$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a720f3f7-daa9-3495-8ee1-cbf733dab870.roa File: a720f3f7-daa9-3495-8ee1-cbf733dab870.roa (raw, json) Hash identifier: Panuz30ZFiN2/tWR/uDmQw09OZ0ONvWHIROno8E48fk= Subject key identifier: 08:12:6A:93:77:B1:57:A0:79:AB:36:2E:3D:31:6A:3C:E2:8B:70:47 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584DAAE039F09A1CE233CC122040 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a720f3f7-daa9-3495-8ee1-cbf733dab870.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 6167 IP address blocks: 174.200.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:39:f0:9a:1c:e2:33:cc:12:20:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=91b0aaa7-15a2-43a1-a14f-1bb0f7de78c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:16:21:bd:aa:c0:9f:65:2a:d5:a7:bb:0d:7c: 0f:47:7e:97:db:06:83:5b:1f:11:94:84:e5:58:5a: 98:75:1d:01:2e:e2:13:e3:0e:7d:99:10:ea:56:41: d7:5d:6b:2a:aa:c9:f3:ae:ae:66:65:e0:9b:16:8d: 1e:53:82:bd:b8:c1:f3:33:37:8d:94:f4:21:91:9f: 53:f1:27:df:68:44:f5:c4:41:85:8e:59:86:45:33: f9:a6:7a:62:fb:3c:5a:61:53:c3:3c:af:bc:c1:37: d1:e6:2c:7a:1c:2f:86:d2:db:0d:89:bc:3d:a9:63: ea:6f:51:13:c4:8b:62:9c:64:4e:d2:95:da:ae:3c: 17:cf:86:cf:44:5e:b8:ec:c8:6b:fb:b0:84:ee:17: 3e:2d:f0:9c:ac:ef:9f:95:de:4a:f2:06:f3:f6:73: b8:f2:62:8c:cd:96:60:28:bb:c5:1c:70:35:4e:42: 77:70:d8:82:1c:67:27:4b:bd:34:f4:03:a5:8e:5b: 41:97:da:8d:fd:7c:0a:f3:f8:c3:ee:22:33:b1:c5: 9e:29:36:30:c7:75:53:5a:ff:2a:04:7a:20:12:bf: 39:07:da:68:26:2c:55:51:87:b7:33:2e:46:35:c0: 34:15:73:d7:1c:b4:35:38:ca:16:4e:b5:0e:1f:34: d6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:12:6A:93:77:B1:57:A0:79:AB:36:2E:3D:31:6A:3C:E2:8B:70:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a720f3f7-daa9-3495-8ee1-cbf733dab870.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.200.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:8d:6e:ec:c8:31:0e:55:99:1d:c7:5b:ad:9c:50:99:4f:0b: 64:83:98:6c:16:0e:9f:16:f3:5e:7b:65:72:4b:b6:79:1f:1a: a5:d2:d3:30:fd:00:60:12:4d:1f:9e:c3:22:bf:a1:08:1c:98: 83:1c:a4:a8:f3:2e:37:4b:c5:33:44:21:be:b9:47:40:4e:28: ef:8a:6c:84:98:82:ad:4f:19:59:bd:a9:06:47:76:69:aa:72: ab:34:4f:9f:25:ca:03:b0:9a:2e:7c:60:dc:1a:20:13:a8:9a: f7:ff:70:8f:34:94:4b:3c:66:3e:51:09:38:f0:5b:ca:27:6c: 28:e0:71:ca:8f:d8:15:49:77:68:38:60:3c:85:f1:4e:d4:51: f8:2e:a9:69:80:8f:36:b5:ac:81:63:7a:6b:3a:b1:ef:a6:30: 44:4c:ab:ec:98:60:47:84:ab:78:d5:19:af:3b:f1:34:47:9f: 77:14:4c:84:6b:06:52:41:fb:54:1f:7c:f2:d1:6b:01:2f:90: bc:7e:cf:23:50:51:68:85:af:93:8c:08:95:8f:6b:67:19:fe: e4:99:fa:13:6c:1f:f6:f1:e7:d0:b6:69:19:0d:06:60:80:f9: 1b:3a:c2:08:2c:4b:fd:9c:24:2e:8e:3a:fa:f7:05:83:b6:0f: f3:f5:8b:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2q4DnwmhziM8wSIEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk OTFiMGFhYTctMTVhMi00M2ExLWExNGYtMWJiMGY3ZGU3OGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihYhvarAn2Uq1ae7DXwPR36X2waDWx8RlITl WFqYdR0BLuIT4w59mRDqVkHXXWsqqsnzrq5mZeCbFo0eU4K9uMHzMzeNlPQhkZ9T 8SffaET1xEGFjlmGRTP5pnpi+zxaYVPDPK+8wTfR5ix6HC+G0tsNibw9qWPqb1ET xItinGRO0pXarjwXz4bPRF647Mhr+7CE7hc+LfCcrO+fld5K8gbz9nO48mKMzZZg KLvFHHA1TkJ3cNiCHGcnS7009AOljltBl9qN/XwK8/jD7iIzscWeKTYwx3VTWv8q BHogEr85B9poJixVUYe3My5GNcA0FXPXHLQ1OMoWTrUOHzTWjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgSapN3sVegeas2Lj0xajzii3BHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTcyMGYzZjctZGFhOS0z NDk1LThlZTEtY2JmNzMzZGFiODcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrsj8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqNbuzIMQ5VmR3HW62cUJlPC2SDmGwWDp8W8157ZXJLtnkfGqXS0zD9 AGASTR+ewyK/oQgcmIMcpKjzLjdLxTNEIb65R0BOKO+KbISYgq1PGVm9qQZHdmmq cqs0T58lygOwmi58YNwaIBOomvf/cI80lEs8Zj5RCTjwW8onbCjgccqP2BVJd2g4 YDyF8U7UUfguqWmAjza1rIFjems6se+mMERMq+yYYEeEq3jVGa878TRHn3cUTIRr BlJB+1QffPLRawEvkLx+zyNQUWiFr5OMCJWPa2cZ/uSZ+hNsH/bx59C2aRkNBmCA +Rs6wggsS/2cJC6OOvr3BYO2D/P1i8Y= -----END CERTIFICATE-----Generated at Wed May 13 11:42:17 2026 by rpki-client