$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af4890d3-5235-3db0-aa0d-9b702f8c86eb.roa File: af4890d3-5235-3db0-aa0d-9b702f8c86eb.roa (raw, json) Hash identifier: AWxnR4e5Ekh2mnUyjU7dIyax8KlgU/YgwsCxd0p7gP4= Subject key identifier: 97:D5:61:9F:76:81:58:95:65:05:EB:84:DD:45:3A:C0:6A:CC:8D:F0 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D20AF6EB76C68590D296ADF80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af4890d3-5235-3db0-aa0d-9b702f8c86eb.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 6167 IP address blocks: 174.194.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:6e:b7:6c:68:59:0d:29:6a:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=dcda21b5-4a45-4110-8309-69e649923296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:64:84:f4:21:5f:50:f3:b8:b9:4d:e7:eb:c3: 39:91:8c:4d:f9:32:98:45:e9:70:fe:bb:d9:c5:9c: 54:31:fa:25:f2:9d:be:82:4a:66:35:01:a7:b9:2a: 3f:a0:15:00:15:28:e0:2b:16:4f:4d:6b:f7:fa:f7: 7c:0e:cc:76:06:ac:61:78:55:85:f5:d6:04:f9:a6: 69:ed:6c:b0:92:2e:98:b7:f7:34:fa:31:57:01:af: da:5f:10:42:35:9e:3d:4f:53:04:73:13:e7:04:49: 9a:38:8f:38:e8:65:cc:62:4b:ce:a1:84:7b:f7:ce: b7:ef:1d:7c:16:c2:1f:d9:92:fb:4d:62:74:43:66: 13:c9:92:00:46:2b:d2:f4:18:eb:81:2c:e7:0f:cd: 06:b3:e4:0d:98:69:75:89:a0:1a:99:f4:40:09:40: 1e:b0:5e:ae:c2:37:9b:79:69:47:5d:6b:43:8f:54: eb:c7:9e:0d:2a:60:ae:de:f9:e0:e0:e8:6e:cb:b5: 47:b7:57:a2:bf:28:1c:e5:ab:27:0a:88:c7:f4:fa: 3c:e7:6c:81:b9:4d:36:d2:ba:90:52:58:2f:d9:b4: 42:8c:6a:f4:e8:26:1d:4d:19:45:8b:b1:64:04:1f: cc:1d:22:6b:4a:bc:b8:88:ff:99:04:1e:52:7d:b9: 7c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D5:61:9F:76:81:58:95:65:05:EB:84:DD:45:3A:C0:6A:CC:8D:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/af4890d3-5235-3db0-aa0d-9b702f8c86eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.194.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:dd:cc:97:4d:55:40:5f:20:90:4b:53:41:54:11:b9:6f:55: 7c:b9:c3:17:85:40:87:16:d5:0e:6e:de:99:26:e3:c0:fb:bc: 34:9c:3b:34:eb:c2:f4:d4:d8:de:57:31:ea:8f:74:dc:44:0d: 55:fc:5e:30:89:90:cf:19:86:3c:d4:ec:2b:e0:79:79:2b:16: 28:82:f4:30:a0:1e:08:ba:17:27:dc:34:2a:76:d7:ad:70:91: db:0b:93:22:cc:f3:2c:4a:4c:03:bc:5b:c1:de:17:9f:11:aa: 7b:d8:cb:bb:cf:2a:93:c4:fe:5f:73:05:91:a0:17:67:4d:70: d2:f8:b4:98:65:83:7e:a4:4f:22:22:00:09:0e:34:da:8e:f0: 72:b0:52:31:33:99:9c:dc:13:0a:cb:c5:83:4d:44:54:b1:13: e9:eb:85:ba:99:0e:be:44:ab:67:db:c4:bd:0b:e5:62:2f:80: 6b:df:40:56:c5:06:fe:20:9f:fc:65:65:9b:6c:20:ab:2d:5b: ae:c4:19:4c:3d:ed:db:7a:98:5f:b6:90:23:3e:3e:a0:b3:bf: 89:f6:ff:90:47:e6:17:04:6c:79:35:f2:dd:af:12:07:a3:55: 5d:f1:36:8a:35:01:97:6c:81:c5:11:af:a1:7e:0b:2c:10:35: 56:14:05:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr263bGhZDSlq34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk ZGNkYTIxYjUtNGE0NS00MTEwLTgzMDktNjllNjQ5OTIzMjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmSE9CFfUPO4uU3n68M5kYxN+TKYRelw/rvZ xZxUMfol8p2+gkpmNQGnuSo/oBUAFSjgKxZPTWv3+vd8Dsx2BqxheFWF9dYE+aZp 7Wywki6Yt/c0+jFXAa/aXxBCNZ49T1MEcxPnBEmaOI846GXMYkvOoYR798637x18 FsIf2ZL7TWJ0Q2YTyZIARivS9BjrgSznD80Gs+QNmGl1iaAamfRACUAesF6uwjeb eWlHXWtDj1Trx54NKmCu3vng4Ohuy7VHt1eivygc5asnCojH9Po852yBuU020rqQ Ulgv2bRCjGr06CYdTRlFi7FkBB/MHSJrSry4iP+ZBB5Sfbl8PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfVYZ92gViVZQXrhN1FOsBqzI3wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWY0ODkwZDMtNTIzNS0z ZGIwLWFhMGQtOWI3MDJmOGM4NmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrsLAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrdzJdNVUBfIJBLU0FUEblvVXy5wxeFQIcW1Q5u3pkm48D7vDScOzTr wvTU2N5XMeqPdNxEDVX8XjCJkM8ZhjzU7CvgeXkrFiiC9DCgHgi6FyfcNCp2161w kdsLkyLM8yxKTAO8W8HeF58RqnvYy7vPKpPE/l9zBZGgF2dNcNL4tJhlg36kTyIi AAkONNqO8HKwUjEzmZzcEwrLxYNNRFSxE+nrhbqZDr5Eq2fbxL0L5WIvgGvfQFbF Bv4gn/xlZZtsIKstW67EGUw97dt6mF+2kCM+PqCzv4n2/5BH5hcEbHk18t2vEgej VV3xNoo1AZdsgcURr6F+CywQNVYUBb0= -----END CERTIFICATE-----Generated at Thu Mar 26 16:57:38 2026 by rpki-client