$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1cb32344-435b-37b6-86aa-873adbe9c521.roa File: 1cb32344-435b-37b6-86aa-873adbe9c521.roa (raw, json) Hash identifier: M5dEyIAvfv2mSXU0sRuikIBgqIOhoW9jFbT+Mr7vwNY= Subject key identifier: 97:0F:5D:2E:1F:70:B5:A6:44:83:DB:95:A0:35:EE:DE:C5:A9:1A:96 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D47C4F63B77E142090D245180 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1cb32344-435b-37b6-86aa-873adbe9c521.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 6167 IP address blocks: 174.235.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:f6:3b:77:e1:42:09:0d:24:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=46534c07-a594-49c5-89dc-8cd566246e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:cd:86:59:14:8c:9a:d9:d6:f4:d1:02:2b:aa: 73:0a:01:34:3e:7d:d8:a8:c0:36:29:8c:8a:47:36: 00:5d:ac:bb:75:30:10:ef:cf:48:a9:9a:3f:32:ec: 6f:be:64:b3:63:d3:47:23:aa:0f:38:f6:99:4e:78: 59:1c:3c:f7:e5:e0:df:4c:e5:da:10:f7:4e:b3:fc: d8:20:74:2e:59:bd:6c:50:52:16:17:f2:b1:58:96: b9:1e:89:21:ac:59:51:84:5b:15:bb:c4:ef:8a:35: 24:fa:2c:08:4a:19:31:7b:a7:d1:50:27:d8:0a:5d: 81:20:3d:fb:00:58:c8:4b:ca:c1:8a:75:cb:70:ce: 06:df:9c:95:ad:b8:9d:b4:ef:d5:51:05:15:fb:20: 23:18:47:0c:25:2a:d2:67:d1:4c:32:c8:bc:57:22: ac:9d:f3:ed:5f:a1:33:32:88:e7:35:04:ae:6a:a3: c1:cf:67:f7:2f:a1:23:aa:d0:e0:d7:46:3a:32:81: 05:1a:fb:a1:20:ee:9a:d3:8a:f9:1d:a5:11:cb:77: 8e:68:1c:fe:a3:17:e8:59:4c:20:89:ea:86:30:ca: 44:4c:77:b0:60:d1:de:2e:1d:5f:08:e5:94:63:14: 47:7f:2a:1b:4f:4a:41:e8:b8:ab:a6:22:40:f9:f6: ee:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0F:5D:2E:1F:70:B5:A6:44:83:DB:95:A0:35:EE:DE:C5:A9:1A:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1cb32344-435b-37b6-86aa-873adbe9c521.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.235.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:41:27:c9:62:26:21:c5:d6:40:5d:fc:1c:50:70:23:69:eb: 95:d4:31:59:f8:1b:8b:ae:aa:a1:ff:a9:df:42:3d:04:7b:39: 49:5e:45:4a:15:2a:24:88:2b:37:3e:e6:fe:ab:32:4e:77:89: f3:3e:69:96:b0:9e:f6:b2:dc:29:cd:13:98:b6:96:b2:7e:08: 6f:36:53:49:f3:0e:09:0e:74:8b:15:d0:00:96:cf:77:f7:a9: b9:f0:63:cf:c0:99:83:9d:42:43:09:a5:d7:24:7d:97:2f:bb: 6e:74:91:ce:9f:df:89:75:31:10:e6:b3:e6:a8:bc:f0:49:3c: de:76:4d:ff:51:6f:88:92:99:46:81:e7:bf:8b:1d:98:7c:4a: ac:66:74:59:dc:be:25:5a:fb:a9:4c:5b:66:59:b6:fb:91:9a: 9d:0f:e3:78:f7:e0:3e:f4:ba:88:f5:d7:6d:af:61:07:51:c8: c4:ad:b3:a9:0b:58:a4:d1:16:66:4a:5d:4b:56:06:af:f4:aa: 92:1b:af:95:dd:ca:1f:c5:a1:ef:19:4c:d5:66:5d:7c:6a:56: 61:c8:8f:6d:9e:7d:cd:de:36:a9:33:d1:c6:9d:33:c8:59:8b: 20:7b:a6:d1:10:9e:31:70:f4:87:5d:5d:74:c6:a6:40:44:1e: b5:e2:e9:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxPY7d+FCCQ0kUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk NDY1MzRjMDctYTU5NC00OWM1LTg5ZGMtOGNkNTY2MjQ2ZTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6c2GWRSMmtnW9NECK6pzCgE0Pn3YqMA2KYyK RzYAXay7dTAQ789IqZo/MuxvvmSzY9NHI6oPOPaZTnhZHDz35eDfTOXaEPdOs/zY IHQuWb1sUFIWF/KxWJa5HokhrFlRhFsVu8TvijUk+iwIShkxe6fRUCfYCl2BID37 AFjIS8rBinXLcM4G35yVrbidtO/VUQUV+yAjGEcMJSrSZ9FMMsi8VyKsnfPtX6Ez MojnNQSuaqPBz2f3L6EjqtDg10Y6MoEFGvuhIO6a04r5HaURy3eOaBz+oxfoWUwg ieqGMMpETHewYNHeLh1fCOWUYxRHfyobT0pB6LirpiJA+fbuOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcPXS4fcLWmRIPblaA17t7FqRqWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWNiMzIzNDQtNDM1Yi0z N2I2LTg2YWEtODczYWRiZTljNTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErusgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERBJ8liJiHF1kBd/BxQcCNp65XUMVn4G4uuqqH/qd9CPQR7OUleRUoV KiSIKzc+5v6rMk53ifM+aZawnvay3CnNE5i2lrJ+CG82U0nzDgkOdIsV0ACWz3f3 qbnwY8/AmYOdQkMJpdckfZcvu250kc6f34l1MRDms+aovPBJPN52Tf9Rb4iSmUaB 57+LHZh8SqxmdFncviVa+6lMW2ZZtvuRmp0P43j34D70uoj1122vYQdRyMSts6kL WKTRFmZKXUtWBq/0qpIbr5Xdyh/Foe8ZTNVmXXxqVmHIj22efc3eNqkz0cadM8hZ iyB7ptEQnjFw9IddXXTGpkBEHrXi6Wk= -----END CERTIFICATE-----Generated at Thu Mar 26 18:52:21 2026 by rpki-client