$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41e32bfa-cccf-33dd-abd7-2257367f0130.roa File: 41e32bfa-cccf-33dd-abd7-2257367f0130.roa (raw, json) Hash identifier: Am/9kApdLVoyCtCen5ykcWCbgd2RBl4FYKD2L6dvSAo= Subject key identifier: 90:7E:CB:AD:F1:54:9E:1D:EC:8C:C8:E4:56:47:57:F9:F0:0D:5A:6C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D47C4FEB3DEA38C9A26B27B80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41e32bfa-cccf-33dd-abd7-2257367f0130.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 6167 IP address blocks: 174.245.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:fe:b3:de:a3:8c:9a:26:b2:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=aa050429-d03c-40dc-bd20-456fc69808cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8c:fa:36:f3:b0:eb:0d:f5:fa:b2:a8:e2:98: f8:c2:00:3a:95:0b:64:b1:41:48:71:29:13:c9:16: 2a:62:17:f4:99:df:db:36:db:60:8d:81:13:ad:86: ff:98:86:aa:58:4a:8f:6d:84:b1:02:39:48:83:1b: be:c1:48:7b:ec:c7:c8:97:c9:2d:b7:33:e3:7f:66: cc:75:36:2c:30:da:b5:d7:3e:5a:c9:80:cc:62:15: 62:be:b5:38:82:0e:78:29:a0:41:3b:eb:c5:57:1e: 84:83:a0:9e:88:9f:9c:33:27:d9:de:2f:e2:e7:cb: 5c:96:75:fd:ed:72:ab:3d:aa:fe:a7:40:65:4b:f8: 63:41:8b:3b:eb:7b:4e:b8:2a:1b:7e:d0:70:d2:70: 41:0b:0d:99:e8:f1:0f:7b:dd:d9:22:86:59:77:61: 9e:06:50:82:84:17:20:94:b1:13:83:a2:77:c4:06: c4:06:7a:df:ed:00:e7:c7:ef:35:ca:fa:e5:8c:28: 01:87:b8:ea:08:bf:9d:46:f3:cc:4a:32:16:9e:91: 37:7c:07:e3:33:f2:8c:92:0c:77:ab:e5:30:3c:8d: 12:95:00:6e:17:0e:af:af:09:5b:b1:6e:ea:ba:92: 55:27:c2:df:38:39:30:95:d3:d2:80:10:f1:89:73: 62:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:7E:CB:AD:F1:54:9E:1D:EC:8C:C8:E4:56:47:57:F9:F0:0D:5A:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/41e32bfa-cccf-33dd-abd7-2257367f0130.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.245.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:de:38:3f:51:b3:d8:1f:be:50:e6:3e:fb:3e:74:7c:7d:b5: 2d:ea:b0:f9:57:42:89:45:10:6e:ec:1b:65:55:85:af:70:e2: b9:eb:0b:cb:82:bf:1a:f7:ba:32:06:1e:30:c1:6f:ec:2c:52: f4:6d:d7:24:ba:f5:05:60:2f:6c:b4:b4:91:e0:86:ed:ba:df: 77:2c:ae:bb:de:40:26:63:e0:04:16:14:fb:ed:ba:e8:9c:c5: 3a:89:7b:61:91:2a:b6:c1:64:88:06:fb:ce:37:d1:e5:da:9e: c7:f0:c6:f4:c9:79:04:14:fc:bc:1f:47:03:a2:97:13:6a:53: d0:3e:ad:d5:0f:73:04:98:f4:b6:a7:e5:1b:cc:7c:6e:5c:02: aa:1a:94:2b:5b:98:ff:6b:f4:d6:f8:9e:d2:02:3a:a6:f8:ab: 4d:1c:50:2e:6f:90:51:57:aa:e4:6e:64:a0:46:63:c3:fd:11: 1c:10:da:e0:32:57:6e:d9:6f:85:c2:89:6c:6a:53:9e:7f:ee: d9:16:f8:00:cd:e5:a2:73:d1:66:8c:7a:40:8c:87:df:a5:76: c9:e6:3b:a8:c4:52:44:50:05:22:86:9a:54:6b:99:0b:6f:7e: 9b:07:7b:db:1e:ca:38:6c:61:9f:66:10:d0:35:e2:d7:da:e0: 1f:b5:4a:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxP6z3qOMmiaye4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk YWEwNTA0MjktZDAzYy00MGRjLWJkMjAtNDU2ZmM2OTgwOGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYz6NvOw6w31+rKo4pj4wgA6lQtksUFIcSkT yRYqYhf0md/bNttgjYETrYb/mIaqWEqPbYSxAjlIgxu+wUh77MfIl8kttzPjf2bM dTYsMNq11z5ayYDMYhVivrU4gg54KaBBO+vFVx6Eg6CeiJ+cMyfZ3i/i58tclnX9 7XKrPar+p0BlS/hjQYs763tOuCobftBw0nBBCw2Z6PEPe93ZIoZZd2GeBlCChBcg lLETg6J3xAbEBnrf7QDnx+81yvrljCgBh7jqCL+dRvPMSjIWnpE3fAfjM/KMkgx3 q+UwPI0SlQBuFw6vrwlbsW7qupJVJ8LfODkwldPSgBDxiXNiXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJB+y63xVJ4d7IzI5FZHV/nwDVpsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDFlMzJiZmEtY2NjZi0z M2RkLWFiZDctMjI1NzM2N2YwMTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErvVwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKveOD9Rs9gfvlDmPvs+dHx9tS3qsPlXQolFEG7sG2VVha9w4rnrC8uC vxr3ujIGHjDBb+wsUvRt1yS69QVgL2y0tJHghu2633csrrveQCZj4AQWFPvtuuic xTqJe2GRKrbBZIgG+8430eXansfwxvTJeQQU/LwfRwOilxNqU9A+rdUPcwSY9Lan 5RvMfG5cAqoalCtbmP9r9Nb4ntICOqb4q00cUC5vkFFXquRuZKBGY8P9ERwQ2uAy V27Zb4XCiWxqU55/7tkW+ADN5aJz0WaMekCMh9+ldsnmO6jEUkRQBSKGmlRrmQtv fpsHe9seyjhsYZ9mENA14tfa4B+1SjQ= -----END CERTIFICATE-----Generated at Thu Mar 26 07:40:17 2026 by rpki-client