qBHY073nzPDob53C+1i/v6oj79gpNwEHUYvaxPO2mF1VEfyiPjT gnRGFAsp+8QUuQdm/d4903bp1AR2ngUKNVj5woknRqyq/x37u9ka1kYrCvuTTLk9 tjErtRb3bTL1tdcOs/uJwRauc4Xq8Dg= -----END CERTIFICATE-----Generated at Thu Mar 26 03:59:51 2026 by rpki-client