$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4af95962-d215-37e0-ba57-5282e25a5137.roa File: 4af95962-d215-37e0-ba57-5282e25a5137.roa (raw, json) Hash identifier: rxoS9AKDw3xdYazkXOyOidQ1iGGFGYYsRMtgR3GMM5g= Subject key identifier: 1A:E8:D0:64:75:4E:92:68:08:AA:CE:6A:3A:EF:A4:4C:C9:99:1A:14 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D47C4F12180133064EBDC9938 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4af95962-d215-37e0-ba57-5282e25a5137.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 6167 IP address blocks: 174.227.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:f1:21:80:13:30:64:eb:dc:99:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=8946316d-0878-47cc-8f0d-cbe200541f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2b:bb:0e:6b:74:ee:1b:7c:ab:56:be:7a:1b: 71:9b:cd:d4:07:eb:78:ee:d7:f7:6b:a1:60:f5:89: 6d:05:36:ef:75:70:53:b0:35:60:7b:f2:99:4f:58: f9:fe:35:67:5c:af:d4:f3:bd:cd:92:88:06:5d:42: 86:72:08:93:19:8d:cb:5d:d1:a6:6c:76:b2:64:90: db:19:21:7a:8d:19:24:54:39:37:cb:29:c8:0c:dd: 80:cd:da:4c:1c:57:9b:cb:28:bb:b1:b1:ef:07:e0: 08:c4:b3:d8:47:eb:bc:81:44:f4:83:1d:a3:0c:32: 29:1c:ce:53:68:48:cc:54:52:d2:e9:14:92:94:aa: f9:82:ba:a3:0c:3f:b5:76:a3:a0:47:bd:e7:b1:44: dc:3d:8a:cd:5d:91:25:d0:d2:19:6c:96:81:7f:87: 66:86:5a:6e:2c:ef:0a:2c:39:10:4b:48:e8:c0:db: ba:ce:db:e9:c8:d5:36:d1:61:2d:cc:f0:b5:56:52: 10:5d:85:da:73:38:9a:5f:10:25:5d:db:b1:90:79: 46:a4:7c:69:4d:0b:c5:a3:e4:6b:cd:3f:20:c5:0b: 61:c9:94:66:ab:dd:3d:d7:9d:20:a5:30:e3:51:d6: 48:1d:c5:99:6e:3b:5a:83:20:65:88:13:7d:8e:e1: 02:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E8:D0:64:75:4E:92:68:08:AA:CE:6A:3A:EF:A4:4C:C9:99:1A:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4af95962-d215-37e0-ba57-5282e25a5137.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.227.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:64:e7:9c:6e:d4:8b:ad:2e:d5:ed:6d:5c:fa:e6:1a:f3:23: 94:4f:44:28:fd:b8:f6:4c:ac:6e:e4:ab:da:98:a8:fc:c0:d1: f0:0a:37:34:ad:dd:12:8c:86:b8:c9:28:b5:79:fb:53:8a:fe: 79:3d:9a:f0:30:c1:6b:85:b4:ff:91:09:91:7f:0b:be:a0:e0: f3:2e:94:a8:91:a5:90:0e:c8:1c:01:ca:cb:dd:09:c6:da:be: 53:26:22:04:ec:dd:e9:50:ac:09:32:bd:e0:da:eb:d6:89:44: 91:1f:bb:e0:83:59:3c:9b:af:02:b8:72:37:cd:77:6b:70:3b: 8b:91:b3:e4:e8:23:ac:42:72:40:39:4b:d9:b2:cc:98:2f:3e: 11:6e:f6:a3:02:6e:59:b3:61:db:2f:c1:71:b5:a6:64:cd:18: 2b:1a:3d:92:c9:61:1c:7e:0e:e0:4f:05:83:80:ab:02:07:6e: 90:c0:23:d7:1a:97:a0:20:85:ec:ac:40:e0:46:44:ad:cc:66: 60:4b:b5:08:bc:89:7c:e2:d9:ec:63:db:d5:fe:a3:23:0f:8e: ec:af:83:62:c5:82:b7:45:8c:8b:ad:6f:8f:04:7d:e4:c8:82: a5:98:ee:bb:28:3c:28:a0:88:20:1b:d8:11:c2:5d:c4:6f:fa: f5:28:2a:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxPEhgBMwZOvcmTgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk ODk0NjMxNmQtMDg3OC00N2NjLThmMGQtY2JlMjAwNTQxZjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSu7Dmt07ht8q1a+ehtxm83UB+t47tf3a6Fg 9YltBTbvdXBTsDVge/KZT1j5/jVnXK/U873NkogGXUKGcgiTGY3LXdGmbHayZJDb GSF6jRkkVDk3yynIDN2AzdpMHFebyyi7sbHvB+AIxLPYR+u8gUT0gx2jDDIpHM5T aEjMVFLS6RSSlKr5grqjDD+1dqOgR73nsUTcPYrNXZEl0NIZbJaBf4dmhlpuLO8K LDkQS0jowNu6ztvpyNU20WEtzPC1VlIQXYXacziaXxAlXduxkHlGpHxpTQvFo+Rr zT8gxQthyZRmq909150gpTDjUdZIHcWZbjtagyBliBN9juECoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBro0GR1TpJoCKrOajrvpEzJmRoUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGFmOTU5NjItZDIxNS0z N2UwLWJhNTctNTI4MmUyNWE1MTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhk55xu1IutLtXtbVz65hrzI5RPRCj9uPZMrG7kq9qYqPzA0fAKNzSt 3RKMhrjJKLV5+1OK/nk9mvAwwWuFtP+RCZF/C76g4PMulKiRpZAOyBwBysvdCcba vlMmIgTs3elQrAkyveDa69aJRJEfu+CDWTybrwK4cjfNd2twO4uRs+ToI6xCckA5 S9myzJgvPhFu9qMCblmzYdsvwXG1pmTNGCsaPZLJYRx+DuBPBYOAqwIHbpDAI9ca l6AgheysQOBGRK3MZmBLtQi8iXzi2exj29X+oyMPjuyvg2LFgrdFjIutb48EfeTI gqWY7rsoPCigiCAb2BHCXcRv+vUoKp8= -----END CERTIFICATE-----Generated at Fri Mar 27 00:37:08 2026 by rpki-client