$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bdfc8169-3e78-3fa8-9e5f-a94045cc2c1e.roa File: bdfc8169-3e78-3fa8-9e5f-a94045cc2c1e.roa (raw, json) Hash identifier: yqdeHfV/3Rq4LstaHalN6ijahclU4acSStESHf53FeM= Subject key identifier: B9:E8:54:56:0C:F8:36:E4:91:F2:95:3E:B5:08:3F:21:6F:1D:7A:8D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D47C5017C2B658288BB42DC00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bdfc8169-3e78-3fa8-9e5f-a94045cc2c1e.roa Signing time: Wed 25 Mar 2026 01:00:32 +0000 ROA not before: Wed 25 Mar 2026 01:00:32 +0000 ROA not after: Tue 23 Jun 2026 01:00:32 +0000 asID: 6167 IP address blocks: 174.248.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:47:c5:01:7c:2b:65:82:88:bb:42:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 25 01:00:32 2026 GMT Not After : Jun 23 01:00:32 2026 GMT Subject: CN=39882ae9-305a-4b7c-b277-dd7f65f4a682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cc:20:74:43:5b:f6:6f:38:57:25:97:2c:f4: 05:ec:1b:7b:75:72:0e:9e:ff:31:67:15:ce:a5:43: 8b:a4:04:f5:b3:fc:54:6e:86:fd:45:2c:a1:f4:54: 06:83:89:5e:42:c4:51:27:3a:72:7c:a1:04:5f:89: b1:56:e9:b2:b0:69:a4:c0:f2:fe:84:ad:9d:c4:48: 9b:c2:0d:f2:cb:8d:73:f2:fa:24:59:50:42:82:50: 68:f3:13:04:eb:aa:7d:ea:e5:7d:fd:9f:02:67:e1: 60:4d:91:15:96:ea:37:d6:d7:d7:df:ba:9d:7c:d9: 6a:e8:e0:98:67:2f:cc:14:23:7a:d3:5c:0b:02:ad: be:73:76:d6:11:4c:f8:5b:f6:ed:8e:cc:09:d3:94: 4d:4d:3c:38:57:c3:54:fb:21:99:92:ff:af:e8:d2: fd:0e:5e:4d:a7:45:7f:21:53:9e:be:28:57:4a:a8: 7c:ad:e3:66:9e:ad:32:88:cf:68:01:77:24:53:a2: 7d:37:95:23:e0:3c:b4:6f:22:c2:95:5a:6c:94:5c: cd:af:58:20:4f:e1:71:7b:98:79:bd:44:2c:f9:1e: 73:2c:b6:20:0b:72:b1:74:dc:0b:c2:10:1b:5c:48: 95:8b:5f:59:8c:12:1b:5f:e1:2c:f7:3b:40:7f:7f: d2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E8:54:56:0C:F8:36:E4:91:F2:95:3E:B5:08:3F:21:6F:1D:7A:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bdfc8169-3e78-3fa8-9e5f-a94045cc2c1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.248.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:f5:77:ba:a1:2d:7f:80:44:90:68:c4:15:04:b5:8f:eb:20: 2b:54:2a:5b:95:0f:5e:b3:3a:88:8f:8c:74:74:51:b2:23:14: ea:3d:33:07:6f:21:4f:a4:50:57:0f:49:4a:8e:d2:80:8f:ab: c6:12:1d:36:3f:df:a3:e2:0a:9a:12:26:6e:15:a0:73:b5:39: 5a:d3:21:a9:b6:b0:3f:ac:91:64:81:91:86:74:71:ea:d2:89: ce:a3:e7:d9:83:54:a5:65:e5:22:12:7c:12:3e:a2:ac:90:6d: 75:23:b7:2f:63:47:7f:b5:ab:a3:3a:37:36:1f:be:5f:07:cc: c9:b2:0a:13:e5:a1:80:71:58:09:8e:1d:b9:9b:bc:ee:7e:b7: b4:6e:e2:47:dd:8b:e1:30:46:c1:ea:e5:cc:a1:43:28:78:f6: f3:3a:95:a9:0b:d8:c3:25:a3:1c:da:66:a5:da:60:3f:43:27: 41:a3:10:37:8b:67:39:72:52:ac:9c:5a:d1:f9:9a:a1:bc:97: 33:e1:3b:a3:b1:54:9f:91:99:f6:5f:79:57:79:a5:0a:94:c4: fe:5a:27:4c:10:dc:ea:7c:85:e9:82:2c:05:e1:e5:aa:1b:51: 88:98:c1:75:32:4e:4e:04:4b:ab:b4:78:44:65:ff:74:77:7b: 4a:c9:37:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1HxQF8K2WCiLtC3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMyNTAxMDAzMloXDTI2MDYyMzAxMDAzMlowLzEtMCsGA1UEAxMk Mzk4ODJhZTktMzA1YS00YjdjLWIyNzctZGQ3ZjY1ZjRhNjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMwgdENb9m84VyWXLPQF7Bt7dXIOnv8xZxXO pUOLpAT1s/xUbob9RSyh9FQGg4leQsRRJzpyfKEEX4mxVumysGmkwPL+hK2dxEib wg3yy41z8vokWVBCglBo8xME66p96uV9/Z8CZ+FgTZEVluo31tfX37qdfNlq6OCY Zy/MFCN601wLAq2+c3bWEUz4W/btjswJ05RNTTw4V8NU+yGZkv+v6NL9Dl5Np0V/ IVOevihXSqh8reNmnq0yiM9oAXckU6J9N5Uj4Dy0byLClVpslFzNr1ggT+Fxe5h5 vUQs+R5zLLYgC3KxdNwLwhAbXEiVi19ZjBIbX+Es9ztAf3/SdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnoVFYM+DbkkfKVPrUIPyFvHXqNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmRmYzgxNjktM2U3OC0z ZmE4LTllNWYtYTk0MDQ1Y2MyYzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrvi8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGX1d7qhLX+ARJBoxBUEtY/rICtUKluVD16zOoiPjHR0UbIjFOo9Mwdv IU+kUFcPSUqO0oCPq8YSHTY/36PiCpoSJm4VoHO1OVrTIam2sD+skWSBkYZ0cerS ic6j59mDVKVl5SISfBI+oqyQbXUjty9jR3+1q6M6NzYfvl8HzMmyChPloYBxWAmO HbmbvO5+t7Ru4kfdi+EwRsHq5cyhQyh49vM6lakL2MMloxzaZqXaYD9DJ0GjEDeL ZzlyUqycWtH5mqG8lzPhO6OxVJ+RmfZfeVd5pQqUxP5aJ0wQ3Op8hemCLAXh5aob UYiYwXUyTk4ES6u0eERl/3R3e0rJN28= -----END CERTIFICATE-----Generated at Thu Mar 26 17:20:53 2026 by rpki-client