$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/748ef434-f707-3079-9782-d67b421eb63e.roa File: 748ef434-f707-3079-9782-d67b421eb63e.roa (raw, json) Hash identifier: F6N5Ukp7tNsoIBFGxmHkuK5q3kjkQ6GHfdac2kPHqyU= Subject key identifier: D2:73:88:4D:D1:A4:42:9F:5B:D8:83:C6:93:AB:B8:55:AF:6C:8B:FC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F498649A063AC2F9B568BCA80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/748ef434-f707-3079-9782-d67b421eb63e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 6167 IP address blocks: 174.220.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:49:a0:63:ac:2f:9b:56:8b:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4df37568-1a51-4326-89a0-19f822fbc643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b2:f5:e6:16:09:c5:62:ae:29:0d:5a:06:d3: 54:dc:83:47:5a:96:de:c9:e0:89:bb:b9:f1:95:ad: 1c:d6:7b:05:a3:30:eb:e9:9a:be:f4:9f:1a:24:1f: 6f:f9:d1:b9:d1:f4:35:af:1c:f2:66:65:68:85:90: b7:18:f4:14:a4:eb:fb:07:7c:94:9e:97:09:d1:ff: 6d:7b:0a:bc:86:4a:a9:3f:85:c3:f2:02:f9:1f:81: 85:68:c1:9c:a9:76:f8:4a:52:76:a0:e4:3d:fc:fa: b4:4d:29:a1:f0:3e:13:b6:37:41:47:41:fc:02:e8: 83:08:f0:e9:32:7d:1b:c7:89:26:f1:fe:e0:0c:84: 17:1b:89:48:6f:2d:06:6f:2b:be:02:a1:22:11:49: c8:e0:aa:a1:9d:c3:9e:58:c1:5c:63:34:ad:1c:6d: cc:bd:9f:ad:dc:93:73:c5:73:59:d7:75:4d:8d:98: db:5a:45:03:48:f7:29:ef:81:54:31:a9:86:e6:63: 11:a8:ea:27:ec:20:bc:1e:98:ae:ac:47:85:8d:1c: da:cf:13:5c:57:03:b3:fa:a0:f6:a1:4b:77:cc:77: 69:1f:bd:6c:46:53:76:0c:f7:c1:1e:f8:ff:bb:1a: ed:75:5e:4c:08:43:ef:1a:3d:aa:54:2f:d5:40:6d: 30:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:73:88:4D:D1:A4:42:9F:5B:D8:83:C6:93:AB:B8:55:AF:6C:8B:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/748ef434-f707-3079-9782-d67b421eb63e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.220.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:78:91:c8:83:aa:fc:9e:ab:ee:57:f3:fe:08:6d:58:7a:d9: f0:86:be:74:08:f1:fb:fd:1c:3f:0a:aa:55:3b:81:c9:cd:dd: bc:93:00:0a:a0:dc:70:84:ef:05:ce:ab:6d:70:9a:66:e5:b0: 55:a8:b3:da:ae:0b:b6:98:51:6c:d5:94:c0:f3:07:b3:13:66: 7c:1b:ec:e8:a8:5b:e9:55:d6:50:dc:75:d1:35:b5:3f:df:fa: b9:6b:db:92:c7:aa:7b:5c:9b:69:0b:de:4d:83:b2:59:81:b6: ce:a4:dc:9b:d8:57:e4:ea:f2:26:d2:ac:f3:d4:86:28:eb:13: ce:8d:7c:b0:13:df:2e:74:ef:b8:b3:b3:64:6f:db:a4:3a:fd: 50:16:91:d7:68:50:37:c0:14:b2:75:6f:86:e1:6e:07:1e:75: 23:07:f2:bb:37:69:0b:2c:2d:d1:e2:a6:3c:43:4e:67:1e:55: 70:64:71:e3:90:19:b8:8f:3b:6e:e2:99:e7:34:11:f8:d0:72: 59:0f:d3:4c:e8:c5:1b:8a:33:25:6d:28:26:ff:7b:ce:4a:fe: de:da:c0:73:26:ee:34:30:4c:75:cf:df:0d:a6:ee:b8:9b:fa: 87:26:c0:65:7b:d4:af:75:e5:3b:80:8f:15:9c:bd:24:37:ce: 91:23:5e:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhkmgY6wvm1aLyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGRmMzc1NjgtMWE1MS00MzI2LTg5YTAtMTlmODIyZmJjNjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7L15hYJxWKuKQ1aBtNU3INHWpbeyeCJu7nx la0c1nsFozDr6Zq+9J8aJB9v+dG50fQ1rxzyZmVohZC3GPQUpOv7B3yUnpcJ0f9t ewq8hkqpP4XD8gL5H4GFaMGcqXb4SlJ2oOQ9/Pq0TSmh8D4TtjdBR0H8AuiDCPDp Mn0bx4km8f7gDIQXG4lIby0Gbyu+AqEiEUnI4KqhncOeWMFcYzStHG3MvZ+t3JNz xXNZ13VNjZjbWkUDSPcp74FUMamG5mMRqOon7CC8HpiurEeFjRzazxNcVwOz+qD2 oUt3zHdpH71sRlN2DPfBHvj/uxrtdV5MCEPvGj2qVC/VQG0wuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJziE3RpEKfW9iDxpOruFWvbIv8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzQ4ZWY0MzQtZjcwNy0z MDc5LTk3ODItZDY3YjQyMWViNjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADp4kciDqvyeq+5X8/4IbVh62fCGvnQI8fv9HD8KqlU7gcnN3byTAAqg 3HCE7wXOq21wmmblsFWos9quC7aYUWzVlMDzB7MTZnwb7OioW+lV1lDcddE1tT/f +rlr25LHqntcm2kL3k2DslmBts6k3JvYV+Tq8ibSrPPUhijrE86NfLAT3y5077iz s2Rv26Q6/VAWkddoUDfAFLJ1b4bhbgcedSMH8rs3aQssLdHipjxDTmceVXBkceOQ GbiPO27imec0EfjQclkP00zoxRuKMyVtKCb/e85K/t7awHMm7jQwTHXP3w2m7rib +ocmwGV71K915TuAjxWcvSQ3zpEjXsw= -----END CERTIFICATE-----Generated at Mon Sep 28 22:30:30 2026 by rpki-client