$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fa422b1-6c2f-3cdd-941e-11db0b48a6be.roa File: 3fa422b1-6c2f-3cdd-941e-11db0b48a6be.roa (raw, json) Hash identifier: ev6WYZZvW7tstbEOP0QA2LpT+07xAOWYC9Zm47w9ST8= Subject key identifier: 39:16:B8:24:8B:29:51:44:D2:11:4E:40:01:B3:7E:95:65:36:36:7E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D47C4F5B8CD509E5E70A2BF00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fa422b1-6c2f-3cdd-941e-11db0b48a6be.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 6167 IP address blocks: 174.234.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:f5:b8:cd:50:9e:5e:70:a2:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=373e7172-4506-4d5e-bddd-db2428b00a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:75:53:36:ab:ab:55:90:dc:c6:71:9b:72:14: 6a:29:11:e3:b5:15:f3:2f:a8:32:0c:42:08:f9:7a: fc:dc:6d:80:f8:34:44:38:a6:85:b3:b7:cc:46:a6: 2e:aa:f8:e9:be:38:7a:09:4d:83:46:6c:b1:87:89: 17:ea:bf:ab:e8:fb:97:f8:ca:37:04:d8:4d:35:e9: a3:e0:cd:d2:d6:83:e7:cf:f5:28:e2:18:65:cf:5e: 18:15:e9:d0:9d:c1:ad:d7:06:d3:d0:46:ac:65:49: cf:38:cc:6e:e2:45:3f:36:e6:a1:31:80:1d:fc:53: cb:85:80:b9:ae:54:b9:81:dc:0b:56:96:c5:29:c5: 77:db:ee:ed:39:38:f8:4a:0b:27:49:c8:37:78:b1: b3:14:9f:48:b1:32:c6:cf:dc:7f:61:9f:9c:62:56: 99:d6:f7:e3:1d:a7:7c:fb:47:29:dd:61:03:48:80: 77:6f:98:bd:47:b5:89:d5:dc:ca:2c:92:3b:b1:2b: d9:9c:07:67:d9:93:77:34:d9:6b:f4:4d:7c:0c:85: 12:66:d5:1e:38:f5:90:20:96:7a:e4:69:dc:65:86: a2:3f:61:ab:a9:9b:a9:c9:1c:81:82:cc:ca:29:7d: ae:d0:cc:06:a7:32:63:86:88:22:1f:5b:5e:2d:ea: 0a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:16:B8:24:8B:29:51:44:D2:11:4E:40:01:B3:7E:95:65:36:36:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fa422b1-6c2f-3cdd-941e-11db0b48a6be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.234.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:fa:e8:93:0d:99:7e:1a:af:4d:13:05:e2:ee:b1:ca:d0:7c: 8b:e0:6c:3f:c3:84:8d:b7:7e:38:06:12:84:ff:e8:80:63:42: 87:25:e5:0c:19:75:0c:9f:35:12:39:a0:cf:ab:ca:65:8a:f3: 77:20:10:35:f3:28:9c:42:fe:bf:7d:58:c9:ea:61:0d:e0:0a: c2:5f:53:fa:75:ea:aa:64:16:bd:9b:a2:f7:02:23:1e:c6:2b: d3:01:8a:f2:1d:9e:09:6f:2c:f8:e4:e1:99:30:49:96:f4:49: 96:0f:ea:20:60:70:2a:38:7a:69:d9:ba:77:28:a2:ee:12:51: 13:7a:44:86:d7:85:a7:3a:83:9e:dc:92:65:d4:1e:2e:6d:10: bf:33:5a:1e:14:67:03:e2:54:12:6d:a5:fa:17:03:a0:14:7c: 35:bf:2b:40:28:e9:e4:57:25:11:30:d7:6c:fa:be:a1:05:17: 82:4f:8d:40:80:fc:3d:d6:88:0d:22:87:ac:5b:0b:20:71:a5: c4:9b:32:7d:b3:b0:28:79:84:84:18:3a:3f:fb:a7:3a:35:a5: 8e:b7:57:6f:d7:3e:f1:dd:f9:63:bf:b7:1b:5e:23:97:cb:ca: 97:5d:bf:c3:af:d8:d8:39:40:3e:6f:c8:43:c1:7b:33:89:7f: ba:29:16:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxPW4zVCeXnCivwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk MzczZTcxNzItNDUwNi00ZDVlLWJkZGQtZGIyNDI4YjAwYTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXVTNqurVZDcxnGbchRqKRHjtRXzL6gyDEII +Xr83G2A+DREOKaFs7fMRqYuqvjpvjh6CU2DRmyxh4kX6r+r6PuX+Mo3BNhNNemj 4M3S1oPnz/Uo4hhlz14YFenQncGt1wbT0EasZUnPOMxu4kU/NuahMYAd/FPLhYC5 rlS5gdwLVpbFKcV32+7tOTj4SgsnScg3eLGzFJ9IsTLGz9x/YZ+cYlaZ1vfjHad8 +0cp3WEDSIB3b5i9R7WJ1dzKLJI7sSvZnAdn2ZN3NNlr9E18DIUSZtUeOPWQIJZ6 5GncZYaiP2GrqZupyRyBgszKKX2u0MwGpzJjhogiH1teLeoKVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkWuCSLKVFE0hFOQAGzfpVlNjZ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2ZhNDIyYjEtNmMyZi0z Y2RkLTk0MWUtMTFkYjBiNDhhNmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACz66JMNmX4ar00TBeLuscrQfIvgbD/DhI23fjgGEoT/6IBjQocl5QwZ dQyfNRI5oM+rymWK83cgEDXzKJxC/r99WMnqYQ3gCsJfU/p16qpkFr2bovcCIx7G K9MBivIdnglvLPjk4ZkwSZb0SZYP6iBgcCo4emnZuncoou4SURN6RIbXhac6g57c kmXUHi5tEL8zWh4UZwPiVBJtpfoXA6AUfDW/K0Ao6eRXJREw12z6vqEFF4JPjUCA /D3WiA0ih6xbCyBxpcSbMn2zsCh5hIQYOj/7pzo1pY63V2/XPvHd+WO/txteI5fL ypddv8Ov2Ng5QD5vyEPBezOJf7opFuI= -----END CERTIFICATE-----Generated at Thu Mar 26 05:21:42 2026 by rpki-client