$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e547c20e-ba26-3a5e-8c9b-cb4e1e8bf896.roa File: e547c20e-ba26-3a5e-8c9b-cb4e1e8bf896.roa (raw, json) Hash identifier: qr/7a0gvx3k6ZixM9Qo5qn0yRlLxF7cH1sIwE3f+2h8= Subject key identifier: 8E:A3:30:B9:D3:E8:61:B7:8E:6D:E9:21:ED:81:42:A9:4D:4B:1A:D7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D20AF705DC0D2EA5F7ADB3880 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e547c20e-ba26-3a5e-8c9b-cb4e1e8bf896.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 6167 IP address blocks: 174.197.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:70:5d:c0:d2:ea:5f:7a:db:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=24d835b8-e0d1-414d-a7e8-192f02f4cd10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f2:fe:e9:b3:de:fe:72:24:04:93:6b:be:bb: 58:18:54:7a:30:a0:f1:fb:50:4f:93:80:15:7b:a4: 17:d7:63:eb:e6:45:90:0d:4b:23:eb:db:32:03:64: 52:74:6c:91:85:76:f1:7c:c5:07:79:03:2f:59:f6: fe:c1:4a:24:56:4c:82:c7:bc:c6:74:de:43:9b:d3: 63:db:10:48:0b:5d:b3:db:24:d8:4d:ef:f5:b0:07: 5d:25:94:30:83:5c:60:5e:81:04:d2:ef:3a:69:ba: 53:b7:aa:35:81:4a:97:81:55:02:45:98:2d:d2:e9: 49:ae:f4:06:de:c0:b3:33:ac:f4:fb:bf:a9:3c:46: 24:08:0f:73:38:06:3d:a8:8e:4e:5e:b9:a6:1e:80: aa:29:c9:01:0e:cc:6e:5f:c6:57:8c:37:d4:cd:6a: 5e:d8:ae:c5:e9:70:29:63:8b:67:84:bb:b2:36:da: 8c:87:01:8b:f6:1e:5e:e0:d1:24:bc:50:86:f4:da: 93:cd:36:02:25:47:f7:4f:fe:27:91:3e:35:7b:f2: 0c:c6:d4:b4:6a:79:e2:4f:41:26:0c:1a:4e:ce:c8: 83:b9:fb:5f:14:58:c0:2d:46:37:44:d2:03:0c:30: 1c:94:6b:63:92:89:3f:19:32:e0:b0:83:99:47:9f: f0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A3:30:B9:D3:E8:61:B7:8E:6D:E9:21:ED:81:42:A9:4D:4B:1A:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e547c20e-ba26-3a5e-8c9b-cb4e1e8bf896.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.197.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:f8:a3:53:1d:c8:3f:ba:65:09:4c:f4:a5:97:7c:f6:4a:67: 44:a9:69:89:5c:a8:7c:5b:92:3c:45:17:e0:57:a6:b0:28:4a: 8b:31:a8:87:46:8a:79:bc:c7:89:2b:b0:ea:3f:85:5e:2c:20: b6:1e:56:4d:0f:2d:5d:f0:ab:84:a7:16:fd:5e:bb:19:2f:5e: 44:a5:a4:78:b6:19:5b:58:e4:86:44:21:e4:25:e6:90:64:71: b3:ca:0e:68:e0:86:fa:97:bd:63:42:10:77:64:ae:3b:ef:21: f3:1b:e8:82:e0:77:45:8a:0b:b7:c7:8b:d0:7d:32:39:e3:e9: 62:ca:91:a0:35:9f:34:03:22:68:3a:31:b0:39:e6:41:e4:92: 32:1e:5b:c1:e0:f0:22:19:99:d7:3e:80:cb:2f:52:c8:ca:5c: ee:cd:5d:bf:3e:d1:76:42:01:c4:6a:44:91:78:a7:c1:1d:c2: 66:de:c9:02:74:ce:d4:fc:f9:79:63:e8:fc:27:42:8f:28:2d: 8d:d5:46:9e:1a:6a:df:f5:b0:f3:2b:22:d9:a9:f1:22:9a:0f: 53:27:ac:0d:79:00:c4:c6:fb:fd:15:c2:82:bc:dc:66:19:7b: be:d8:f8:fa:90:54:dd:8b:2b:9b:0f:8d:75:24:a7:82:7b:e3: fd:43:50:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr3BdwNLqX3rbOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk MjRkODM1YjgtZTBkMS00MTRkLWE3ZTgtMTkyZjAyZjRjZDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/L+6bPe/nIkBJNrvrtYGFR6MKDx+1BPk4AV e6QX12Pr5kWQDUsj69syA2RSdGyRhXbxfMUHeQMvWfb+wUokVkyCx7zGdN5Dm9Nj 2xBIC12z2yTYTe/1sAddJZQwg1xgXoEE0u86abpTt6o1gUqXgVUCRZgt0ulJrvQG 3sCzM6z0+7+pPEYkCA9zOAY9qI5OXrmmHoCqKckBDsxuX8ZXjDfUzWpe2K7F6XAp Y4tnhLuyNtqMhwGL9h5e4NEkvFCG9NqTzTYCJUf3T/4nkT41e/IMxtS0anniT0Em DBpOzsiDuftfFFjALUY3RNIDDDAclGtjkok/GTLgsIOZR5/wUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6jMLnT6GG3jm3pIe2BQqlNSxrXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTU0N2MyMGUtYmEyNi0z YTVlLThjOWItY2I0ZTFlOGJmODk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrsWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGH4o1MdyD+6ZQlM9KWXfPZKZ0SpaYlcqHxbkjxFF+BXprAoSosxqIdG inm8x4krsOo/hV4sILYeVk0PLV3wq4SnFv1euxkvXkSlpHi2GVtY5IZEIeQl5pBk cbPKDmjghvqXvWNCEHdkrjvvIfMb6ILgd0WKC7fHi9B9Mjnj6WLKkaA1nzQDImg6 MbA55kHkkjIeW8Hg8CIZmdc+gMsvUsjKXO7NXb8+0XZCAcRqRJF4p8EdwmbeyQJ0 ztT8+Xlj6PwnQo8oLY3VRp4aat/1sPMrItmp8SKaD1MnrA15AMTG+/0VwoK83GYZ e77Y+PqQVN2LK5sPjXUkp4J74/1DUNg= -----END CERTIFICATE-----Generated at Thu Mar 26 12:21:21 2026 by rpki-client