$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a4029a1-2046-3c1b-b28c-ef0f3748a400.roa File: 7a4029a1-2046-3c1b-b28c-ef0f3748a400.roa (raw, json) Hash identifier: eRXw5/cZcT+J0Py/LdmAdgkFbKuBpMmjE+xYwd9Lq7M= Subject key identifier: E3:33:58:E3:E9:08:E4:DF:B4:7A:5C:1B:72:8F:C2:A4:12:B6:6C:F6 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D47C4F2F4CE80D2DF83D3AAC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a4029a1-2046-3c1b-b28c-ef0f3748a400.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 6167 IP address blocks: 174.229.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:f2:f4:ce:80:d2:df:83:d3:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=a5028f3a-6b86-4271-b80b-2b64738d5518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8e:67:cc:b0:78:c7:85:12:3d:1f:0b:a4:54: 6a:2c:5a:58:dd:f2:3f:f7:b2:62:4a:0b:97:22:90: 79:da:49:d5:cd:c1:2b:ce:5d:40:a6:da:d2:de:36: 52:d1:d2:52:6b:35:26:5a:5d:1a:04:e8:0d:ef:f1: 55:a5:af:9b:64:cd:a6:d8:90:49:79:9a:db:35:0a: 08:53:67:1d:a6:90:14:0f:c8:2b:11:69:60:30:52: ef:4d:53:1b:02:c4:9c:48:93:31:43:92:7d:dc:b7: b9:88:38:de:63:5b:3a:30:4f:c7:00:43:05:ea:f7: 7c:5c:99:93:ae:c3:94:73:ee:2c:20:d2:5a:5e:9e: a8:c8:99:1a:a3:37:35:92:c3:b6:f5:07:55:31:08: 4e:4f:4f:2a:2d:ab:04:1d:e2:6a:23:cd:7e:00:e3: 5d:86:e6:e5:20:9b:79:df:56:32:56:8b:59:41:85: 7f:8d:f3:16:58:17:31:39:82:16:29:ca:cc:eb:46: fe:30:c6:90:da:ec:9f:60:79:18:54:93:c5:b1:2f: e5:3f:3f:59:5f:7d:dc:d8:ad:4f:2b:34:6e:18:65: 33:79:bf:e3:8e:f8:b6:ed:5f:b3:5f:99:08:53:8b: 25:f6:96:3e:54:a7:da:2b:42:1c:dc:0d:77:74:ac: c1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:33:58:E3:E9:08:E4:DF:B4:7A:5C:1B:72:8F:C2:A4:12:B6:6C:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a4029a1-2046-3c1b-b28c-ef0f3748a400.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.229.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:e0:42:09:23:ef:ef:68:88:bc:f0:14:ee:00:86:1c:3d:d7: 25:7f:88:78:7f:d9:ed:29:cf:93:63:6e:60:c3:e5:fa:9d:4f: db:1c:ca:85:9c:72:df:a6:95:17:57:57:90:77:9a:8b:14:56: b1:e7:a1:25:04:cf:2d:b7:cc:30:61:6a:16:1f:40:b5:48:bd: 46:fb:af:0f:41:ee:23:1f:c2:da:3d:e9:dc:af:72:30:f0:56: da:21:2c:29:16:9e:09:e6:0a:bc:c6:10:3c:b6:b4:9c:51:e4: 3b:04:70:a7:eb:46:11:3d:87:06:cb:74:7f:aa:d3:86:46:3b: 02:33:ff:81:20:8e:59:20:82:07:db:d7:b5:44:1c:54:e3:e4: 11:b5:75:6e:93:10:3e:6d:30:50:8f:89:0f:56:05:74:6e:fb: 39:5e:d4:00:68:7e:86:3c:0c:ee:e8:a2:a1:36:fc:4f:7f:f2: 74:2d:4c:b4:96:a5:9e:f1:9d:39:2c:14:cd:30:cc:e0:5e:eb: 84:f5:1e:cc:4e:ea:d7:31:ce:59:54:d8:8d:5f:e3:a9:d6:18: 50:33:a2:2c:cc:67:95:7f:e5:73:0e:e7:3d:7c:df:33:2b:1f: f8:2d:ba:d8:68:65:2b:25:0b:56:76:5f:66:f7:2d:90:68:70: a3:83:6c:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxPL0zoDS34PTqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk YTUwMjhmM2EtNmI4Ni00MjcxLWI4MGItMmI2NDczOGQ1NTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto5nzLB4x4USPR8LpFRqLFpY3fI/97JiSguX IpB52knVzcErzl1AptrS3jZS0dJSazUmWl0aBOgN7/FVpa+bZM2m2JBJeZrbNQoI U2cdppAUD8grEWlgMFLvTVMbAsScSJMxQ5J93Le5iDjeY1s6ME/HAEMF6vd8XJmT rsOUc+4sINJaXp6oyJkaozc1ksO29QdVMQhOT08qLasEHeJqI81+AONdhublIJt5 31YyVotZQYV/jfMWWBcxOYIWKcrM60b+MMaQ2uyfYHkYVJPFsS/lPz9ZX33c2K1P KzRuGGUzeb/jjvi27V+zX5kIU4sl9pY+VKfaK0Ic3A13dKzBbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMzWOPpCOTftHpcG3KPwqQStmz2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvN2E0MDI5YTEtMjA0Ni0z YzFiLWIyOGMtZWYwZjM3NDhhNDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXgQgkj7+9oiLzwFO4Ahhw91yV/iHh/2e0pz5NjbmDD5fqdT9scyoWc ct+mlRdXV5B3mosUVrHnoSUEzy23zDBhahYfQLVIvUb7rw9B7iMfwto96dyvcjDw VtohLCkWngnmCrzGEDy2tJxR5DsEcKfrRhE9hwbLdH+q04ZGOwIz/4Egjlkgggfb 17VEHFTj5BG1dW6TED5tMFCPiQ9WBXRu+zle1ABofoY8DO7ooqE2/E9/8nQtTLSW pZ7xnTksFM0wzOBe64T1HsxO6tcxzllU2I1f46nWGFAzoizMZ5V/5XMO5z183zMr H/gtuthoZSslC1Z2X2b3LZBocKODbKQ= -----END CERTIFICATE-----Generated at Thu Mar 26 03:55:59 2026 by rpki-client