$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98d5e6a4-a62e-33be-b6b2-f3f22b0c663d.roa File: 98d5e6a4-a62e-33be-b6b2-f3f22b0c663d.roa (raw, json) Hash identifier: Rgq3OcEvXDoz4cG5RStkAAw9IHnCVWda/nhVgwhzAqs= Subject key identifier: 41:E1:21:D1:C1:8B:84:7B:DF:75:BC:13:C4:CA:0B:7B:58:72:05:6D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D47C4F9D24F0413C0A37E5600 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98d5e6a4-a62e-33be-b6b2-f3f22b0c663d.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 6167 IP address blocks: 174.239.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:f9:d2:4f:04:13:c0:a3:7e:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=168a1543-b6ad-486f-8ff7-0b59d0bcaa56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:53:d4:be:3f:00:f0:07:97:ed:fe:e0:bf:80: 98:2c:27:0a:e6:ff:c5:58:61:30:50:c9:a0:65:2b: 37:a5:4e:7d:8b:70:c7:1f:2b:e0:07:e2:bb:84:cf: f0:2f:6a:68:bd:a4:41:5f:46:fa:10:99:ef:58:d1: 59:0c:48:e0:84:92:37:2d:d5:4f:02:63:5f:19:0b: a1:7c:19:f1:60:a3:1c:04:5f:e7:78:22:f3:66:4a: 68:e1:00:c5:cc:1a:b7:e4:6c:e4:09:2b:a7:4b:03: 5a:20:16:c4:cf:b8:e8:a1:de:3d:5c:ca:ec:7d:19: 29:2e:11:80:25:5a:fe:66:1d:41:55:ff:17:5b:e8: 9c:e9:8b:82:af:fe:c5:99:0c:44:88:b5:ac:b2:4c: 92:59:de:b3:5a:4b:57:74:39:f5:4a:d5:56:e9:22: d8:72:93:d7:8c:83:0a:de:48:26:90:bd:42:43:7b: fa:b4:51:ef:0e:1d:fb:9a:07:7f:95:95:d4:12:da: 13:6b:33:e7:cb:73:90:e0:50:49:d8:61:cc:f9:d5: 42:ea:86:81:9a:bf:5d:ca:bc:6c:d3:45:3d:fa:e9: bc:69:8c:09:9e:c5:a2:04:de:c7:08:f2:c1:2f:02: fd:6e:62:10:0d:7a:fc:b7:f8:4e:a0:8e:6a:58:62: 6a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E1:21:D1:C1:8B:84:7B:DF:75:BC:13:C4:CA:0B:7B:58:72:05:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/98d5e6a4-a62e-33be-b6b2-f3f22b0c663d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.239.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:b3:c8:80:7d:ce:84:70:ec:a2:9c:cb:36:62:04:8d:71:0c: 43:27:e1:e3:e0:40:59:bc:8f:e0:2e:9c:fa:1a:b9:b8:37:54: 0b:34:a5:f1:9a:7f:a6:41:ee:89:95:d3:9c:7f:2d:1f:85:cc: f7:e9:9c:2e:15:37:88:75:d5:8f:89:0e:8a:9f:d2:e7:0d:d9: 3b:e1:c0:68:79:5c:51:6a:07:e8:d7:46:73:4a:f3:1b:dc:51: e8:38:9b:5c:06:4c:e5:a7:3a:78:1a:fb:cc:c6:71:e0:ea:d1: 9f:70:1f:4c:aa:6e:6f:3c:cc:4d:74:5a:d7:56:e5:4f:65:e0: 3f:db:cf:3e:22:a5:7b:a8:89:01:db:36:63:87:39:01:59:e9: 46:0f:cf:a0:de:2e:82:66:0c:79:ea:f3:6b:6c:90:3f:e1:9b: 13:6a:11:a1:39:b4:15:f6:a4:cc:01:06:4e:99:06:0c:e4:d7: 3a:80:3b:0e:c2:d2:66:ac:3d:1d:78:29:71:1e:d5:09:99:81: 99:c7:5a:0f:83:63:95:c0:da:94:b6:ea:55:7d:6e:73:d6:21: 7c:35:2d:8f:ef:58:64:2a:bc:5e:bc:b9:3a:64:89:87:4b:5c: 42:31:79:5e:5d:3b:6c:e7:90:a1:00:dc:52:9c:1e:6e:b2:fb: d8:12:70:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxPnSTwQTwKN+VgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk MTY4YTE1NDMtYjZhZC00ODZmLThmZjctMGI1OWQwYmNhYTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFPUvj8A8AeX7f7gv4CYLCcK5v/FWGEwUMmg ZSs3pU59i3DHHyvgB+K7hM/wL2povaRBX0b6EJnvWNFZDEjghJI3LdVPAmNfGQuh fBnxYKMcBF/neCLzZkpo4QDFzBq35GzkCSunSwNaIBbEz7jood49XMrsfRkpLhGA JVr+Zh1BVf8XW+ic6YuCr/7FmQxEiLWsskySWd6zWktXdDn1StVW6SLYcpPXjIMK 3kgmkL1CQ3v6tFHvDh37mgd/lZXUEtoTazPny3OQ4FBJ2GHM+dVC6oaBmr9dyrxs 00U9+um8aYwJnsWiBN7HCPLBLwL9bmIQDXr8t/hOoI5qWGJqeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHhIdHBi4R733W8E8TKC3tYcgVtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOThkNWU2YTQtYTYyZS0z M2JlLWI2YjItZjNmMjJiMGM2NjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCru8YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSzyIB9zoRw7KKcyzZiBI1xDEMn4ePgQFm8j+AunPoaubg3VAs0pfGa f6ZB7omV05x/LR+FzPfpnC4VN4h11Y+JDoqf0ucN2TvhwGh5XFFqB+jXRnNK8xvc Ueg4m1wGTOWnOnga+8zGceDq0Z9wH0yqbm88zE10WtdW5U9l4D/bzz4ipXuoiQHb NmOHOQFZ6UYPz6DeLoJmDHnq82tskD/hmxNqEaE5tBX2pMwBBk6ZBgzk1zqAOw7C 0masPR14KXEe1QmZgZnHWg+DY5XA2pS26lV9bnPWIXw1LY/vWGQqvF68uTpkiYdL XEIxeV5dO2znkKEA3FKcHm6y+9gScA0= -----END CERTIFICATE-----Generated at Thu Mar 26 15:51:40 2026 by rpki-client