$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d9255a8-1df7-3ad2-b59a-e77ce003e62c.roa File: 8d9255a8-1df7-3ad2-b59a-e77ce003e62c.roa (raw, json) Hash identifier: cYVK9WleTbQmbIzTuFS/2gnpDxwvD3c4KUk84zjxX1E= Subject key identifier: 70:D5:9A:11:93:6A:34:C7:B2:A3:E2:8C:A5:E2:EC:E7:CD:BC:5E:20 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D20AF6101E3963A1290D42D80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d9255a8-1df7-3ad2-b59a-e77ce003e62c.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 6167 IP address blocks: 174.213.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:61:01:e3:96:3a:12:90:d4:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=9508a68b-af99-44e7-a6b3-c64c5a689b56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:25:1a:99:c9:06:76:f5:e9:74:31:c8:fa:72: b2:fa:44:9c:ba:84:64:83:76:7d:df:cd:83:fa:44: dc:1f:59:36:0b:bc:60:6a:e9:ae:b0:81:90:77:76: e6:c1:24:3c:7b:7f:96:cb:67:bf:d6:6d:67:35:54: 50:0f:bc:83:04:a7:3c:57:a0:8c:d0:53:63:1f:1c: e6:b7:00:08:3e:a9:b1:9d:5e:ad:75:0c:63:47:19: fd:d6:e9:80:1a:0b:1b:bd:fd:9d:36:23:11:61:43: ea:32:58:f6:96:25:58:73:e5:96:bb:ba:7b:73:1e: 20:4d:22:81:2e:d7:43:6f:bd:3e:50:56:db:2d:b1: f1:41:42:03:31:c6:f9:73:c3:f2:2d:e9:d1:84:e3: 0c:f1:eb:ac:c5:df:ed:03:eb:b4:57:b7:56:04:9b: 53:bc:9c:18:c0:f2:28:16:34:b8:ac:2c:d0:9b:cc: 92:46:34:6e:1e:83:54:57:41:c5:86:3f:ae:e8:39: 72:a7:2f:53:d4:aa:20:01:96:2f:c6:6a:6a:ae:a2: 97:a3:96:13:c3:e9:31:4a:fd:27:51:d1:71:b5:01: fb:3a:10:6e:22:f9:13:e5:c4:26:67:48:e8:c3:ef: df:e8:74:9b:35:fd:94:e0:b3:96:13:79:bb:2a:3d: 19:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D5:9A:11:93:6A:34:C7:B2:A3:E2:8C:A5:E2:EC:E7:CD:BC:5E:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8d9255a8-1df7-3ad2-b59a-e77ce003e62c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.213.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:e4:27:7a:dc:38:28:f7:48:06:a2:11:55:49:12:24:39:91: 1e:30:4b:f5:94:64:f5:57:5e:d9:d4:6f:67:a3:6f:c3:3f:4f: 63:cc:78:df:a4:ea:f4:40:b4:f1:39:d8:68:ae:1f:40:e7:00: 25:18:c5:73:4e:16:77:31:78:f4:92:82:e5:bd:aa:e8:06:fe: 78:0a:1d:a8:51:ab:da:e4:e0:d4:b2:bd:dc:56:12:26:1f:6b: 18:24:49:1a:fc:66:16:87:92:59:d0:cf:58:40:97:a1:60:6c: 12:1b:8c:44:7b:e5:a7:65:2a:1c:dc:a4:a9:6b:c6:77:8f:04: c1:f1:e1:fc:ce:4a:37:85:ed:92:97:31:72:b3:60:1b:37:58: aa:81:b0:7c:59:6f:ee:71:d9:72:e4:50:fa:1f:61:f6:f7:12: 68:e9:20:33:fb:73:7a:5b:d1:fe:d7:93:15:0e:86:c4:72:42: e5:95:cf:37:36:55:2f:12:54:68:e3:fc:25:9a:ae:4a:61:38: 35:20:80:d5:68:15:9b:5b:d9:9e:48:07:bb:d7:3b:12:a5:ba: 73:ea:01:a0:94:5a:36:4e:a2:53:2e:77:cd:33:15:ed:70:95: 99:fc:1a:d5:83:31:dd:77:d2:ea:bb:a5:26:46:67:e3:77:31: fe:e7:ef:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr2EB45Y6EpDULYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk OTUwOGE2OGItYWY5OS00NGU3LWE2YjMtYzY0YzVhNjg5YjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiUamckGdvXpdDHI+nKy+kScuoRkg3Z9382D +kTcH1k2C7xgaumusIGQd3bmwSQ8e3+Wy2e/1m1nNVRQD7yDBKc8V6CM0FNjHxzm twAIPqmxnV6tdQxjRxn91umAGgsbvf2dNiMRYUPqMlj2liVYc+WWu7p7cx4gTSKB LtdDb70+UFbbLbHxQUIDMcb5c8PyLenRhOMM8eusxd/tA+u0V7dWBJtTvJwYwPIo FjS4rCzQm8ySRjRuHoNUV0HFhj+u6Dlypy9T1KogAZYvxmpqrqKXo5YTw+kxSv0n UdFxtQH7OhBuIvkT5cQmZ0jow+/f6HSbNf2U4LOWE3m7Kj0ZjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDVmhGTajTHsqPijKXi7OfNvF4gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGQ5MjU1YTgtMWRmNy0z YWQyLWI1OWEtZTc3Y2UwMDNlNjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLkJ3rcOCj3SAaiEVVJEiQ5kR4wS/WUZPVXXtnUb2ejb8M/T2PMeN+k 6vRAtPE52GiuH0DnACUYxXNOFncxePSSguW9qugG/ngKHahRq9rk4NSyvdxWEiYf axgkSRr8ZhaHklnQz1hAl6FgbBIbjER75adlKhzcpKlrxnePBMHx4fzOSjeF7ZKX MXKzYBs3WKqBsHxZb+5x2XLkUPofYfb3EmjpIDP7c3pb0f7XkxUOhsRyQuWVzzc2 VS8SVGjj/CWarkphODUggNVoFZtb2Z5IB7vXOxKlunPqAaCUWjZOolMud80zFe1w lZn8GtWDMd130uq7pSZGZ+N3Mf7n71I= -----END CERTIFICATE-----Generated at Thu Mar 26 03:40:45 2026 by rpki-client