$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3268966f-7e93-369c-b103-620eb0e53038.roa File: 3268966f-7e93-369c-b103-620eb0e53038.roa (raw, json) Hash identifier: Ez3qdV2mKdSzoNJNTnnf8eDlkA/w0CvZKcvAc/Z+it8= Subject key identifier: D2:9C:A7:05:B5:1E:D2:63:4B:4B:79:04:DC:7A:EC:BB:A3:2E:98:A3 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D47C4F5477FD3CDB7EA233640 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3268966f-7e93-369c-b103-620eb0e53038.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 6167 IP address blocks: 174.233.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:f5:47:7f:d3:cd:b7:ea:23:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=5c881334-54c1-464e-b236-fc072b836629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b3:5c:03:e0:25:64:8c:c4:d4:19:a0:48:dc: af:14:ba:cd:86:a8:1a:74:03:ae:05:16:33:4a:2a: 30:c4:c9:f1:b8:c6:49:1d:35:1e:78:5d:b3:ff:fb: 38:18:76:36:c0:11:26:43:cf:2d:19:7d:ea:27:0c: 22:d7:87:70:f3:db:39:0a:3f:b4:cc:18:02:43:f6: d4:75:ee:cc:b2:ec:ea:44:e8:59:3f:b0:bf:1a:5b: 32:81:56:b6:a8:17:7b:a0:65:2a:01:94:e4:ba:16: 18:bc:9f:32:3f:7c:70:45:03:81:df:82:bb:49:9c: 60:08:31:2d:a4:3c:39:83:bd:61:47:34:b4:5f:ce: 42:10:a8:0a:41:56:2b:f2:87:6f:7b:d9:91:0f:ba: 40:03:1b:41:46:35:ba:07:53:85:38:d9:b4:45:82: a5:0a:48:3a:c1:3a:e8:b1:e8:5a:a2:55:b9:74:51: a8:53:ad:bc:67:8f:8d:de:00:25:e7:43:84:17:a7: 97:de:8c:af:f0:a8:16:3a:b4:3a:10:a5:fc:ad:32: 25:7d:f3:9c:e7:98:15:b3:8f:f6:91:d6:eb:53:5d: df:05:68:7d:b2:39:4e:91:e0:15:72:58:0e:c4:01: 6d:b1:ee:df:e6:86:1f:f3:64:19:43:f5:1c:1e:e1: 5b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9C:A7:05:B5:1E:D2:63:4B:4B:79:04:DC:7A:EC:BB:A3:2E:98:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3268966f-7e93-369c-b103-620eb0e53038.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.233.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:cd:24:e3:71:11:0c:cc:62:79:54:e7:88:89:1a:a3:9f:2f: 8f:57:95:c7:7d:04:da:f7:4f:19:0a:5d:e9:a4:ed:a0:8d:46: e9:78:f6:d0:60:cc:18:a9:1d:f5:d1:c2:06:71:3f:f0:20:9e: b3:a4:b6:33:88:09:10:3e:3e:82:35:ae:c9:ba:5d:d2:c0:5a: dd:5f:7b:03:65:d5:b8:92:9a:7f:e2:67:16:1e:ad:84:50:cd: 16:6b:66:bb:e4:28:15:af:49:76:86:3b:57:24:0a:5a:1d:c1: de:a6:91:10:94:9a:c6:98:9e:2b:ff:93:01:de:97:60:a3:ba: 9b:76:0f:0e:d1:27:51:64:8f:2c:7d:a9:49:7e:8d:2f:99:0f: 3d:fb:f0:f7:ad:6c:23:00:07:cf:99:2a:e3:25:36:92:02:09: 6c:cf:4a:59:ff:55:17:78:a3:4f:aa:92:cf:02:57:4a:6b:54: 3c:65:33:dc:56:39:26:0e:f3:21:a3:51:2b:0a:6d:bb:1b:80: 61:d0:3c:b2:a7:50:61:8c:1d:ac:9f:2b:fd:a6:04:c3:54:8f: 32:a1:00:32:01:f4:93:2d:cd:4b:27:52:54:40:b5:88:a2:50: 52:72:9d:94:55:fe:81:ff:fa:f6:12:02:9b:c6:62:64:d7:ae: e7:b6:3a:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxPVHf9PNt+ojNkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk NWM4ODEzMzQtNTRjMS00NjRlLWIyMzYtZmMwNzJiODM2NjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybNcA+AlZIzE1BmgSNyvFLrNhqgadAOuBRYz SiowxMnxuMZJHTUeeF2z//s4GHY2wBEmQ88tGX3qJwwi14dw89s5Cj+0zBgCQ/bU de7MsuzqROhZP7C/GlsygVa2qBd7oGUqAZTkuhYYvJ8yP3xwRQOB34K7SZxgCDEt pDw5g71hRzS0X85CEKgKQVYr8odve9mRD7pAAxtBRjW6B1OFONm0RYKlCkg6wTro sehaolW5dFGoU628Z4+N3gAl50OEF6eX3oyv8KgWOrQ6EKX8rTIlffOc55gVs4/2 kdbrU13fBWh9sjlOkeAVclgOxAFtse7f5oYf82QZQ/UcHuFbNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKcpwW1HtJjS0t5BNx67LujLpijMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzI2ODk2NmYtN2U5My0z NjljLWIxMDMtNjIwZWIwZTUzMDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErukQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbNJONxEQzMYnlU54iJGqOfL49Xlcd9BNr3TxkKXemk7aCNRul49tBg zBipHfXRwgZxP/AgnrOktjOICRA+PoI1rsm6XdLAWt1fewNl1biSmn/iZxYerYRQ zRZrZrvkKBWvSXaGO1ckClodwd6mkRCUmsaYniv/kwHel2Cjupt2Dw7RJ1Fkjyx9 qUl+jS+ZDz378PetbCMAB8+ZKuMlNpICCWzPSln/VRd4o0+qks8CV0prVDxlM9xW OSYO8yGjUSsKbbsbgGHQPLKnUGGMHayfK/2mBMNUjzKhADIB9JMtzUsnUlRAtYii UFJynZRV/oH/+vYSApvGYmTXrue2OpE= -----END CERTIFICATE-----Generated at Fri Mar 27 00:53:12 2026 by rpki-client