$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8747393-bee7-348d-8c0c-fd745518521c.roa File: a8747393-bee7-348d-8c0c-fd745518521c.roa (raw, json) Hash identifier: REnsLc7sTf5SoP2X4fjbYvRKObMkoaVodyd5YISK7cw= Subject key identifier: 30:AC:FD:AF:D4:89:48:28:E5:0B:E0:92:CF:7F:4C:73:1C:75:6F:63 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D47C4FA546B956B9CEA409600 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8747393-bee7-348d-8c0c-fd745518521c.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 6167 IP address blocks: 174.239.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:fa:54:6b:95:6b:9c:ea:40:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=c0446b63-ae43-40b3-9de4-07d440d54cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:84:f0:7e:43:00:7f:51:1a:4b:74:6a:d7:f0: 0f:04:a0:45:92:f1:c0:15:35:81:31:2b:29:6d:ea: f0:26:1c:b9:19:7d:7e:68:e2:82:9c:29:22:10:33: 7a:6f:db:db:b6:b6:96:d7:a3:b5:c5:2a:ee:a9:90: c7:f7:db:e8:81:ea:b6:59:3c:e3:39:eb:36:05:cb: 51:a9:db:b8:8c:15:c1:70:78:08:39:97:80:cb:5f: 53:4b:69:c4:a6:d0:b2:60:f5:93:b0:0b:cc:93:24: 9a:13:98:b8:f7:9f:82:7a:73:a4:cc:6b:51:e8:67: a2:df:53:b7:e8:c4:c1:12:88:d4:dd:fe:f4:a2:e2: c1:b2:12:16:42:d8:37:54:73:5b:43:1b:1c:7a:1f: 3b:9e:a2:18:19:f5:76:91:d1:7c:0f:fe:02:25:f7: 07:e2:f5:6c:2e:d9:20:2a:09:65:e9:32:89:f6:98: 50:c4:be:b0:9a:75:38:ab:36:d6:b1:fd:35:cd:18: 6a:8a:03:76:8f:96:3e:2a:b2:b1:f5:e3:37:c3:56: 1a:65:52:ec:08:f8:0d:2b:c8:2b:ec:11:a4:23:5d: 87:f9:94:5c:aa:ca:65:ea:93:7f:46:8e:5f:fe:04: 6d:fc:c8:45:35:01:86:eb:9b:75:ac:1a:3a:c1:c1: 28:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:AC:FD:AF:D4:89:48:28:E5:0B:E0:92:CF:7F:4C:73:1C:75:6F:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8747393-bee7-348d-8c0c-fd745518521c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.239.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:c0:44:50:d8:25:5f:d0:ce:6f:70:67:b9:90:74:a2:1e:e3: 08:68:cf:e7:98:c0:1d:19:a8:c6:43:68:53:c8:cb:ed:a2:ab: 64:f8:87:7b:41:73:4a:01:86:9b:2f:48:da:0d:8a:92:c4:6e: 6d:71:1f:f1:13:ef:ae:14:84:11:36:60:1f:4d:ae:04:05:b7: 69:3f:f0:93:25:fd:cc:54:d8:2c:9a:4b:c8:d0:53:63:ac:0a: 4c:04:b6:63:dd:03:09:4f:70:5f:73:17:c2:06:a6:8c:ea:72: a3:c8:c2:d8:ed:3e:23:f9:75:cc:b5:f6:87:93:2d:b3:5c:ad: 40:72:d6:8a:5d:df:7d:36:a9:b6:1c:b7:41:f3:b7:65:08:1d: 88:1f:a0:cb:b3:eb:d7:56:3a:61:ac:bf:f4:fd:27:22:60:b8: 31:75:23:c9:f4:0e:ec:c3:49:2c:2a:b4:c5:90:e0:28:ce:83: 16:c2:cd:08:51:bd:95:c6:e2:4b:e8:cf:15:92:b0:80:59:dd: 35:5c:6b:83:33:4d:58:59:9a:02:d3:04:e2:06:e2:fa:1f:30: 06:2a:36:82:c6:22:e1:a0:11:2c:3c:e0:be:f6:3e:a9:92:0e: 8c:62:3c:fd:ef:35:c0:3f:c1:62:97:e7:66:89:38:c8:97:25: 1b:90:50:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxPpUa5VrnOpAlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk YzA0NDZiNjMtYWU0My00MGIzLTlkZTQtMDdkNDQwZDU0Y2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyITwfkMAf1EaS3Rq1/APBKBFkvHAFTWBMSsp berwJhy5GX1+aOKCnCkiEDN6b9vbtraW16O1xSruqZDH99vogeq2WTzjOes2BctR qdu4jBXBcHgIOZeAy19TS2nEptCyYPWTsAvMkySaE5i495+CenOkzGtR6Gei31O3 6MTBEojU3f70ouLBshIWQtg3VHNbQxsceh87nqIYGfV2kdF8D/4CJfcH4vVsLtkg Kgll6TKJ9phQxL6wmnU4qzbWsf01zRhqigN2j5Y+KrKx9eM3w1YaZVLsCPgNK8gr 7BGkI12H+ZRcqspl6pN/Ro5f/gRt/MhFNQGG65t1rBo6wcEojwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCs/a/UiUgo5Qvgks9/THMcdW9jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTg3NDczOTMtYmVlNy0z NDhkLThjMGMtZmQ3NDU1MTg1MjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEru9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALARFDYJV/Qzm9wZ7mQdKIe4whoz+eYwB0ZqMZDaFPIy+2iq2T4h3tB c0oBhpsvSNoNipLEbm1xH/ET764UhBE2YB9NrgQFt2k/8JMl/cxU2CyaS8jQU2Os CkwEtmPdAwlPcF9zF8IGpozqcqPIwtjtPiP5dcy19oeTLbNcrUBy1opd3302qbYc t0Hzt2UIHYgfoMuz69dWOmGsv/T9JyJguDF1I8n0DuzDSSwqtMWQ4CjOgxbCzQhR vZXG4kvozxWSsIBZ3TVca4MzTVhZmgLTBOIG4vofMAYqNoLGIuGgESw84L72PqmS DoxiPP3vNcA/wWKX52aJOMiXJRuQUDw= -----END CERTIFICATE-----Generated at Thu Mar 26 20:29:02 2026 by rpki-client