$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd0ba355-35e6-3b9e-9120-677aa2f0b6aa.roa File: dd0ba355-35e6-3b9e-9120-677aa2f0b6aa.roa (raw, json) Hash identifier: Lc3xze7ttebUuiFmJbKKUYZODSwZ/jDRFEsLl8B3uuQ= Subject key identifier: 10:14:49:33:3F:10:59:55:AB:AF:51:90:30:89:ED:F1:11:BC:04:98 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F497EFE430EC6E2DDCD62DA00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd0ba355-35e6-3b9e-9120-677aa2f0b6aa.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 6167 IP address blocks: 174.215.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:fe:43:0e:c6:e2:dd:cd:62:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=620a411e-db55-4a83-9dee-2208bcca4825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:70:3d:61:67:f9:4b:10:62:ae:36:52:32:0d: 49:c8:a6:e8:b0:18:73:8e:76:f2:18:1f:3a:67:34: e6:8b:b6:5d:72:62:7f:97:f7:63:7a:a1:a7:81:6a: 42:dd:dd:c7:60:22:8c:39:dd:9f:0e:21:45:a1:43: 57:3c:5b:a0:ef:8c:ef:4c:c1:c8:a3:ab:21:c4:5f: 09:63:2c:00:f1:95:7c:4f:d4:5b:f1:a3:88:c6:e7: fb:67:26:f8:93:b9:32:a2:36:61:53:53:5d:e6:7d: 9e:04:20:a1:32:b8:74:b8:7e:c1:21:33:fa:c6:f1: 8c:ce:4f:b2:65:28:b4:4f:d8:a9:cb:b9:99:dd:97: 9b:05:85:d8:db:21:4b:c9:aa:cb:f3:f8:05:99:fb: 71:db:f4:85:32:bf:c3:8d:2e:7e:a0:86:96:fe:4d: 9f:00:d3:74:c1:74:81:bd:5a:fb:d4:98:51:0c:6b: 16:9b:a9:54:9b:dd:8c:a2:5a:00:7e:e7:18:56:1c: 29:b3:64:3d:79:08:7e:4e:2a:9d:b0:d1:0c:bc:69: ff:4f:e9:6e:8f:b1:04:99:87:21:a3:88:3f:44:30: 59:f9:13:7c:7a:e5:41:e3:a5:63:fb:97:67:70:80: 6b:5a:cf:98:59:99:bc:dd:a3:a6:1b:33:b5:af:2d: cb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:14:49:33:3F:10:59:55:AB:AF:51:90:30:89:ED:F1:11:BC:04:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd0ba355-35e6-3b9e-9120-677aa2f0b6aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.215.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:15:2d:ba:76:26:9a:38:c2:1b:59:3c:1c:69:aa:43:db:5f: 90:9e:92:68:fa:e5:cf:e3:80:38:dd:b9:0a:17:d1:0b:64:35: c2:5a:6c:a4:bb:9f:bd:03:1d:c5:a2:b5:0e:b7:4c:fc:fe:b6: 0c:d3:76:cc:25:f4:07:66:57:93:e2:54:87:71:2f:38:43:9c: 2e:6c:14:2e:51:41:df:b1:e8:16:2e:e7:d2:88:c4:08:d3:67: a8:83:d5:93:37:0b:ae:4a:e9:96:16:95:93:4e:af:69:46:35: e0:76:54:ba:f4:c0:2d:29:52:42:b2:0e:23:fd:0e:d3:8d:ea: ed:34:7b:3c:99:c0:21:16:9a:fe:38:c1:c4:e5:7c:34:af:b3: 41:6d:ae:fe:68:7a:7f:df:51:72:ad:e8:29:5d:85:54:38:77: 87:a3:30:6c:f3:f6:6b:a3:5a:fc:2d:23:14:c4:25:3e:f8:74: 63:af:c5:15:dd:33:a1:95:e5:9e:55:f3:d1:2f:1e:00:34:4b: 2d:4c:c7:e6:c0:ca:56:f6:cd:d7:33:d3:83:84:7f:fd:05:be: 89:72:ed:19:bf:92:04:60:9d:aa:33:81:85:03:c1:b2:85:76: 56:00:c2:50:ac:16:50:ba:b1:09:da:6d:0b:3b:4c:32:15:e8: 91:75:23:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jfv5DDsbi3c1i2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjIwYTQxMWUtZGI1NS00YTgzLTlkZWUtMjIwOGJjY2E0ODI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3A9YWf5SxBirjZSMg1JyKbosBhzjnbyGB86 ZzTmi7ZdcmJ/l/djeqGngWpC3d3HYCKMOd2fDiFFoUNXPFug74zvTMHIo6shxF8J YywA8ZV8T9Rb8aOIxuf7Zyb4k7kyojZhU1Nd5n2eBCChMrh0uH7BITP6xvGMzk+y ZSi0T9ipy7mZ3ZebBYXY2yFLyarL8/gFmftx2/SFMr/DjS5+oIaW/k2fANN0wXSB vVr71JhRDGsWm6lUm92MoloAfucYVhwps2Q9eQh+TiqdsNEMvGn/T+luj7EEmYch o4g/RDBZ+RN8euVB46Vj+5dncIBrWs+YWZm83aOmGzO1ry3LkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAUSTM/EFlVq69RkDCJ7fERvASYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGQwYmEzNTUtMzVlNi0z YjllLTkxMjAtNjc3YWEyZjBiNmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALIVLbp2Jpo4whtZPBxpqkPbX5Cekmj65c/jgDjduQoX0QtkNcJabKS7 n70DHcWitQ63TPz+tgzTdswl9AdmV5PiVIdxLzhDnC5sFC5RQd+x6BYu59KIxAjT Z6iD1ZM3C65K6ZYWlZNOr2lGNeB2VLr0wC0pUkKyDiP9DtON6u00ezyZwCEWmv44 wcTlfDSvs0Ftrv5oen/fUXKt6CldhVQ4d4ejMGzz9mujWvwtIxTEJT74dGOvxRXd M6GV5Z5V89EvHgA0Sy1Mx+bAylb2zdcz04OEf/0Fvoly7Rm/kgRgnaozgYUDwbKF dlYAwlCsFlC6sQnabQs7TDIV6JF1Izo= -----END CERTIFICATE-----Generated at Tue Sep 29 19:50:18 2026 by rpki-client