$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/873db6a2-7d50-32b1-a9fc-35c900e1c71b.roa File: 873db6a2-7d50-32b1-a9fc-35c900e1c71b.roa (raw, json) Hash identifier: KhfIj3bsa4TBnNQkeJZzPkUH3jE2zOAmbZgcLvHD1ak= Subject key identifier: 5D:30:7C:E9:9F:CC:3A:A1:4B:99:88:B3:4A:0C:58:A8:06:6B:B1:E2 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D20AF66E0941E24E4FF515200 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/873db6a2-7d50-32b1-a9fc-35c900e1c71b.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 6167 IP address blocks: 174.218.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:66:e0:94:1e:24:e4:ff:51:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=2d2db977-0b06-4ef3-a152-f4e091298bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:41:a8:1d:a7:1d:e9:d1:f3:85:02:3d:86:02: 8d:9d:11:69:9b:bd:66:80:50:57:85:9b:5a:7c:b0: 3b:1a:a9:77:b7:e2:0a:f4:8a:25:e4:cd:45:e3:6c: 80:4d:df:2b:19:41:2e:32:65:f1:3d:2f:a9:c3:97: 6b:8c:85:e8:42:08:ed:c1:f1:26:a5:bf:71:9b:86: 99:3d:0e:bb:a7:ad:3d:e3:8c:1e:2b:32:d1:cd:1c: 36:07:eb:a8:2b:fe:22:6f:1c:f1:e2:a1:84:63:9e: 17:27:a8:55:24:34:85:00:fa:5d:1b:7a:1c:4f:0e: 61:cf:57:d3:20:ce:37:bc:24:65:bb:a6:ad:d1:87: 4e:ab:09:94:cc:40:24:7b:ec:35:81:2b:69:b0:22: 91:24:2d:59:e4:25:6d:fe:79:84:e2:26:a0:72:63: ea:d3:9d:16:67:32:b3:82:51:da:94:ca:da:a1:21: 5a:c4:5c:6a:43:7a:a1:6a:bd:87:7f:61:8f:be:f7: 07:68:dc:2e:4b:d1:7b:54:32:58:e1:13:59:f9:ce: 0f:ec:47:50:d6:2b:65:24:21:b4:50:65:57:3c:9b: 14:e7:f8:22:6c:13:97:d7:86:09:c2:3c:2b:b6:20: 8c:11:ee:ce:93:c2:68:45:52:22:9c:09:9f:da:c9: 38:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:30:7C:E9:9F:CC:3A:A1:4B:99:88:B3:4A:0C:58:A8:06:6B:B1:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/873db6a2-7d50-32b1-a9fc-35c900e1c71b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.218.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:9a:19:d5:87:79:43:c9:5d:85:25:d2:7a:b9:1f:b6:70:e0: d5:bf:90:ba:9e:8c:ed:46:c9:4b:0d:46:0d:04:22:09:e3:cf: ed:c1:e5:a0:64:2c:fa:c8:55:af:ff:59:0b:3f:46:76:3d:c3: 0e:7c:02:e4:26:51:c2:84:19:ec:3b:3a:f7:c0:e1:28:d2:17: ad:1e:9b:5f:af:da:81:3d:1c:19:a6:64:cc:50:99:29:c4:c4: 60:ef:78:f9:e9:d1:86:4c:02:fa:e2:6f:1d:d1:39:a4:d8:19: e8:52:03:f7:d8:83:30:e9:f7:1a:28:a8:94:2e:0a:94:6c:ec: 7f:a5:da:3e:c7:bc:b2:d4:a9:7b:38:9d:76:34:e1:f7:2f:b7: c5:ba:3c:c5:61:71:ee:f8:dd:94:14:79:07:34:88:39:67:9f: f5:ec:66:01:f5:1b:2d:47:e8:f2:f2:2b:f4:86:86:3c:06:40: e7:27:e3:3f:47:e2:9c:d8:0b:57:5a:a7:c8:fb:a6:4b:a4:df: f5:c6:68:a6:01:43:99:3a:dd:38:f5:ba:e0:c4:2d:33:27:69: 25:50:53:fa:24:ff:b2:91:b1:40:f5:b9:82:a5:bf:3c:c3:f1: cd:d3:d9:95:b8:fd:3b:2a:cf:56:4b:27:99:64:5d:46:6b:c5: d6:4f:77:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr2bglB4k5P9RUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk MmQyZGI5NzctMGIwNi00ZWYzLWExNTItZjRlMDkxMjk4YmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA90GoHacd6dHzhQI9hgKNnRFpm71mgFBXhZta fLA7Gql3t+IK9Iol5M1F42yATd8rGUEuMmXxPS+pw5drjIXoQgjtwfEmpb9xm4aZ PQ67p60944weKzLRzRw2B+uoK/4ibxzx4qGEY54XJ6hVJDSFAPpdG3ocTw5hz1fT IM43vCRlu6at0YdOqwmUzEAke+w1gStpsCKRJC1Z5CVt/nmE4iagcmPq050WZzKz glHalMraoSFaxFxqQ3qhar2Hf2GPvvcHaNwuS9F7VDJY4RNZ+c4P7EdQ1itlJCG0 UGVXPJsU5/gibBOX14YJwjwrtiCMEe7Ok8JoRVIinAmf2sk4LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0wfOmfzDqhS5mIs0oMWKgGa7HiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODczZGI2YTItN2Q1MC0z MmIxLWE5ZmMtMzVjOTAwZTFjNzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrtrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqaGdWHeUPJXYUl0nq5H7Zw4NW/kLqejO1GyUsNRg0EIgnjz+3B5aBk LPrIVa//WQs/RnY9ww58AuQmUcKEGew7OvfA4SjSF60em1+v2oE9HBmmZMxQmSnE xGDvePnp0YZMAvribx3ROaTYGehSA/fYgzDp9xooqJQuCpRs7H+l2j7HvLLUqXs4 nXY04fcvt8W6PMVhce743ZQUeQc0iDlnn/XsZgH1Gy1H6PLyK/SGhjwGQOcn4z9H 4pzYC1dap8j7pkuk3/XGaKYBQ5k63Tj1uuDELTMnaSVQU/ok/7KRsUD1uYKlvzzD 8c3T2ZW4/Tsqz1ZLJ5lkXUZrxdZPd2U= -----END CERTIFICATE-----Generated at Thu Mar 26 03:48:37 2026 by rpki-client