$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8a88e73f-9285-3947-8fc0-c9511bdd3995.roa File: 8a88e73f-9285-3947-8fc0-c9511bdd3995.roa (raw, json) Hash identifier: sjUG/VkHedOyn+g00nOdLHMe3zkotmdhWSKGRwO0+10= Subject key identifier: 9E:12:6D:F1:18:3B:AD:B1:83:2C:B7:7A:E5:21:76:45:33:71:A8:B7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D47C4EFB53CC9A768E70B8140 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8a88e73f-9285-3947-8fc0-c9511bdd3995.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 6167 IP address blocks: 174.226.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:ef:b5:3c:c9:a7:68:e7:0b:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=2c1fc64d-8804-4105-a6b6-69efac5f7a51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:53:a9:95:e7:f4:d3:fe:23:d7:17:a3:7d:e8: 6b:90:be:d3:83:52:ac:80:f4:a1:38:24:3e:f7:a3: 04:25:2b:b4:4c:3a:48:7d:7d:f1:6d:1b:ae:f7:c9: 07:86:bf:f4:8b:1a:be:41:45:30:e0:87:1c:10:58: d5:d2:00:22:6b:fb:e5:31:67:59:20:29:30:33:39: a2:55:4b:55:1f:9f:c7:32:01:94:2a:f3:57:3f:03: db:fe:ef:b8:69:86:ca:c9:2b:30:f6:e1:91:fd:92: cd:7b:dc:f6:e1:68:01:d2:6d:1f:1f:29:cb:7d:c7: c4:54:e9:f5:0b:f0:d2:68:38:b4:3c:5f:22:16:a5: 98:01:4d:eb:ab:8c:60:a4:ce:ed:19:9b:a5:ec:5b: ec:43:dc:1e:c7:a2:d5:d7:ce:cb:de:49:da:21:47: f3:ad:a1:0c:0f:ee:e3:ac:72:ce:32:d7:71:69:2c: b9:5f:42:0d:7e:72:df:b6:99:92:75:2a:d9:ad:81: 12:1b:6a:78:8b:89:20:d6:7f:75:f9:ee:85:ec:9a: bb:e7:87:06:c3:cc:24:e9:45:c7:61:7a:51:9c:85: 0f:16:a1:c5:2e:7f:14:b9:32:65:ce:2d:f8:6e:84: 56:57:69:04:0b:12:93:35:37:ba:ed:20:d4:14:93: 9f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:12:6D:F1:18:3B:AD:B1:83:2C:B7:7A:E5:21:76:45:33:71:A8:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8a88e73f-9285-3947-8fc0-c9511bdd3995.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.226.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:a5:04:3d:94:a1:28:40:c7:b2:5f:7a:01:68:e5:d0:8a:e6: a9:80:b8:9c:ee:1e:c0:15:19:f1:c4:60:5b:fa:28:77:7d:3a: 2d:1c:f3:ac:b0:8a:40:70:85:83:0c:83:80:5c:67:9f:f1:a1: 02:17:aa:68:99:26:69:37:62:63:4c:8f:19:30:83:ab:09:8f: 80:1f:aa:bd:29:8d:f4:af:91:c3:82:3a:6a:fe:12:4a:86:b7: c2:cf:6d:cf:42:80:07:19:0e:8b:4d:bf:b5:37:40:cc:48:34: 2c:e4:0e:ee:c1:fe:f9:26:51:4e:5d:cb:11:9d:03:a9:ab:82: ae:8f:e1:1a:19:ec:2b:94:82:ee:b4:4d:f9:cf:95:6c:c1:1b: ed:5e:1d:14:25:90:95:53:25:59:3b:43:2d:8e:e4:76:ba:d1: 39:d5:e7:8c:53:2d:d0:c8:cf:b6:f9:ea:a0:13:12:fc:ab:0e: a1:79:7b:09:2f:59:82:7f:e1:25:a7:97:c5:24:a0:e2:49:00: f3:fc:e5:e0:2f:7a:6c:22:4a:a1:14:60:a5:9c:69:4c:21:5b: 44:09:39:95:09:a8:1b:c3:37:64:e3:4a:d0:36:c0:c0:66:9e: ec:fd:a9:fa:75:80:de:8d:c5:02:b1:26:e2:32:f8:8a:82:71: 19:84:0b:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxO+1PMmnaOcLgUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk MmMxZmM2NGQtODgwNC00MTA1LWE2YjYtNjllZmFjNWY3YTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlOplef00/4j1xejfehrkL7Tg1KsgPShOCQ+ 96MEJSu0TDpIfX3xbRuu98kHhr/0ixq+QUUw4IccEFjV0gAia/vlMWdZICkwMzmi VUtVH5/HMgGUKvNXPwPb/u+4aYbKySsw9uGR/ZLNe9z24WgB0m0fHynLfcfEVOn1 C/DSaDi0PF8iFqWYAU3rq4xgpM7tGZul7FvsQ9wex6LV187L3knaIUfzraEMD+7j rHLOMtdxaSy5X0INfnLftpmSdSrZrYESG2p4i4kg1n91+e6F7Jq754cGw8wk6UXH YXpRnIUPFqHFLn8UuTJlzi34boRWV2kECxKTNTe67SDUFJOfFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4SbfEYO62xgyy3euUhdkUzcai3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGE4OGU3M2YtOTI4NS0z OTQ3LThmYzAtYzk1MTFiZGQzOTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6lBD2UoShAx7JfegFo5dCK5qmAuJzuHsAVGfHEYFv6KHd9Oi0c86yw ikBwhYMMg4BcZ5/xoQIXqmiZJmk3YmNMjxkwg6sJj4Afqr0pjfSvkcOCOmr+EkqG t8LPbc9CgAcZDotNv7U3QMxINCzkDu7B/vkmUU5dyxGdA6mrgq6P4RoZ7CuUgu60 TfnPlWzBG+1eHRQlkJVTJVk7Qy2O5Ha60TnV54xTLdDIz7b56qATEvyrDqF5ewkv WYJ/4SWnl8UkoOJJAPP85eAvemwiSqEUYKWcaUwhW0QJOZUJqBvDN2TjStA2wMBm nuz9qfp1gN6NxQKxJuIy+IqCcRmECw8= -----END CERTIFICATE-----Generated at Thu Mar 26 17:38:22 2026 by rpki-client