$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f8a1aaa-8aff-316f-9bda-dbce8e1731c2.roa File: 8f8a1aaa-8aff-316f-9bda-dbce8e1731c2.roa (raw, json) Hash identifier: 0+8MiT/t+dzuRAZDXB9pstbTA1Qwkq4UGZKRB4ZqFMU= Subject key identifier: E2:C6:C2:59:31:E6:1C:BC:7F:AB:E8:CB:19:9C:B5:53:C8:DB:44:93 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D20AF65CFE2AE2E81838D7D80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f8a1aaa-8aff-316f-9bda-dbce8e1731c2.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 6167 IP address blocks: 174.218.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:65:cf:e2:ae:2e:81:83:8d:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=a3345922-17df-447f-9c8e-b60c55a0f85f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6e:0a:de:34:fe:4e:de:c3:ab:43:5f:be:f4: 8b:8b:8c:f9:53:54:0b:cc:59:1e:3f:fa:8f:75:65: c1:ca:34:41:cb:a9:0f:c3:ab:84:47:45:ae:06:14: 90:72:60:f3:6c:aa:41:d6:3b:fe:30:dc:f6:e2:7f: 02:ab:5c:55:c2:ba:3f:80:2e:e6:31:29:8e:2e:67: 80:42:bd:7a:cc:6f:d6:a0:02:3c:55:31:ca:36:af: 5b:ae:a7:73:73:28:6a:16:ad:d5:81:84:c6:af:10: 7c:7d:8b:50:7a:86:4b:bd:fb:fc:c6:dc:da:6a:e6: b4:86:46:b8:0c:74:c9:98:fc:5c:c3:a3:51:7f:ad: d4:1f:69:af:20:88:fe:e4:b2:2d:2b:25:ce:a9:1c: 55:da:b2:14:3a:4f:c2:73:18:e6:93:e9:aa:16:62: c0:82:96:27:ac:0b:82:3d:a0:76:39:39:91:20:cd: 44:d9:28:73:d9:61:3c:59:f5:58:99:00:5b:42:a3: 4a:aa:e2:25:7a:0f:f2:67:4e:f9:f8:32:07:1b:9b: 1f:c7:fc:68:b2:15:95:ba:5e:0e:25:8b:1e:47:98: e1:28:41:9f:46:f1:08:09:f1:fe:eb:17:af:f9:0c: 97:d5:01:59:f8:78:28:e2:4f:82:e3:c6:bb:2f:51: 95:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C6:C2:59:31:E6:1C:BC:7F:AB:E8:CB:19:9C:B5:53:C8:DB:44:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f8a1aaa-8aff-316f-9bda-dbce8e1731c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.218.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:f2:bd:dd:08:91:61:22:3e:cf:33:ee:19:03:64:0e:c1:b1: b8:43:99:82:e0:31:79:32:b0:6c:2e:4f:41:c9:60:2a:c8:66: 60:6c:2d:24:3d:cb:93:d1:3a:62:42:2e:c8:47:9a:4e:2e:f9: 89:6a:12:6d:34:80:bc:8c:c1:db:c7:c4:aa:18:1b:55:87:43: 94:cb:65:4f:c9:34:2f:d8:fc:4a:d2:d8:4f:96:89:bc:36:f0: 27:32:05:86:ca:5c:cd:89:2f:a8:49:c5:93:f6:8c:79:a1:d4: a1:72:72:99:63:d4:e6:80:12:ab:17:82:04:80:2d:3c:36:66: 60:7b:c7:6b:c6:e5:85:ae:76:bb:ad:28:73:41:ac:fe:88:ab: 6a:43:62:f3:2d:f3:45:f6:b5:26:f1:07:2e:38:c8:9e:49:48: 9d:e9:72:79:1b:83:7f:6f:d2:56:08:3a:5a:29:39:ff:90:3a: b5:50:b8:43:86:bc:d2:ee:51:cd:88:de:2e:d5:68:ee:70:e2: 98:ce:a5:16:4a:be:13:5d:18:83:43:d9:aa:6e:da:76:0c:b1: 28:2b:8c:2c:0d:6d:9c:71:13:78:e5:53:92:cf:a8:eb:7d:00: 08:e8:67:17:e7:db:dc:7d:87:65:71:ef:91:00:12:38:72:cf: af:ee:a1:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr2XP4q4ugYONfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk YTMzNDU5MjItMTdkZi00NDdmLTljOGUtYjYwYzU1YTBmODVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp24K3jT+Tt7Dq0NfvvSLi4z5U1QLzFkeP/qP dWXByjRBy6kPw6uER0WuBhSQcmDzbKpB1jv+MNz24n8Cq1xVwro/gC7mMSmOLmeA Qr16zG/WoAI8VTHKNq9brqdzcyhqFq3VgYTGrxB8fYtQeoZLvfv8xtzaaua0hka4 DHTJmPxcw6NRf63UH2mvIIj+5LItKyXOqRxV2rIUOk/Ccxjmk+mqFmLAgpYnrAuC PaB2OTmRIM1E2Shz2WE8WfVYmQBbQqNKquIleg/yZ075+DIHG5sfx/xoshWVul4O JYseR5jhKEGfRvEICfH+6xev+QyX1QFZ+Hgo4k+C48a7L1GVFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLGwlkx5hy8f6voyxmctVPI20STMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGY4YTFhYWEtOGFmZi0z MTZmLTliZGEtZGJjZThlMTczMWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrtp4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHyvd0IkWEiPs8z7hkDZA7BsbhDmYLgMXkysGwuT0HJYCrIZmBsLSQ9 y5PROmJCLshHmk4u+YlqEm00gLyMwdvHxKoYG1WHQ5TLZU/JNC/Y/ErS2E+Wibw2 8CcyBYbKXM2JL6hJxZP2jHmh1KFycplj1OaAEqsXggSALTw2ZmB7x2vG5YWudrut KHNBrP6Iq2pDYvMt80X2tSbxBy44yJ5JSJ3pcnkbg39v0lYIOlopOf+QOrVQuEOG vNLuUc2I3i7VaO5w4pjOpRZKvhNdGIND2apu2nYMsSgrjCwNbZxxE3jlU5LPqOt9 AAjoZxfn29x9h2Vx75EAEjhyz6/uoRE= -----END CERTIFICATE-----Generated at Thu Mar 26 03:47:14 2026 by rpki-client