$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c55d1b9-99f1-31b9-8f57-f055c682d4e2.roa File: 1c55d1b9-99f1-31b9-8f57-f055c682d4e2.roa (raw, json) Hash identifier: tQquL2Dz0fcKu5a9mYVA0mScJRXsdedl/r5WFmtrbwY= Subject key identifier: 8F:13:58:78:8C:08:23:23:A6:04:3D:1B:EF:BF:B2:F9:F3:CB:34:84 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584E2D9F4331B21AE0DFA2428AC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c55d1b9-99f1-31b9-8f57-f055c682d4e2.roa Signing time: Mon 15 Jun 2026 09:00:12 +0000 ROA not before: Mon 15 Jun 2026 09:00:12 +0000 ROA not after: Sun 13 Sep 2026 09:00:12 +0000 asID: 6167 IP address blocks: 174.255.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2d:9f:43:31:b2:1a:e0:df:a2:42:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 15 09:00:12 2026 GMT Not After : Sep 13 09:00:12 2026 GMT Subject: CN=337e7598-f40d-4c26-8a24-4db72c54b83d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c6:bc:14:6e:b5:db:55:26:c9:38:33:ec:f2: 13:dc:c0:15:7c:59:bd:0b:02:a8:1c:37:f8:d4:4a: 2a:35:cf:84:06:e8:d9:15:11:bd:54:73:5c:be:fd: 3e:e2:32:11:46:14:c0:07:73:ae:21:1e:29:45:03: 27:34:f6:04:11:70:2a:3f:fa:e3:4c:e9:5f:0c:88: a2:36:11:92:38:e1:7d:00:51:08:29:39:09:e9:aa: 57:18:73:62:fc:b7:35:57:11:fe:13:98:d8:d5:11: e3:1a:7c:41:7c:44:61:c3:ff:a6:37:65:da:ef:01: 0c:0e:91:20:a1:e2:be:06:ea:d2:82:ed:3a:8b:bc: b6:84:f1:72:03:c2:8f:c7:f0:79:86:85:23:46:61: 2b:da:82:0e:e1:35:41:7e:16:15:b8:2e:b0:22:89: f5:ec:7e:c4:e5:7c:a7:ff:95:02:ec:35:9e:9f:d8: 26:9d:cf:b6:eb:67:12:9f:e9:a4:ec:a3:e8:fb:dd: 6f:f9:88:bf:16:5f:2a:76:b0:b0:30:33:1c:51:66: dd:46:2a:5a:fe:80:e2:56:c7:a8:14:2f:03:f4:33: a3:da:84:40:25:ef:5f:0c:0b:6d:eb:43:79:32:5e: dd:9d:56:53:ab:11:39:0f:3e:c5:75:f1:16:f2:65: b2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:13:58:78:8C:08:23:23:A6:04:3D:1B:EF:BF:B2:F9:F3:CB:34:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c55d1b9-99f1-31b9-8f57-f055c682d4e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.255.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:36:be:bf:b9:f9:bf:b2:a3:4f:f7:c4:4c:76:04:1b:19:55: 1c:37:90:da:e4:ef:3f:2d:9c:79:6b:27:91:9d:f6:27:b6:9b: 7c:95:f1:61:05:10:d6:ff:f1:c4:d3:2d:ef:ed:c5:e0:7c:ce: 2f:e1:50:fc:a4:8d:83:3b:c1:91:c0:30:57:0f:56:c3:fe:66: dc:f5:32:d1:36:4f:9e:47:74:90:db:ef:50:77:43:ed:c7:c1: 68:b7:63:24:03:47:13:e0:3f:52:93:74:2e:e9:14:fb:82:e3: 8e:f6:b2:34:44:91:1e:f2:c5:e2:b3:de:7a:76:e3:3a:77:7c: c0:ce:85:d9:47:d5:27:47:21:f6:57:1d:e5:1f:d7:10:0e:d9: ab:df:c2:4f:f8:82:77:cb:a0:0c:67:47:52:df:82:0b:c3:b7: f1:21:d0:52:e1:48:b5:6f:f9:2b:56:97:7f:18:59:5d:e6:cb: fd:b0:b6:e0:70:23:69:c8:bd:47:a5:a7:f3:c1:09:7d:da:f5: fe:67:88:ee:6d:8a:41:20:a8:1b:15:0d:2b:6b:56:3d:45:98: 26:7e:d8:37:5b:07:0a:42:44:3f:3a:55:79:32:52:ac:1a:c1: e3:b8:e1:d8:50:ca:3f:c3:1b:41:96:0e:81:ba:af:09:19:ea: 6d:c2:68:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4tn0Mxshrg36JCisAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk MzM3ZTc1OTgtZjQwZC00YzI2LThhMjQtNGRiNzJjNTRiODNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMa8FG6121UmyTgz7PIT3MAVfFm9CwKoHDf4 1EoqNc+EBujZFRG9VHNcvv0+4jIRRhTAB3OuIR4pRQMnNPYEEXAqP/rjTOlfDIii NhGSOOF9AFEIKTkJ6apXGHNi/Lc1VxH+E5jY1RHjGnxBfERhw/+mN2Xa7wEMDpEg oeK+BurSgu06i7y2hPFyA8KPx/B5hoUjRmEr2oIO4TVBfhYVuC6wIon17H7E5Xyn /5UC7DWen9gmnc+262cSn+mk7KPo+91v+Yi/Fl8qdrCwMDMcUWbdRipa/oDiVseo FC8D9DOj2oRAJe9fDAtt60N5Ml7dnVZTqxE5Dz7FdfEW8mWy6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8TWHiMCCMjpgQ9G++/svnzyzSEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWM1NWQxYjktOTlmMS0z MWI5LThmNTctZjA1NWM2ODJkNGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrv+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACc2vr+5+b+yo0/3xEx2BBsZVRw3kNrk7z8tnHlrJ5Gd9ie2m3yV8WEF ENb/8cTTLe/txeB8zi/hUPykjYM7wZHAMFcPVsP+Ztz1MtE2T55HdJDb71B3Q+3H wWi3YyQDRxPgP1KTdC7pFPuC4472sjREkR7yxeKz3np24zp3fMDOhdlH1SdHIfZX HeUf1xAO2avfwk/4gnfLoAxnR1LfggvDt/Eh0FLhSLVv+StWl38YWV3my/2wtuBw I2nIvUelp/PBCX3a9f5niO5tikEgqBsVDStrVj1FmCZ+2DdbBwpCRD86VXkyUqwa weO44dhQyj/DG0GWDoG6rwkZ6m3CaBc= -----END CERTIFICATE-----Generated at Mon Jul 13 10:39:56 2026 by rpki-client