$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/687f7bd4-6d69-3780-9ad5-7d51004a6203.roa File: 687f7bd4-6d69-3780-9ad5-7d51004a6203.roa (raw, json) Hash identifier: ZhPgBHkebrIOTP7fc09ZU3Kl0cM5wbqsEzc0eNcJvFA= Subject key identifier: 0B:2C:73:4B:FE:21:43:E5:59:D8:17:12:87:DF:3C:E3:A7:10:1A:DF Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D1F4A3410BC7DF6B08BEBF100 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/687f7bd4-6d69-3780-9ad5-7d51004a6203.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 6167 IP address blocks: 174.243.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:34:10:bc:7d:f6:b0:8b:eb:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=0ed44020-bd76-4761-960c-07a96e0b9e03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:1d:fb:3c:a7:b7:69:c2:47:0f:cc:57:3d:c7: 74:0b:f3:21:0a:d9:cd:a3:bd:72:24:ba:47:ce:9b: 20:ee:7a:05:7c:2d:f7:82:13:4b:ad:a9:8b:0b:96: 36:84:02:d0:dd:33:03:ae:d1:38:d7:57:64:ce:5d: 5c:e6:d9:20:b6:0e:72:5c:2d:91:f7:f0:2d:6d:fb: 1c:6f:d9:57:16:44:31:d7:91:1a:7b:e9:0e:02:9e: 91:b4:28:26:91:39:f7:ea:f4:cc:af:b6:3a:d7:17: d4:4c:d0:f8:ec:5a:6c:52:77:05:8e:54:6f:74:5f: e7:8d:60:1b:63:29:fa:47:82:5f:c4:5e:3d:9c:06: 51:6c:9f:75:8b:50:02:5e:0b:de:1b:18:63:68:49: 32:44:fa:2e:b7:31:71:03:50:68:72:65:e2:ed:7a: 6d:e1:1d:cd:9f:b3:73:46:39:da:a5:c3:f1:b2:0b: 1f:58:cf:d6:04:b5:93:5f:1e:94:15:9a:25:de:07: 29:1d:ca:bf:d6:1c:ec:6b:bc:4d:1e:8f:78:79:d2: e0:0c:b7:f9:e1:10:fb:34:f6:0a:14:9e:b6:4c:53: be:62:bc:f4:dc:b2:bd:22:1f:8c:99:03:1a:df:92: 0f:fa:b5:ef:f1:87:ba:b2:eb:7b:f9:9a:be:8b:6a: 33:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:2C:73:4B:FE:21:43:E5:59:D8:17:12:87:DF:3C:E3:A7:10:1A:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/687f7bd4-6d69-3780-9ad5-7d51004a6203.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.243.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:76:4a:78:72:48:4f:fe:67:34:1e:8c:21:57:ae:a2:8b:a5: 69:19:7c:40:1c:07:87:db:26:f4:5c:67:a9:07:9f:42:9f:ac: 82:82:b6:34:b9:19:10:fa:db:a2:eb:62:a8:f1:c8:60:51:93: 23:7c:4f:08:e0:17:d8:92:4b:0e:5d:bd:3a:91:61:c8:e5:b4: 20:8b:57:c5:5e:27:36:d5:17:3b:6f:c5:56:04:7d:3e:07:a3: 46:11:a6:1f:e9:82:36:d2:52:cd:ef:4f:02:eb:7a:46:00:60: 39:dd:ec:ae:88:e6:77:c9:c9:a0:f5:a0:b2:42:d7:6d:f2:bd: 4e:79:7f:38:73:d2:77:a6:bf:f7:97:89:f8:a9:52:06:ec:c0: 27:27:6c:42:7f:f3:81:77:8e:99:5a:c6:b9:7d:e5:17:c0:a7: ed:c4:4f:cd:46:c3:6d:84:fd:b9:ae:94:f9:2e:10:7f:1a:d1: b2:a7:32:6e:5a:e5:1b:e5:7d:a5:eb:ec:ab:8a:2f:dc:11:d6: a1:63:6e:f8:4c:11:16:bc:b5:13:a2:87:fe:9c:5d:43:39:71: e6:7f:17:ee:4d:b1:60:35:eb:c3:07:94:8e:0e:ac:32:f3:39: 59:f1:16:b2:b5:06:0d:75:4a:5f:82:cb:1f:ba:e2:8b:19:d3: 9b:ff:c7:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSjQQvH32sIvr8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk MGVkNDQwMjAtYmQ3Ni00NzYxLTk2MGMtMDdhOTZlMGI5ZTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+R37PKe3acJHD8xXPcd0C/MhCtnNo71yJLpH zpsg7noFfC33ghNLramLC5Y2hALQ3TMDrtE411dkzl1c5tkgtg5yXC2R9/Atbfsc b9lXFkQx15Eae+kOAp6RtCgmkTn36vTMr7Y61xfUTND47FpsUncFjlRvdF/njWAb Yyn6R4JfxF49nAZRbJ91i1ACXgveGxhjaEkyRPoutzFxA1BocmXi7Xpt4R3Nn7Nz RjnapcPxsgsfWM/WBLWTXx6UFZol3gcpHcq/1hzsa7xNHo94edLgDLf54RD7NPYK FJ62TFO+Yrz03LK9Ih+MmQMa35IP+rXv8Ye6sut7+Zq+i2ozrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAssc0v+IUPlWdgXEoffPOOnEBrfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjg3ZjdiZDQtNmQ2OS0z NzgwLTlhZDUtN2Q1MTAwNGE2MjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErvMQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE92SnhySE/+ZzQejCFXrqKLpWkZfEAcB4fbJvRcZ6kHn0KfrIKCtjS5 GRD626LrYqjxyGBRkyN8TwjgF9iSSw5dvTqRYcjltCCLV8VeJzbVFztvxVYEfT4H o0YRph/pgjbSUs3vTwLrekYAYDnd7K6I5nfJyaD1oLJC123yvU55fzhz0nemv/eX ifipUgbswCcnbEJ/84F3jplaxrl95RfAp+3ET81Gw22E/bmulPkuEH8a0bKnMm5a 5RvlfaXr7KuKL9wR1qFjbvhMERa8tROih/6cXUM5ceZ/F+5NsWA168MHlI4OrDLz OVnxFrK1Bg11Sl+Cyx+64osZ05v/x8I= -----END CERTIFICATE-----Generated at Thu Mar 26 17:09:06 2026 by rpki-client