$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87de5256-41a4-3403-8bf2-0e40f5e060ac.roa File: 87de5256-41a4-3403-8bf2-0e40f5e060ac.roa (raw, json) Hash identifier: ubWOXzCk3AGNAs+HiovJzkzjOBRmd9Cn7c4LjlUJeFE= Subject key identifier: 4D:7E:C8:C0:B0:55:20:87:FE:F8:6D:E3:B4:7A:BD:CF:72:84:30:99 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D20AF74D95D752F1737CED200 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87de5256-41a4-3403-8bf2-0e40f5e060ac.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 6167 IP address blocks: 174.224.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:74:d9:5d:75:2f:17:37:ce:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=90a1e0f8-116a-4919-988b-ff452cd84555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d0:f5:c2:52:fc:1e:74:34:09:7e:64:4a:bb: f2:fc:64:bf:dc:ef:22:88:ed:f5:8d:fa:71:a5:0d: 4a:80:85:6d:67:bd:88:37:ca:2b:3f:38:ab:80:e2: 1b:ba:b0:82:fe:26:d7:06:64:4a:89:7a:46:5d:41: 55:53:36:02:12:84:ef:66:8e:a3:5f:7e:0f:42:2b: 2f:8a:00:5a:ce:f3:32:d7:80:cf:94:b3:e3:69:f4: 8c:f9:bb:58:8f:3e:33:2e:df:31:59:5e:f2:12:bb: 2e:09:d5:ee:d7:4a:f0:64:23:ce:eb:67:5a:47:13: 30:9b:73:91:1d:b3:53:c7:93:cc:3f:5f:2a:5f:c0: af:54:a7:65:e4:08:ad:f2:f8:b3:dd:b5:bf:7e:2a: 8e:cc:45:de:34:29:d3:3b:80:ee:63:42:d2:8c:16: 68:ea:cd:f9:fa:f3:ac:b9:1c:31:e8:49:be:2a:07: f7:71:f0:fa:e5:dc:2b:1f:3d:00:cd:48:58:5c:13: e4:24:8e:7b:3f:42:26:a1:57:ba:e8:91:bb:29:1e: 82:6b:a1:9e:3a:25:de:4b:dc:50:35:92:29:4c:df: 09:62:20:08:91:71:8a:53:dd:50:a5:33:34:50:41: c6:f6:83:99:3f:de:5e:e5:2f:69:07:0a:c6:4b:38: 00:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:7E:C8:C0:B0:55:20:87:FE:F8:6D:E3:B4:7A:BD:CF:72:84:30:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/87de5256-41a4-3403-8bf2-0e40f5e060ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.224.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:55:38:95:2a:ea:5c:2c:c2:12:f4:3a:33:57:4d:2c:21:0b: 95:dc:9c:6e:aa:e9:10:ea:57:1d:53:fb:36:50:21:3b:41:8c: 17:ee:4e:ee:39:e7:30:28:0f:a8:83:5b:19:7a:3a:61:2d:02: 02:ba:6f:e3:79:79:df:a8:54:94:b0:df:a9:89:6e:11:26:3c: 66:b8:a0:13:e8:97:57:84:0b:ae:18:36:1a:64:06:ad:1e:f2: 93:31:fb:6e:20:bb:e2:63:8d:9e:e5:75:53:a5:0d:92:f7:f8: 8c:68:80:4a:f7:79:ac:52:1d:66:07:34:d2:5e:9b:b5:a1:cb: fa:b8:7c:b7:ef:62:f6:a9:9b:0b:b1:d1:39:29:e2:7c:51:47: b2:7b:f6:24:68:ce:e8:26:52:e7:33:36:94:d2:76:40:f7:5d: ac:74:ae:e3:e7:dd:c6:6e:bc:05:78:32:38:bb:62:a4:b9:b9: c4:c5:bb:73:2a:6e:3e:61:12:bf:3d:87:b5:66:88:c1:51:6a: e6:cb:ba:da:9a:47:77:2f:f5:0a:c8:c4:49:bf:82:1b:85:54: de:77:c7:be:74:69:9e:5e:fb:02:a3:3d:cd:79:0b:4e:ab:b6: 95:2d:32:72:37:37:d4:08:ff:1a:b2:b5:2b:f1:a3:4b:a7:a8: 29:bd:96:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr3TZXXUvFzfO0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk OTBhMWUwZjgtMTE2YS00OTE5LTk4OGItZmY0NTJjZDg0NTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9D1wlL8HnQ0CX5kSrvy/GS/3O8iiO31jfpx pQ1KgIVtZ72IN8orPzirgOIburCC/ibXBmRKiXpGXUFVUzYCEoTvZo6jX34PQisv igBazvMy14DPlLPjafSM+btYjz4zLt8xWV7yErsuCdXu10rwZCPO62daRxMwm3OR HbNTx5PMP18qX8CvVKdl5Ait8viz3bW/fiqOzEXeNCnTO4DuY0LSjBZo6s35+vOs uRwx6Em+Kgf3cfD65dwrHz0AzUhYXBPkJI57P0ImoVe66JG7KR6Ca6GeOiXeS9xQ NZIpTN8JYiAIkXGKU91QpTM0UEHG9oOZP95e5S9pBwrGSzgAJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1+yMCwVSCH/vht47R6vc9yhDCZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODdkZTUyNTYtNDFhNC0z NDAzLThiZjItMGU0MGY1ZTA2MGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDruCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZVOJUq6lwswhL0OjNXTSwhC5XcnG6q6RDqVx1T+zZQITtBjBfuTu45 5zAoD6iDWxl6OmEtAgK6b+N5ed+oVJSw36mJbhEmPGa4oBPol1eEC64YNhpkBq0e 8pMx+24gu+JjjZ7ldVOlDZL3+IxogEr3eaxSHWYHNNJem7Why/q4fLfvYvapmwux 0Tkp4nxRR7J79iRozugmUuczNpTSdkD3Xax0ruPn3cZuvAV4Mji7YqS5ucTFu3Mq bj5hEr89h7VmiMFRaubLutqaR3cv9QrIxEm/ghuFVN53x750aZ5e+wKjPc15C06r tpUtMnI3N9QI/xqytSvxo0unqCm9lm4= -----END CERTIFICATE-----Generated at Thu Mar 26 15:08:40 2026 by rpki-client