$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60e3eed3-1d1c-39e6-883f-cd7c8ecd01e4.roa File: 60e3eed3-1d1c-39e6-883f-cd7c8ecd01e4.roa (raw, json) Hash identifier: QKno57d3kBrzjyEmXDvOv/IGSyqn1ayPS5ZvDTcAf+s= Subject key identifier: C6:64:D3:09:34:84:88:C9:9D:23:8D:F5:E6:28:AE:61:0B:45:2D:2F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D20AF590622231A1563E25FA0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60e3eed3-1d1c-39e6-883f-cd7c8ecd01e4.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 6167 IP address blocks: 174.199.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:59:06:22:23:1a:15:63:e2:5f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=c9df77ce-b49c-4645-9b69-3d4b3affc948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e9:41:c2:b7:22:87:55:f0:3c:4d:13:2f:1f: dd:35:c1:35:06:d9:d0:a3:42:8b:c3:c8:36:80:ef: 23:76:b6:67:45:93:d9:5a:91:0e:43:26:97:4a:ca: 2e:56:83:71:4d:62:2f:d7:19:11:1c:a2:cb:63:62: 49:c2:f1:91:7d:2a:2d:dc:f1:6b:51:16:19:cd:3a: d0:14:5b:8b:29:4e:4d:1f:93:ec:95:8b:89:fb:2c: bb:4e:19:b4:0f:13:a6:50:05:29:86:27:c0:70:75: c7:2f:af:12:d1:7d:a7:0e:6f:10:ca:ab:c3:fa:44: 7e:47:6d:e9:c2:91:db:78:aa:24:65:d9:3d:60:74: bd:d7:38:aa:ef:f1:2d:d2:bb:20:58:72:5f:61:2a: cb:b7:fe:dd:ac:15:66:ba:81:fb:a4:14:d8:47:11: ea:7d:d2:89:36:8f:22:63:67:30:58:e6:c6:39:37: bd:18:ab:f4:ef:4e:1a:39:a3:c3:82:aa:3c:f4:46: e0:11:5c:36:04:dd:a4:af:89:ad:12:da:c0:dc:bc: 06:fa:29:4b:ad:cb:18:d0:0a:bd:b9:e9:04:79:c2: 1f:a7:de:0c:13:62:20:27:08:4f:a2:28:6a:1f:9f: b1:a9:d1:d5:1f:0d:33:6d:fa:b2:07:c5:e4:e0:19: fc:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:64:D3:09:34:84:88:C9:9D:23:8D:F5:E6:28:AE:61:0B:45:2D:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/60e3eed3-1d1c-39e6-883f-cd7c8ecd01e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.199.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:3e:3c:b7:1f:25:87:77:ba:d1:88:52:7f:1c:d3:b8:d2:c1: e0:2b:0c:6c:eb:ab:b5:78:bf:0e:44:c8:47:b6:b6:5e:2e:92: b7:60:e8:36:79:bf:0b:2b:03:b8:48:51:f8:dc:bc:ed:61:28: 74:63:7d:12:4f:5a:50:bd:9a:e2:23:60:35:2d:02:e7:74:ed: 2d:19:b5:01:82:54:81:24:78:1b:7e:19:99:dd:9f:71:1b:85: f5:0c:e2:55:cc:c3:cb:2d:99:87:14:b5:25:fa:5b:17:b2:ea: e5:b9:50:17:ad:0b:77:4b:91:77:5b:0a:e6:45:90:8f:c2:5f: 61:86:f2:ab:5f:1f:21:3b:b5:6d:e7:ab:e3:fc:51:40:dc:ef: d4:95:61:9a:dd:b4:47:11:05:90:55:07:f9:31:c0:f0:4e:73: 50:dd:d0:21:30:52:e2:05:40:15:93:f5:fd:2f:78:0b:12:c8: 09:5c:d5:89:b6:a3:b0:c7:8a:d9:9c:01:c6:a0:bb:63:2c:2f: 76:1e:94:aa:71:ce:c1:35:98:b4:fe:d7:61:c9:33:78:f0:52: 13:05:16:8b:16:d0:46:68:84:9e:08:9a:77:f4:c6:ce:1c:63: c2:76:17:34:0f:af:82:3f:38:42:8c:e4:b1:d2:57:49:5b:42: 4d:04:e3:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr1kGIiMaFWPiX6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk YzlkZjc3Y2UtYjQ5Yy00NjQ1LTliNjktM2Q0YjNhZmZjOTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OlBwrcih1XwPE0TLx/dNcE1BtnQo0KLw8g2 gO8jdrZnRZPZWpEOQyaXSsouVoNxTWIv1xkRHKLLY2JJwvGRfSot3PFrURYZzTrQ FFuLKU5NH5PslYuJ+yy7Thm0DxOmUAUphifAcHXHL68S0X2nDm8QyqvD+kR+R23p wpHbeKokZdk9YHS91ziq7/Et0rsgWHJfYSrLt/7drBVmuoH7pBTYRxHqfdKJNo8i Y2cwWObGOTe9GKv0704aOaPDgqo89EbgEVw2BN2kr4mtEtrA3LwG+ilLrcsY0Aq9 uekEecIfp94ME2IgJwhPoihqH5+xqdHVHw0zbfqyB8Xk4Bn8BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZk0wk0hIjJnSON9eYormELRS0vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjBlM2VlZDMtMWQxYy0z OWU2LTg4M2YtY2Q3YzhlY2QwMWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrsfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADo+PLcfJYd3utGIUn8c07jSweArDGzrq7V4vw5EyEe2tl4ukrdg6DZ5 vwsrA7hIUfjcvO1hKHRjfRJPWlC9muIjYDUtAud07S0ZtQGCVIEkeBt+GZndn3Eb hfUM4lXMw8stmYcUtSX6Wxey6uW5UBetC3dLkXdbCuZFkI/CX2GG8qtfHyE7tW3n q+P8UUDc79SVYZrdtEcRBZBVB/kxwPBOc1Dd0CEwUuIFQBWT9f0veAsSyAlc1Ym2 o7DHitmcAcagu2MsL3YelKpxzsE1mLT+12HJM3jwUhMFFosW0EZohJ4Imnf0xs4c Y8J2FzQPr4I/OEKM5LHSV0lbQk0E47k= -----END CERTIFICATE-----Generated at Thu Mar 26 03:44:51 2026 by rpki-client