$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9764dc1e-12a8-3e72-96ef-25dd14404724.roa File: 9764dc1e-12a8-3e72-96ef-25dd14404724.roa (raw, json) Hash identifier: CQKQEDay4gxffgIN00uLvrspkBKPTTAKdEYjirgwSvc= Subject key identifier: DB:C9:67:29:CA:2E:39:6D:79:E7:5E:7E:3B:6E:5A:F6:A3:1C:27:9A Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D9325616E7C82646DCFF52E00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9764dc1e-12a8-3e72-96ef-25dd14404724.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 6167 IP address blocks: 174.252.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:61:6e:7c:82:64:6d:cf:f5:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=7414c323-e19a-4371-b2fd-457439168b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4d:4f:06:74:3e:14:43:63:67:17:dc:ab:8c: 9e:3b:04:7d:51:db:1f:c7:03:73:b9:d8:5c:0f:0b: 81:bb:63:df:f2:9a:bf:27:44:a6:42:43:40:21:de: e8:47:21:e5:00:dd:0d:9f:7c:9f:7d:c8:db:fd:92: 50:6b:32:03:84:89:83:4c:e1:78:d5:c1:5d:d2:78: b4:fd:d1:7b:f1:ab:56:c2:96:ed:e4:f3:00:1f:83: 9f:df:dd:61:33:b2:ea:31:58:69:44:55:3a:c6:6e: 3f:c8:71:42:7f:49:44:b9:aa:bc:cb:fc:47:27:e4: c1:ec:dc:0f:2c:ef:2f:9a:e9:20:d9:b6:ba:2e:7e: 17:c0:d4:26:b7:1b:cb:8e:09:32:f4:35:72:e4:61: c5:1b:26:cb:f0:10:0c:cc:36:ec:f4:17:45:6f:3b: 83:d0:d1:38:0a:f1:a4:54:9a:5f:a0:84:fa:71:f9: f9:5c:51:44:2d:5f:f5:c4:95:21:51:9a:2e:2d:ca: 18:bf:fc:da:eb:0c:3c:54:60:3f:d8:30:47:6f:ca: 2c:42:40:7c:4e:a3:12:92:aa:2d:09:37:b3:fe:8b: a6:70:5b:fa:dd:04:34:4d:71:03:6c:33:51:48:dc: 69:cb:f3:3e:30:b7:dc:c6:b9:68:39:b7:6e:61:7e: a1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C9:67:29:CA:2E:39:6D:79:E7:5E:7E:3B:6E:5A:F6:A3:1C:27:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9764dc1e-12a8-3e72-96ef-25dd14404724.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.252.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:ac:41:54:89:9b:dc:fa:d5:1f:4d:65:be:1e:cb:1e:9d:81: 68:b5:39:c0:68:4c:13:a2:ba:3c:4f:e9:f4:46:6a:f0:44:53: 4d:c3:00:8d:dc:4f:c8:e7:72:6c:e4:85:bf:e5:c1:0e:be:af: a8:f0:df:52:bf:0b:d5:29:cb:4f:94:b0:a9:65:89:60:bc:89: 16:a0:5d:7c:df:b0:4b:18:72:d7:df:c6:72:d8:a2:41:ca:bc: ae:06:e1:33:00:cf:8a:d1:ae:d2:59:38:28:3d:da:a0:00:09: a0:c4:75:e7:42:b9:9a:07:4c:a6:b2:f1:cc:71:41:8e:ca:23: 74:19:76:ab:64:e7:ed:28:8d:55:7a:81:c5:96:ff:f6:e9:c2: 49:f5:35:b1:cc:96:ad:d0:e8:03:e1:37:a1:fe:45:5e:c6:f7: c1:11:71:8b:75:57:bd:32:ae:f3:95:68:3e:2d:66:5a:06:a2: a7:71:38:73:7e:42:1a:a4:88:16:ba:66:9d:65:37:89:b4:76: e2:4c:c1:a2:cf:77:8f:6c:88:b0:d5:16:d6:33:b6:6a:30:8b: 78:ce:f5:2b:6d:f2:78:9c:f7:46:b6:f5:94:8f:89:da:ef:43: 7b:42:f1:9b:b8:61:12:c2:2e:37:2f:3f:77:6c:12:cc:6f:3f: be:a4:f6:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJWFufIJkbc/1LgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk NzQxNGMzMjMtZTE5YS00MzcxLWIyZmQtNDU3NDM5MTY4YjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkU1PBnQ+FENjZxfcq4yeOwR9UdsfxwNzudhc DwuBu2Pf8pq/J0SmQkNAId7oRyHlAN0Nn3yffcjb/ZJQazIDhImDTOF41cFd0ni0 /dF78atWwpbt5PMAH4Of391hM7LqMVhpRFU6xm4/yHFCf0lEuaq8y/xHJ+TB7NwP LO8vmukg2ba6Ln4XwNQmtxvLjgky9DVy5GHFGybL8BAMzDbs9BdFbzuD0NE4CvGk VJpfoIT6cfn5XFFELV/1xJUhUZouLcoYv/za6ww8VGA/2DBHb8osQkB8TqMSkqot CTez/oumcFv63QQ0TXEDbDNRSNxpy/M+MLfcxrloObduYX6hBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvJZynKLjlteedefjtuWvajHCeaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTc2NGRjMWUtMTJhOC0z ZTcyLTk2ZWYtMjVkZDE0NDA0NzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErvygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEasQVSJm9z61R9NZb4eyx6dgWi1OcBoTBOiujxP6fRGavBEU03DAI3c T8jncmzkhb/lwQ6+r6jw31K/C9Upy0+UsKlliWC8iRagXXzfsEsYctffxnLYokHK vK4G4TMAz4rRrtJZOCg92qAACaDEdedCuZoHTKay8cxxQY7KI3QZdqtk5+0ojVV6 gcWW//bpwkn1NbHMlq3Q6APhN6H+RV7G98ERcYt1V70yrvOVaD4tZloGoqdxOHN+ QhqkiBa6Zp1lN4m0duJMwaLPd49siLDVFtYztmowi3jO9Stt8nic90a29ZSPidrv Q3tC8Zu4YRLCLjcvP3dsEsxvP76k9sA= -----END CERTIFICATE-----Generated at Wed May 13 15:14:00 2026 by rpki-client