$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4923457b-0f1f-3e35-af6e-52b493c63720.roa File: 4923457b-0f1f-3e35-af6e-52b493c63720.roa (raw, json) Hash identifier: 2uCCBb5rec+sYwnplinS0GGQuAocRDUDZ6hG38lA/DE= Subject key identifier: D2:0C:B6:8D:F0:05:85:DE:E4:6D:64:4B:71:17:0A:4F:C8:31:3C:0C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D47C4F6DCFC004DC242F9CD80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4923457b-0f1f-3e35-af6e-52b493c63720.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 6167 IP address blocks: 174.235.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:f6:dc:fc:00:4d:c2:42:f9:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=78e40626-b8fc-40c1-a4c6-983bf12dda38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:be:de:18:80:28:e9:f2:ff:d1:f9:ae:fe:65: 4e:27:c3:77:29:9e:fa:51:7c:b9:1e:71:0b:ed:e8: 73:df:20:26:d6:64:ba:d2:4f:b3:a9:6c:12:a8:dc: 08:08:e1:23:de:fc:e3:71:62:e6:b5:05:7e:3d:90: a0:1a:37:85:30:c7:e6:55:e0:c5:e4:9e:7f:19:7d: 3a:2e:72:46:a3:60:f9:da:36:12:58:30:ec:45:9f: 31:32:be:d6:4d:2f:8e:d5:85:75:91:9b:ee:b7:55: cd:b2:27:b1:ff:3b:25:4a:2b:be:46:33:01:46:9a: 6a:f6:b1:38:42:33:cf:ef:5d:9f:3f:9d:3c:3d:fa: 58:b4:2e:0f:72:43:68:d6:37:4c:c2:ed:8d:18:ce: fb:70:23:2f:dc:55:6b:98:84:97:4c:4b:06:94:0f: 82:b5:2f:6d:84:e5:f7:f4:85:59:fd:4e:0c:24:28: 6b:f0:e4:75:5a:9d:ef:d8:d2:29:3a:5d:02:58:10: 4d:7b:1b:35:a3:b3:e7:76:3e:4c:c9:5d:31:47:33: 5c:b5:e2:94:71:f0:a4:60:7f:5f:67:02:c2:fe:93: 6e:fe:fa:5f:45:5d:dc:fe:c7:9f:78:a7:dd:ff:47: 19:a8:94:e1:71:13:74:0e:88:96:bd:53:2f:92:81: f3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:0C:B6:8D:F0:05:85:DE:E4:6D:64:4B:71:17:0A:4F:C8:31:3C:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4923457b-0f1f-3e35-af6e-52b493c63720.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.235.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:bc:eb:a1:13:fe:c0:80:f0:0e:20:16:06:b6:64:69:0e:59: 4e:7c:c9:cc:9c:3f:3a:df:d8:00:12:9d:74:bc:00:70:eb:1b: 93:de:6f:a3:53:10:57:cd:b0:9a:22:45:cb:6b:0b:c6:7b:e7: 37:b9:19:92:7e:e3:0b:53:7d:43:69:34:2b:3e:9c:56:a4:20: 00:71:e1:eb:e1:2e:98:e0:02:f7:db:0c:70:bf:15:1f:9a:b3: e8:11:12:a6:aa:ee:91:06:4a:ad:d6:e7:6e:37:29:79:f7:45: 56:2d:6f:8c:cf:31:6b:74:5e:1f:8a:0a:02:88:cd:9d:68:c8: 05:dd:ff:18:61:29:a2:90:73:69:15:1b:d9:f4:ec:c2:c9:17: f1:6d:f5:c8:24:13:7d:09:14:f1:78:d2:6f:4e:a8:1a:98:13: 75:38:1a:43:d5:16:f0:49:03:db:95:5c:ac:00:a1:8b:91:2a: 4b:46:f0:6f:76:89:42:7f:47:49:f8:a9:79:f7:0a:07:e1:7b: 91:32:89:b3:dd:38:45:e9:09:1a:ae:f5:63:f3:79:03:b7:50: 20:a0:18:6b:50:f6:96:8b:18:0e:11:99:0e:b0:37:ca:6a:1f: 29:fa:86:e3:1d:81:ec:70:fe:99:a8:97:51:63:18:9b:5e:0a: 6a:76:bb:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxPbc/ABNwkL5zYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk NzhlNDA2MjYtYjhmYy00MGMxLWE0YzYtOTgzYmYxMmRkYTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj77eGIAo6fL/0fmu/mVOJ8N3KZ76UXy5HnEL 7ehz3yAm1mS60k+zqWwSqNwICOEj3vzjcWLmtQV+PZCgGjeFMMfmVeDF5J5/GX06 LnJGo2D52jYSWDDsRZ8xMr7WTS+O1YV1kZvut1XNsiex/zslSiu+RjMBRppq9rE4 QjPP712fP508PfpYtC4PckNo1jdMwu2NGM77cCMv3FVrmISXTEsGlA+CtS9thOX3 9IVZ/U4MJChr8OR1Wp3v2NIpOl0CWBBNexs1o7Pndj5MyV0xRzNcteKUcfCkYH9f ZwLC/pNu/vpfRV3c/sefeKfd/0cZqJThcRN0DoiWvVMvkoHz9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIMto3wBYXe5G1kS3EXCk/IMTwMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDkyMzQ1N2ItMGYxZi0z ZTM1LWFmNmUtNTJiNDkzYzYzNzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBruuWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABu866ET/sCA8A4gFga2ZGkOWU58ycycPzrf2AASnXS8AHDrG5Peb6NT EFfNsJoiRctrC8Z75ze5GZJ+4wtTfUNpNCs+nFakIABx4evhLpjgAvfbDHC/FR+a s+gREqaq7pEGSq3W5243KXn3RVYtb4zPMWt0Xh+KCgKIzZ1oyAXd/xhhKaKQc2kV G9n07MLJF/Ft9cgkE30JFPF40m9OqBqYE3U4GkPVFvBJA9uVXKwAoYuRKktG8G92 iUJ/R0n4qXn3Cgfhe5EyibPdOEXpCRqu9WPzeQO3UCCgGGtQ9paLGA4RmQ6wN8pq Hyn6huMdgexw/pmol1FjGJteCmp2uys= -----END CERTIFICATE-----Generated at Thu Mar 26 18:55:56 2026 by rpki-client