$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bb4cc985-bc85-31b9-841d-f8f6763d3a5a.roa File: bb4cc985-bc85-31b9-841d-f8f6763d3a5a.roa (raw, json) Hash identifier: A3lvU9iJM/ZfMBUqc5BnfOsWK63rQmfyovxiPhsiZ6c= Subject key identifier: B1:98:C9:87:DC:10:8D:47:86:53:B1:48:BA:96:6C:59:F8:EA:AA:EF Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D47C4EA86B14209F6ACBB6AB0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bb4cc985-bc85-31b9-841d-f8f6763d3a5a.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 6167 IP address blocks: 174.231.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c4:ea:86:b1:42:09:f6:ac:bb:6a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=4659fc92-b345-48c3-80f9-d30bef93026d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:71:56:99:ab:57:9f:51:98:36:e0:36:bf:8f: 8e:f8:b9:c9:92:85:c5:fc:11:e5:60:9f:30:87:6e: dd:d1:0c:12:e8:ad:52:00:f0:c2:51:9b:f4:72:f2: 60:9c:9a:43:cb:d0:fa:6f:90:3b:10:49:ba:63:d5: e6:69:60:45:8c:4b:0c:56:29:c3:b8:96:c0:94:0c: 4e:15:8c:6f:9f:48:30:55:fa:52:dc:ac:04:90:ee: 3e:05:ca:99:5a:24:18:dc:71:f2:60:c2:a2:b5:76: 48:ab:ef:40:c5:6f:33:1b:6e:76:40:52:0d:94:59: 28:b0:34:e6:d5:67:90:db:6b:d3:d6:79:13:9f:16: db:6e:d2:37:99:7f:5b:b0:8d:63:65:fb:6e:fd:4c: 85:d6:11:8e:51:7e:c9:5e:4d:bc:b7:67:13:58:3c: 55:d3:66:68:9d:8f:52:91:3a:91:ee:f6:47:c5:cf: 20:07:4d:db:51:03:05:5b:a8:fb:c7:a9:ba:de:18: e1:07:4b:c1:e4:c1:91:09:69:3f:23:cc:b5:71:72: 85:1b:96:3d:da:c6:a7:ed:7c:f0:84:2a:b2:35:7d: d2:ae:c4:b0:f2:e6:2d:be:8e:f8:9b:3d:1d:bb:30: 14:e2:b0:b3:b0:fe:fa:91:1f:7d:00:d3:42:02:87: 5d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:98:C9:87:DC:10:8D:47:86:53:B1:48:BA:96:6C:59:F8:EA:AA:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bb4cc985-bc85-31b9-841d-f8f6763d3a5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.231.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:cd:b0:d2:f8:68:26:f5:9b:b3:34:8a:76:6a:58:c1:a3:17: 12:7e:81:ad:2c:e3:e8:4f:1e:3c:b4:ad:51:96:a5:a0:83:65: f5:5d:1a:9b:bd:49:ee:35:c5:55:df:c6:f5:8a:05:e4:44:b7: 26:8a:fc:28:68:f3:97:e7:72:d9:41:15:41:ea:71:40:58:f6: 70:bb:94:e4:10:55:86:e9:a4:b6:6b:71:1b:e7:b6:9c:ea:cf: b7:7f:7a:81:ef:fe:74:4e:ef:44:ca:e7:5b:66:0d:c9:e7:9b: 02:3e:98:88:0e:66:d3:6b:0b:60:8b:18:42:e3:44:22:7c:b7: 7b:1f:8f:7d:cf:73:a1:4e:f9:4d:da:70:fe:4c:51:9f:04:e2: c1:14:62:f7:a3:66:b7:98:bd:8f:2b:c3:35:9b:5d:08:df:1d: ba:48:88:86:52:47:79:b8:cd:25:fe:99:23:25:81:a6:65:8c: ff:88:69:63:d0:99:8a:2b:96:e5:e2:ae:07:a2:a4:4f:4f:27: 49:96:37:b0:91:21:9f:62:5b:47:22:58:4f:0a:ea:82:6c:ea: ab:65:51:dd:4a:54:2d:e8:a7:19:9c:db:93:1e:82:94:07:8d: b4:1e:b9:a1:51:8d:05:ff:9e:e9:2a:dc:da:9d:c4:9e:91:e0: 70:c3:93:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxOqGsUIJ9qy7arAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk NDY1OWZjOTItYjM0NS00OGMzLTgwZjktZDMwYmVmOTMwMjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXFWmatXn1GYNuA2v4+O+LnJkoXF/BHlYJ8w h27d0QwS6K1SAPDCUZv0cvJgnJpDy9D6b5A7EEm6Y9XmaWBFjEsMVinDuJbAlAxO FYxvn0gwVfpS3KwEkO4+BcqZWiQY3HHyYMKitXZIq+9AxW8zG252QFINlFkosDTm 1WeQ22vT1nkTnxbbbtI3mX9bsI1jZftu/UyF1hGOUX7JXk28t2cTWDxV02ZonY9S kTqR7vZHxc8gB03bUQMFW6j7x6m63hjhB0vB5MGRCWk/I8y1cXKFG5Y92san7Xzw hCqyNX3SrsSw8uYtvo74mz0duzAU4rCzsP76kR99ANNCAodd4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGYyYfcEI1HhlOxSLqWbFn46qrvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmI0Y2M5ODUtYmM4NS0z MWI5LTg0MWQtZjhmNjc2M2QzYTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErufAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHNsNL4aCb1m7M0inZqWMGjFxJ+ga0s4+hPHjy0rVGWpaCDZfVdGpu9 Se41xVXfxvWKBeREtyaK/Cho85fnctlBFUHqcUBY9nC7lOQQVYbppLZrcRvntpzq z7d/eoHv/nRO70TK51tmDcnnmwI+mIgOZtNrC2CLGELjRCJ8t3sfj33Pc6FO+U3a cP5MUZ8E4sEUYvejZreYvY8rwzWbXQjfHbpIiIZSR3m4zSX+mSMlgaZljP+IaWPQ mYorluXirgeipE9PJ0mWN7CRIZ9iW0ciWE8K6oJs6qtlUd1KVC3opxmc25MegpQH jbQeuaFRjQX/nukq3NqdxJ6R4HDDk3g= -----END CERTIFICATE-----Generated at Thu Mar 26 03:55:58 2026 by rpki-client