$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33a022b9-ff6c-36b7-a569-728f8eade3ac.roa File: 33a022b9-ff6c-36b7-a569-728f8eade3ac.roa (raw, json) Hash identifier: FUwf/QY8OM+oJTr5BQFiE8Es/ZtGjR33yGe/ukMaMyQ= Subject key identifier: FF:9D:50:E0:97:02:01:22:B0:34:D7:8E:32:60:0D:10:FD:69:DE:53 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D47C4FDA6FE4A3644ADABAE00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33a022b9-ff6c-36b7-a569-728f8eade3ac.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 6167 IP address blocks: 174.243.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:fd:a6:fe:4a:36:44:ad:ab:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=46f7c53c-aac1-477a-af7b-cbb3c5bfb341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9b:98:13:a0:70:71:4f:67:d3:26:1f:90:40: 20:87:16:d7:46:c4:03:58:12:2d:ca:5e:0d:9d:86: 68:11:ec:15:bd:be:58:8a:2d:9e:b0:15:05:36:7b: db:7e:f8:c4:5c:b7:61:4c:0c:74:ca:19:3c:29:7d: 31:73:82:b0:67:da:c1:bd:70:47:a7:da:13:e9:68: 54:36:33:ba:7f:52:55:ac:60:e8:ee:1b:0f:25:4a: 67:6d:79:30:b8:e4:89:d3:5b:3f:43:f9:cc:c6:b3: e6:df:57:fa:d3:ca:6e:c5:43:2e:70:a8:62:e6:79: 9e:9c:8b:5d:03:a5:bc:9c:f0:ea:d0:c7:63:7a:12: 73:91:42:cf:53:47:2b:36:94:b3:27:8b:d8:f1:4a: 1f:ed:57:58:c7:10:b4:7a:58:5b:71:51:2d:1c:c9: 2d:0a:66:de:68:1e:7e:c1:f7:ff:d0:1f:79:fc:df: 7b:2e:a5:3b:21:7f:a6:ac:d7:d1:21:b9:17:ed:47: 09:9d:4a:7b:34:ff:1d:0d:79:d1:c9:44:ca:61:fc: 0d:1f:c1:d6:66:2d:59:b8:16:76:cf:5f:6e:71:ad: 93:a5:fa:b5:6e:60:1d:79:7c:7b:a6:ee:94:73:1b: ba:c2:bf:06:e8:7a:2d:71:ca:e8:d3:2f:76:51:02: f1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:9D:50:E0:97:02:01:22:B0:34:D7:8E:32:60:0D:10:FD:69:DE:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33a022b9-ff6c-36b7-a569-728f8eade3ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.243.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:d5:b8:53:bd:c0:23:6b:68:7e:2b:da:f3:3c:0a:4b:17:75: d5:cf:9e:54:eb:61:28:b3:b4:e2:fa:ec:88:2b:3b:8e:da:d5: cd:23:0a:1e:2b:3e:86:8b:12:94:ad:ea:85:3a:9a:f1:3f:f7: f0:49:e1:67:db:9d:94:3e:cc:6f:c2:a3:0f:3f:09:7a:14:11: e9:fb:bf:fb:8f:5b:a3:62:2a:95:0a:cd:ec:c3:c9:7b:45:d4: 7a:89:8d:c1:59:af:83:02:83:12:53:ce:67:51:fc:0c:39:4a: e5:15:f9:06:6e:f7:c6:60:9b:8e:55:dc:4a:75:8c:7f:5a:9c: ea:bd:bc:38:28:54:4b:c6:58:bd:25:56:8b:57:44:ce:24:b5: d9:5b:24:e3:12:ce:8a:07:26:a3:d8:ce:7d:30:3b:4d:8f:61: 08:a6:f1:5c:d8:41:28:e9:fe:a6:e7:30:ab:a7:03:da:f4:b3: 58:87:bb:c0:63:44:5a:3c:e7:3f:0e:0e:76:b5:25:eb:b6:93: 26:7c:f5:1b:ba:48:40:c4:3a:6d:bc:e2:dc:f6:e2:d5:f6:fc: ac:e6:08:9f:b5:c7:05:c9:51:40:80:a9:77:da:c5:0d:43:16: 99:20:8b:bf:33:b2:8f:62:24:80:e9:bc:33:10:c4:9b:59:d1: e1:ab:4b:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxP2m/ko2RK2rrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk NDZmN2M1M2MtYWFjMS00NzdhLWFmN2ItY2JiM2M1YmZiMzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5uYE6BwcU9n0yYfkEAghxbXRsQDWBItyl4N nYZoEewVvb5Yii2esBUFNnvbfvjEXLdhTAx0yhk8KX0xc4KwZ9rBvXBHp9oT6WhU NjO6f1JVrGDo7hsPJUpnbXkwuOSJ01s/Q/nMxrPm31f608puxUMucKhi5nmenItd A6W8nPDq0MdjehJzkULPU0crNpSzJ4vY8Uof7VdYxxC0elhbcVEtHMktCmbeaB5+ wff/0B95/N97LqU7IX+mrNfRIbkX7UcJnUp7NP8dDXnRyUTKYfwNH8HWZi1ZuBZ2 z19uca2Tpfq1bmAdeXx7pu6Ucxu6wr8G6Hotccro0y92UQLxWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+dUOCXAgEisDTXjjJgDRD9ad5TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzNhMDIyYjktZmY2Yy0z NmI3LWE1NjktNzI4ZjhlYWRlM2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErvOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHVuFO9wCNraH4r2vM8CksXddXPnlTrYSiztOL67IgrO47a1c0jCh4r PoaLEpSt6oU6mvE/9/BJ4WfbnZQ+zG/Cow8/CXoUEen7v/uPW6NiKpUKzezDyXtF 1HqJjcFZr4MCgxJTzmdR/Aw5SuUV+QZu98Zgm45V3Ep1jH9anOq9vDgoVEvGWL0l VotXRM4ktdlbJOMSzooHJqPYzn0wO02PYQim8VzYQSjp/qbnMKunA9r0s1iHu8Bj RFo85z8ODna1Jeu2kyZ89Ru6SEDEOm284tz24tX2/KzmCJ+1xwXJUUCAqXfaxQ1D Fpkgi78zso9iJIDpvDMQxJtZ0eGrS24= -----END CERTIFICATE-----Generated at Thu Mar 26 15:08:33 2026 by rpki-client