$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/caca24ff-244e-3f40-b4e1-8a4214624d03.roa File: caca24ff-244e-3f40-b4e1-8a4214624d03.roa (raw, json) Hash identifier: iuavqpcXb/KebnO2Pv0Q045MSi6eHkEqqQeV4p6ozYM= Subject key identifier: 12:4B:1C:A0:F4:CA:FB:F9:68:2C:4C:0D:4F:DE:18:5A:77:AA:C2:99 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F497EFFCE3B7C09AEFD9DD160 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/caca24ff-244e-3f40-b4e1-8a4214624d03.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 6167 IP address blocks: 174.216.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:ff:ce:3b:7c:09:ae:fd:9d:d1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8bc7191e-3cae-43f1-adcb-b235911bb827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0f:f7:42:0a:53:e7:22:a2:ff:ff:aa:88:0b: 9b:75:bd:67:c3:86:29:8b:3e:01:5a:c2:0e:37:05: d5:e6:89:c4:8d:89:12:63:35:72:b3:71:fe:89:5c: 77:cd:38:41:bd:9a:5a:67:74:59:3c:b5:f1:7c:06: 52:33:c1:cd:fe:bb:7e:28:9d:47:0c:60:37:a8:e5: 88:3f:8a:a7:a9:f2:84:d5:bd:f8:5e:d4:af:60:30: 9b:0d:b5:a3:b4:cd:96:5c:c2:14:4a:1d:e1:58:44: 95:38:f6:5e:47:82:80:0c:b2:78:66:70:7e:3d:0a: 5d:fc:71:35:bb:40:49:e1:f9:e7:7e:0c:f5:c4:0b: bf:8d:c7:9b:1e:4d:bb:34:40:a1:63:ff:00:da:2f: 08:d5:a9:22:fe:68:ce:64:ee:2a:19:93:f5:2b:f9: cb:db:de:58:ec:4b:75:1e:6e:01:f8:14:31:1f:0d: 00:53:25:83:aa:fa:5b:ed:87:fd:af:aa:47:b2:03: 63:f9:6a:07:0c:81:bc:7c:c3:35:08:6d:45:3f:fa: 6e:ed:4b:97:12:47:67:80:0a:64:46:1a:ab:4b:8f: a6:e0:55:dc:cc:89:b2:20:13:04:5a:ea:5e:a2:52: 90:aa:6b:24:b1:d9:64:4d:54:f2:ae:ee:20:8b:6d: 9d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:4B:1C:A0:F4:CA:FB:F9:68:2C:4C:0D:4F:DE:18:5A:77:AA:C2:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/caca24ff-244e-3f40-b4e1-8a4214624d03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.216.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:ff:f1:9c:5d:4c:a6:9e:d1:3b:ee:ed:8d:9b:fe:63:46:48: 5f:4f:19:52:aa:35:81:9e:85:4d:2d:ef:0f:15:9e:ce:56:00: 04:41:04:a8:88:b5:fa:97:61:fc:21:d8:26:73:f4:94:cc:b8: 1c:11:53:5a:45:d0:b0:83:00:d0:c2:1f:ec:04:cb:f5:f1:c1: 1c:b7:69:a3:ca:e8:ca:a7:87:a7:2f:43:36:3c:e8:05:dc:87: cc:5c:c0:d4:06:a4:e3:0b:00:61:ee:83:02:09:4e:97:76:17: a8:e7:57:f2:60:43:17:29:05:ac:37:3d:7b:aa:a8:bd:02:c5: 6d:21:cb:e4:d6:21:ba:9b:85:c9:33:c6:41:01:bf:8f:7b:52: 9c:2c:a3:c2:99:af:f0:08:17:5d:28:a1:1a:7d:60:59:34:43: 9a:cb:58:15:b2:0b:0c:b0:a3:3c:2f:e3:12:01:7f:14:90:5c: 6c:26:44:0c:d5:47:70:78:e8:96:52:61:93:3b:76:cb:72:e8: 27:bf:43:31:32:c8:90:40:c2:cd:a1:51:86:1d:aa:5e:69:ec: e1:6f:8b:b5:24:83:04:ea:75:60:48:b2:38:78:b7:af:5c:5e: 33:06:99:df:9d:81:4a:8b:6b:37:97:6a:fd:eb:30:40:b4:2b: 21:31:34:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jfv/OO3wJrv2d0WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGJjNzE5MWUtM2NhZS00M2YxLWFkY2ItYjIzNTkxMWJiODI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiA/3QgpT5yKi//+qiAubdb1nw4Ypiz4BWsIO NwXV5onEjYkSYzVys3H+iVx3zThBvZpaZ3RZPLXxfAZSM8HN/rt+KJ1HDGA3qOWI P4qnqfKE1b34XtSvYDCbDbWjtM2WXMIUSh3hWESVOPZeR4KADLJ4ZnB+PQpd/HE1 u0BJ4fnnfgz1xAu/jcebHk27NEChY/8A2i8I1aki/mjOZO4qGZP1K/nL295Y7Et1 Hm4B+BQxHw0AUyWDqvpb7Yf9r6pHsgNj+WoHDIG8fMM1CG1FP/pu7UuXEkdngApk RhqrS4+m4FXczImyIBMEWupeolKQqmsksdlkTVTyru4gi22dkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJLHKD0yvv5aCxMDU/eGFp3qsKZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2FjYTI0ZmYtMjQ0ZS0z ZjQwLWI0ZTEtOGE0MjE0NjI0ZDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrthYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJf/8ZxdTKae0Tvu7Y2b/mNGSF9PGVKqNYGehU0t7w8Vns5WAARBBKiI tfqXYfwh2CZz9JTMuBwRU1pF0LCDANDCH+wEy/XxwRy3aaPK6Mqnh6cvQzY86AXc h8xcwNQGpOMLAGHugwIJTpd2F6jnV/JgQxcpBaw3PXuqqL0CxW0hy+TWIbqbhckz xkEBv497Upwso8KZr/AIF10ooRp9YFk0Q5rLWBWyCwywozwv4xIBfxSQXGwmRAzV R3B46JZSYZM7dsty6Ce/QzEyyJBAws2hUYYdql5p7OFvi7UkgwTqdWBIsjh4t69c XjMGmd+dgUqLazeXav3rMEC0KyExNLI= -----END CERTIFICATE-----Generated at Sat Oct 3 15:46:12 2026 by rpki-client