$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8bce6a0e-be3d-3d58-a7d3-03472c3624f6.roa File: 8bce6a0e-be3d-3d58-a7d3-03472c3624f6.roa (raw, json) Hash identifier: CUlQQO+KZkmgWG+pJe7VnEq2n9TSMpRI2GTC5ds5x2E= Subject key identifier: 12:57:BD:8A:53:B2:D9:23:0B:EC:BF:84:19:D1:C3:FA:FD:C7:29:73 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D20AF5A09D08BB34EA795DD00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8bce6a0e-be3d-3d58-a7d3-03472c3624f6.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 6167 IP address blocks: 174.201.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:5a:09:d0:8b:b3:4e:a7:95:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=e721d463-7611-4335-b1e3-dfddabafaf1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5b:d6:5b:f0:c3:8e:fd:06:fa:a1:11:e4:0a: ad:c4:9c:49:32:69:e3:7f:f9:f2:15:3f:db:da:73: de:84:87:02:67:5f:e6:16:bc:14:10:84:ff:b8:54: f6:5c:96:1c:6a:a3:59:6e:e7:11:26:b8:45:25:52: 92:57:7a:3d:e9:d9:7a:93:0c:93:df:8f:53:e5:b2: 45:f6:5b:e7:2e:e8:e0:dc:bd:7c:b4:88:14:f5:30: ed:8a:1b:46:45:d0:e7:49:e8:d2:53:96:b7:83:9c: 26:0f:87:51:3d:ae:ec:92:a7:d5:17:41:bc:28:45: e5:8e:c3:c5:8f:cb:9b:6a:ee:6c:f8:b7:20:e5:fc: a0:dc:1b:a4:9b:ae:4e:09:39:86:28:0b:9d:ac:ec: 5f:7b:c1:4d:b9:46:da:19:41:c6:0f:2c:e7:c1:c6: 31:ba:2b:60:a9:7e:92:51:f2:31:e2:6d:48:4b:8f: aa:f1:46:41:e0:89:b0:cd:85:21:fc:af:18:68:c9: a3:e6:a4:9e:c3:a2:4b:c3:46:32:25:46:10:cd:9c: 96:7a:df:8f:7e:c6:45:b4:77:c5:e6:30:5b:68:25: f9:76:fd:21:84:00:5f:93:e2:a2:f9:2c:4a:63:c8: eb:ab:bc:62:57:42:a9:dd:47:2b:a5:78:7f:90:3b: 2e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:57:BD:8A:53:B2:D9:23:0B:EC:BF:84:19:D1:C3:FA:FD:C7:29:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8bce6a0e-be3d-3d58-a7d3-03472c3624f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.201.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:27:37:0c:87:1e:8c:d0:6d:10:80:9d:55:28:72:37:1e:de: 98:ce:7b:3d:98:3e:4b:0c:5e:ed:02:61:df:56:e0:77:8f:07: c4:13:08:1e:3b:5b:7e:37:c6:0d:4c:d6:f6:0f:78:42:ac:c8: f4:33:69:fa:15:1a:e2:0c:c7:be:8b:a7:6f:e1:83:6d:75:4d: 84:38:13:eb:4c:04:dc:60:a6:f1:fb:03:8d:59:80:13:f9:cc: c4:d7:b0:c0:c5:50:19:71:aa:f5:4f:60:1a:35:a7:4c:f4:1e: 52:3c:42:4b:8c:8e:3e:34:b8:ab:db:e9:3f:51:3c:93:0c:2c: c0:bb:ee:5e:61:b8:74:89:01:58:ff:38:aa:37:9c:fd:9b:0b: ec:82:d3:d5:c1:84:e7:98:d9:cf:49:96:30:72:8e:d5:84:64: 52:5e:75:9c:90:6b:60:34:b1:9b:ab:d3:e8:4a:23:5c:3c:4d: d1:50:70:bf:33:64:7f:9a:c4:d6:57:d0:ec:b4:26:f4:10:2b: 15:36:27:f8:36:1c:70:cb:a3:8d:0e:42:a7:3b:cc:d9:23:4a: a0:99:b7:7e:f1:d3:ee:ef:10:e5:d9:50:2c:18:cb:ce:08:91: a5:3d:f6:77:85:55:5f:dc:dd:22:7c:6c:e9:f0:b6:53:ff:af: 33:13:7f:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr1oJ0IuzTqeV3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk ZTcyMWQ0NjMtNzYxMS00MzM1LWIxZTMtZGZkZGFiYWZhZjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFvWW/DDjv0G+qER5AqtxJxJMmnjf/nyFT/b 2nPehIcCZ1/mFrwUEIT/uFT2XJYcaqNZbucRJrhFJVKSV3o96dl6kwyT349T5bJF 9lvnLujg3L18tIgU9TDtihtGRdDnSejSU5a3g5wmD4dRPa7skqfVF0G8KEXljsPF j8ubau5s+Lcg5fyg3Bukm65OCTmGKAudrOxfe8FNuUbaGUHGDyznwcYxuitgqX6S UfIx4m1IS4+q8UZB4ImwzYUh/K8YaMmj5qSew6JLw0YyJUYQzZyWet+PfsZFtHfF 5jBbaCX5dv0hhABfk+Ki+SxKY8jrq7xiV0Kp3UcrpXh/kDsugwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJXvYpTstkjC+y/hBnRw/r9xylzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGJjZTZhMGUtYmUzZC0z ZDU4LWE3ZDMtMDM0NzJjMzYyNGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErskAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwnNwyHHozQbRCAnVUocjce3pjOez2YPksMXu0CYd9W4HePB8QTCB47 W343xg1M1vYPeEKsyPQzafoVGuIMx76Lp2/hg211TYQ4E+tMBNxgpvH7A41ZgBP5 zMTXsMDFUBlxqvVPYBo1p0z0HlI8QkuMjj40uKvb6T9RPJMMLMC77l5huHSJAVj/ OKo3nP2bC+yC09XBhOeY2c9JljByjtWEZFJedZyQa2A0sZur0+hKI1w8TdFQcL8z ZH+axNZX0Oy0JvQQKxU2J/g2HHDLo40OQqc7zNkjSqCZt37x0+7vEOXZUCwYy84I kaU99neFVV/c3SJ8bOnwtlP/rzMTfwQ= -----END CERTIFICATE-----Generated at Thu Mar 26 08:04:07 2026 by rpki-client