$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c951fb6-cdc6-3df5-b720-945e2e609d1a.roa File: 3c951fb6-cdc6-3df5-b720-945e2e609d1a.roa (raw, json) Hash identifier: oV2J1H3Ithav8SkD46j5F1ZwpMH0vAX1N9WAYSfLWaw= Subject key identifier: FD:B8:3C:1C:89:35:08:7C:27:F1:09:87:3A:F8:FC:DF:7E:CB:AF:4D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D20AF625536D8548268719C80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c951fb6-cdc6-3df5-b720-945e2e609d1a.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 6167 IP address blocks: 174.214.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:62:55:36:d8:54:82:68:71:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=8badaa27-620b-4eac-a126-c94c906a07bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ea:15:31:fc:cc:bc:40:10:f4:48:72:7c:ee: 30:c2:07:db:b8:8d:ef:88:91:3d:76:b9:35:86:88: 63:54:96:cb:94:93:33:43:34:64:dd:e1:2e:df:16: 37:19:eb:f6:d8:b6:5d:68:d3:8b:50:16:ce:4d:b6: 2b:5a:75:13:d8:57:71:12:c0:a4:1e:0c:04:e8:e9: 3f:14:b6:c2:a9:bc:76:7a:f1:2d:7a:1e:96:e7:14: 0d:2a:5a:ab:9d:2c:14:ed:c8:f7:16:aa:ac:d3:b1: 49:f5:ba:7d:fd:ba:43:f5:df:85:47:28:37:95:02: 77:3e:7f:ab:81:a9:a1:79:e2:8a:ff:16:f4:8c:4f: fa:fe:be:a7:d0:cc:65:66:a5:c5:95:57:1b:35:f0: 25:ec:71:97:f6:dc:a1:23:4a:97:5e:12:7f:a6:60: 7e:af:e2:39:cf:f3:e5:39:dd:bf:cc:ba:49:0c:b2: 77:f2:96:6e:0a:2e:c6:ca:fb:08:96:12:90:ee:9f: ab:91:46:9a:cd:c2:b7:47:bf:46:4f:72:6e:54:8a: 02:79:22:04:77:9d:69:ef:70:b3:17:a1:6e:6f:db: f3:52:d9:36:4f:1c:0b:5a:6b:8c:35:0b:41:b1:91: 3d:3d:80:b9:7f:59:27:cf:c6:42:df:14:ff:8f:13: fa:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B8:3C:1C:89:35:08:7C:27:F1:09:87:3A:F8:FC:DF:7E:CB:AF:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c951fb6-cdc6-3df5-b720-945e2e609d1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.214.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:f0:13:d3:45:6e:31:a2:57:50:a8:2b:3a:81:e4:e5:76:55: c1:bc:63:f4:79:b8:f8:b5:a7:67:52:29:43:60:f6:92:59:68: 90:68:77:23:68:6f:67:ea:4b:4b:33:b2:3d:37:0e:19:ec:ff: 44:9f:5c:43:9f:7f:be:07:ce:c8:48:9c:61:be:0f:87:70:f8: 3a:29:b4:cb:7c:73:68:8a:dc:7f:d5:12:33:c8:f9:8f:10:ce: 88:0c:4f:8a:03:bf:e4:69:c0:ee:43:3d:5a:62:9f:ec:d4:45: 01:81:03:9e:4a:cf:84:0f:9d:22:0d:6d:67:8b:79:ad:17:18: b9:e6:e3:fb:18:c4:d6:2e:8b:32:f7:dc:b2:72:3a:6b:98:10: ac:1b:1c:ee:78:31:e6:ed:7b:22:2f:98:e9:48:31:07:70:7e: b3:5e:20:8d:bb:cc:6a:4f:08:c6:0d:23:64:8c:d4:b8:ec:c6: 64:12:99:e9:d2:42:48:e2:12:18:e8:a6:e2:31:7c:af:6b:5a: 56:f9:56:64:a5:73:d4:b2:d5:4f:b3:6d:7a:70:13:a4:41:49: 98:fe:67:90:a0:4d:e1:d1:64:e9:3a:eb:48:59:57:b0:95:61: 32:90:0a:44:b2:02:4b:f7:96:1c:72:92:67:dc:50:aa:bb:1b: ef:6e:5a:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr2JVNthUgmhxnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk OGJhZGFhMjctNjIwYi00ZWFjLWExMjYtYzk0YzkwNmEwN2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquoVMfzMvEAQ9EhyfO4wwgfbuI3viJE9drk1 hohjVJbLlJMzQzRk3eEu3xY3Gev22LZdaNOLUBbOTbYrWnUT2FdxEsCkHgwE6Ok/ FLbCqbx2evEteh6W5xQNKlqrnSwU7cj3Fqqs07FJ9bp9/bpD9d+FRyg3lQJ3Pn+r gamheeKK/xb0jE/6/r6n0MxlZqXFlVcbNfAl7HGX9tyhI0qXXhJ/pmB+r+I5z/Pl Od2/zLpJDLJ38pZuCi7GyvsIlhKQ7p+rkUaazcK3R79GT3JuVIoCeSIEd51p73Cz F6Fub9vzUtk2TxwLWmuMNQtBsZE9PYC5f1knz8ZC3xT/jxP6PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP24PByJNQh8J/EJhzr4/N9+y69NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2M5NTFmYjYtY2RjNi0z ZGY1LWI3MjAtOTQ1ZTJlNjA5ZDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrtbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfwE9NFbjGiV1CoKzqB5OV2VcG8Y/R5uPi1p2dSKUNg9pJZaJBodyNo b2fqS0szsj03Dhns/0SfXEOff74HzshInGG+D4dw+DoptMt8c2iK3H/VEjPI+Y8Q zogMT4oDv+RpwO5DPVpin+zURQGBA55Kz4QPnSINbWeLea0XGLnm4/sYxNYuizL3 3LJyOmuYEKwbHO54MebteyIvmOlIMQdwfrNeII27zGpPCMYNI2SM1LjsxmQSmenS QkjiEhjopuIxfK9rWlb5VmSlc9Sy1U+zbXpwE6RBSZj+Z5CgTeHRZOk660hZV7CV YTKQCkSyAkv3lhxykmfcUKq7G+9uWhM= -----END CERTIFICATE-----Generated at Thu Mar 26 05:19:38 2026 by rpki-client