$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5f0fe23c-eb37-3b5a-9b7b-269485fcede2.roa File: 5f0fe23c-eb37-3b5a-9b7b-269485fcede2.roa (raw, json) Hash identifier: miY+2SUAISNU8tdNNA5IkfkQDwJGW+TyVBi4sypmDU8= Subject key identifier: DE:70:8D:17:81:69:1F:F7:00:BB:01:E0:82:02:56:9F:6A:B9:EA:AC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D44FA645D1456FBFB27D12F20 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5f0fe23c-eb37-3b5a-9b7b-269485fcede2.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 6167 IP address blocks: 174.253.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:64:5d:14:56:fb:fb:27:d1:2f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=4f6785e6-4ed2-4dc9-afa6-88b3661579bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c2:4a:7e:79:94:a5:84:c1:25:8f:dc:c1:20: 98:aa:07:f5:ac:29:d0:14:95:81:7d:66:d1:18:b7: 3d:e3:2d:de:5c:8f:05:c5:d4:0a:2d:d4:40:16:0d: a2:c5:e0:9d:e4:df:4b:fd:c8:c8:f6:fd:b5:38:5e: 9d:fe:ad:58:39:19:a3:71:ad:d5:31:21:ef:0c:e1: c7:7a:32:57:22:b6:4a:1e:ad:f7:60:73:8c:39:3d: 1a:a6:a7:5a:76:5e:ec:9a:01:a0:cd:59:57:43:14: 61:fd:bd:65:3d:a2:2e:83:ff:46:90:fe:72:80:4d: 32:c4:9b:af:01:a8:71:7a:04:ed:80:f7:f7:40:a9: 6d:d0:e8:ec:1f:69:bc:96:20:03:b6:1e:e6:a1:e0: c6:cf:d1:58:82:a3:a0:1e:56:4c:0f:af:6d:ce:bd: 28:46:b5:0e:1a:2d:a1:04:2e:8c:bf:ae:3c:d9:bf: 62:27:14:a8:6e:16:a6:99:be:78:50:dc:ef:f9:9d: 72:91:e5:41:41:81:7a:8b:0f:39:50:4d:d4:57:98: 4a:3a:ca:08:50:70:d0:20:d9:fd:a7:7e:e4:51:40: 5f:df:61:cd:bd:9c:1a:2e:81:ef:bf:2c:11:07:62: 0e:84:30:50:0d:11:0e:91:0a:b7:87:43:21:93:19: 73:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:70:8D:17:81:69:1F:F7:00:BB:01:E0:82:02:56:9F:6A:B9:EA:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5f0fe23c-eb37-3b5a-9b7b-269485fcede2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.253.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:52:af:69:2d:02:d8:0d:8b:ff:25:36:20:b3:2e:3a:a8:c5: 50:9b:d8:1f:4e:6b:57:ac:20:6f:10:69:d4:75:14:a5:f1:ee: ab:60:6e:75:38:c6:17:14:a4:ef:29:1d:bc:e6:93:b6:dc:77: 00:b0:41:e9:c5:17:27:bc:f7:0f:70:8e:cc:ad:46:f2:e8:58: 0a:c6:23:6c:07:29:8e:d0:b1:ae:44:e8:2f:9c:8b:9f:71:66: af:ac:ff:df:1b:29:67:a7:cc:79:71:52:11:4b:d9:a0:d7:ea: 81:2e:57:d9:53:51:6d:ff:84:7a:e1:a1:c8:24:df:6d:54:df: 51:57:7e:9d:7b:d4:8d:e8:6f:6b:a2:f7:32:15:3b:c9:12:c6: a8:16:bf:cb:70:49:98:fc:54:39:8b:bd:73:3c:51:2b:15:db: e8:bd:63:51:ed:a6:8c:f2:3f:ab:0f:79:4a:d6:d8:a5:e9:37: 3c:79:5e:78:25:57:fb:ec:58:55:f3:5e:0d:7d:1c:5b:fa:65: 02:c6:ed:cd:ad:00:c5:58:21:07:a4:63:6d:fc:5a:41:4a:df: fc:61:08:fe:99:00:4f:e8:c7:70:42:57:b5:7c:ed:67:4f:c5: b0:65:b5:ee:bc:da:67:f1:7b:36:6a:27:ef:1d:8b:50:a4:5c: f5:45:bc:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+mRdFFb7+yfRLyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NGY2Nzg1ZTYtNGVkMi00ZGM5LWFmYTYtODhiMzY2MTU3OWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cJKfnmUpYTBJY/cwSCYqgf1rCnQFJWBfWbR GLc94y3eXI8FxdQKLdRAFg2ixeCd5N9L/cjI9v21OF6d/q1YORmjca3VMSHvDOHH ejJXIrZKHq33YHOMOT0apqdadl7smgGgzVlXQxRh/b1lPaIug/9GkP5ygE0yxJuv AahxegTtgPf3QKlt0OjsH2m8liADth7moeDGz9FYgqOgHlZMD69tzr0oRrUOGi2h BC6Mv6482b9iJxSobhammb54UNzv+Z1ykeVBQYF6iw85UE3UV5hKOsoIUHDQINn9 p37kUUBf32HNvZwaLoHvvywRB2IOhDBQDREOkQq3h0MhkxlzPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5wjReBaR/3ALsB4IICVp9queqsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWYwZmUyM2MtZWIzNy0z YjVhLTliN2ItMjY5NDg1ZmNlZGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErv3gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdSr2ktAtgNi/8lNiCzLjqoxVCb2B9Oa1esIG8QadR1FKXx7qtgbnU4 xhcUpO8pHbzmk7bcdwCwQenFFye89w9wjsytRvLoWArGI2wHKY7Qsa5E6C+ci59x Zq+s/98bKWenzHlxUhFL2aDX6oEuV9lTUW3/hHrhocgk321U31FXfp171I3ob2ui 9zIVO8kSxqgWv8twSZj8VDmLvXM8USsV2+i9Y1HtpozyP6sPeUrW2KXpNzx5Xngl V/vsWFXzXg19HFv6ZQLG7c2tAMVYIQekY238WkFK3/xhCP6ZAE/ox3BCV7V87WdP xbBlte682mfxezZqJ+8di1CkXPVFvC4= -----END CERTIFICATE-----Generated at Thu Mar 26 16:56:43 2026 by rpki-client