$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/500978f3-c4cc-3f8f-b956-839c562a2430.roa File: 500978f3-c4cc-3f8f-b956-839c562a2430.roa (raw, json) Hash identifier: 0tsPnTmTuidOZKn7xzKt9x6PgA2pLwZQuY3ipuLXok4= Subject key identifier: F0:67:07:F6:9F:A1:25:DE:4D:D2:04:22:4A:B0:B9:16:6A:49:63:1D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D47C4FE395B4D7E72D074A680 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/500978f3-c4cc-3f8f-b956-839c562a2430.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 6167 IP address blocks: 174.244.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:fe:39:5b:4d:7e:72:d0:74:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=e71aec02-86ac-435f-927a-a3a7d134374e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6b:6b:4d:4a:e7:35:2d:50:b7:44:3e:dd:0b: d1:d3:e0:2c:04:3b:42:eb:bc:91:14:17:39:ee:17: bf:9d:13:74:a5:d6:7f:48:7d:31:43:a1:ff:cc:ac: 2f:f6:9e:16:5d:ac:69:6c:eb:26:cf:3d:1e:2e:5d: 14:4d:e0:85:41:61:c9:70:d1:f1:d4:70:91:4a:1d: 95:40:eb:e1:d0:36:ad:69:9c:73:0f:bb:37:6a:d2: 07:01:9e:dd:52:c0:c8:de:0a:f1:59:29:1e:46:0c: d0:19:61:8d:b9:e1:b5:2a:9a:af:09:c4:e4:f2:e3: 3a:9e:55:cd:e1:2d:aa:18:9d:09:86:d2:bc:ac:94: 6f:a9:85:65:67:b5:e2:46:1b:ae:9e:72:da:23:53: c2:8b:3e:10:67:78:38:76:d0:d7:6d:20:cc:c7:7f: 05:9a:13:99:c7:de:64:17:39:c4:ee:43:30:68:61: ba:48:74:0a:a4:ce:ea:84:92:47:23:1e:c8:5f:18: 3d:c9:c3:a5:46:67:91:41:55:21:f5:fe:b4:84:e7: 43:57:61:91:f6:10:bf:04:6b:22:bb:42:5a:49:8e: fc:57:a0:5d:18:df:fc:b8:03:0a:9e:d1:7e:74:3e: 02:ad:20:aa:15:1a:54:86:76:dc:4c:d6:c1:cd:83: ec:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:67:07:F6:9F:A1:25:DE:4D:D2:04:22:4A:B0:B9:16:6A:49:63:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/500978f3-c4cc-3f8f-b956-839c562a2430.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.244.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:f9:d0:a1:f0:e7:33:a5:3a:dc:a4:38:61:06:3d:af:c3:9f: df:ce:2f:60:94:6d:69:54:42:c5:7e:b8:7d:01:66:d8:f3:50: b7:18:ad:1f:69:67:20:8d:ed:c0:be:05:e9:70:d9:bd:4f:78: 57:18:60:2c:36:a7:b8:8f:c0:24:00:73:25:43:81:cc:8f:60: c1:e5:02:57:7a:a7:44:fb:0a:3e:03:42:86:59:48:35:35:b5: 40:98:74:17:96:d8:6e:27:ce:59:57:bb:e8:54:e4:96:66:57: e9:0b:ff:f1:cb:b4:39:75:ba:86:2a:17:9c:43:32:9d:ed:d6: 96:b9:8d:b9:bc:d8:f8:99:56:5a:b2:fc:a9:9f:bd:96:5a:a0: 87:1a:c5:7b:ac:9d:a6:fa:63:ec:03:b4:10:c3:75:50:39:ed: a7:7d:b4:af:01:40:76:0d:92:1d:66:05:76:56:48:d3:30:64: b9:a4:9e:c7:84:b6:fd:96:b4:9d:8d:e3:37:1e:17:91:4b:e0: 93:bb:f5:40:c0:b2:74:32:66:ea:29:cc:16:f7:4f:41:27:a5: aa:98:17:66:4d:c9:9c:c8:d7:71:2f:6a:91:b8:1c:4d:2c:8b: 81:c1:42:ec:c5:52:d0:ea:c4:46:ac:05:3a:63:1d:13:bc:4e: 8f:95:0b:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxP45W01+ctB0poAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk ZTcxYWVjMDItODZhYy00MzVmLTkyN2EtYTNhN2QxMzQzNzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimtrTUrnNS1Qt0Q+3QvR0+AsBDtC67yRFBc5 7he/nRN0pdZ/SH0xQ6H/zKwv9p4WXaxpbOsmzz0eLl0UTeCFQWHJcNHx1HCRSh2V QOvh0DataZxzD7s3atIHAZ7dUsDI3grxWSkeRgzQGWGNueG1KpqvCcTk8uM6nlXN 4S2qGJ0JhtK8rJRvqYVlZ7XiRhuunnLaI1PCiz4QZ3g4dtDXbSDMx38FmhOZx95k FznE7kMwaGG6SHQKpM7qhJJHIx7IXxg9ycOlRmeRQVUh9f60hOdDV2GR9hC/BGsi u0JaSY78V6BdGN/8uAMKntF+dD4CrSCqFRpUhnbcTNbBzYPsjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBnB/afoSXeTdIEIkqwuRZqSWMdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTAwOTc4ZjMtYzRjYy0z ZjhmLWI5NTYtODM5YzU2MmEyNDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErvRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEH50KHw5zOlOtykOGEGPa/Dn9/OL2CUbWlUQsV+uH0BZtjzULcYrR9p ZyCN7cC+Belw2b1PeFcYYCw2p7iPwCQAcyVDgcyPYMHlAld6p0T7Cj4DQoZZSDU1 tUCYdBeW2G4nzllXu+hU5JZmV+kL//HLtDl1uoYqF5xDMp3t1pa5jbm82PiZVlqy /KmfvZZaoIcaxXusnab6Y+wDtBDDdVA57ad9tK8BQHYNkh1mBXZWSNMwZLmknseE tv2WtJ2N4zceF5FL4JO79UDAsnQyZuopzBb3T0EnpaqYF2ZNyZzI13EvapG4HE0s i4HBQuzFUtDqxEasBTpjHRO8To+VC9Y= -----END CERTIFICATE-----Generated at Thu Mar 26 17:55:56 2026 by rpki-client