$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/24c8d35d-2a8f-3a1c-94d2-8b05712fa664.roa File: 24c8d35d-2a8f-3a1c-94d2-8b05712fa664.roa (raw, json) Hash identifier: bTg+z1WpF+2VV1NZPXI+WoKTJawD7YWzfUrj26fRLII= Subject key identifier: 38:63:67:23:9D:E0:0A:AF:01:FB:19:4E:BB:29:25:4C:A2:E8:88:99 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EBD2C0D3A84A09B3A3D5E8740 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/24c8d35d-2a8f-3a1c-94d2-8b05712fa664.roa Signing time: Wed 05 Aug 2026 19:05:03 +0000 ROA not before: Wed 05 Aug 2026 19:05:03 +0000 ROA not after: Tue 03 Nov 2026 20:05:03 +0000 asID: 6167 IP address blocks: 174.217.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bd:2c:0d:3a:84:a0:9b:3a:3d:5e:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 5 19:05:03 2026 GMT Not After : Nov 3 20:05:03 2026 GMT Subject: CN=404d0699-237e-42ba-92ad-55c1b332f815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c5:d4:f6:d9:4f:87:89:4a:ba:56:11:5b:cc: b9:cc:d1:dc:bf:52:5c:b5:87:41:58:f0:2a:9a:7b: 52:6f:c9:9c:ea:45:88:36:e5:75:5f:d9:a2:06:02: 15:3b:3d:dd:34:08:dd:b4:fa:e4:2d:9f:86:55:b4: 27:c2:e5:0b:b6:23:83:38:8b:8d:b3:ab:93:3a:e1: 0e:2c:40:f3:b4:42:26:07:0f:2c:89:80:b1:8d:66: 8c:41:6c:bc:d1:41:f6:34:9d:bf:d5:88:d7:b7:7f: e7:81:9a:81:ee:45:dd:5d:93:df:19:c9:a7:8b:3d: f0:9c:d1:16:68:b7:42:57:d3:10:6e:50:6b:83:8a: 19:45:de:ac:7f:a1:66:be:61:a3:c9:98:cb:d7:05: bb:3d:2b:bd:6d:27:79:07:18:d8:b6:d5:73:67:60: 28:c1:65:36:bb:64:e9:7b:44:a4:ab:bf:d7:60:9b: 0f:9b:95:15:45:3f:59:da:62:29:a5:c8:2c:de:24: a4:fd:d4:75:49:ad:89:2f:2c:ce:37:cf:29:49:2f: 56:00:d6:17:96:f0:00:89:a5:a3:e4:e7:53:d7:28: b6:da:60:29:b7:d8:da:00:1d:cd:15:40:32:03:8d: e2:f7:5e:ab:8b:bd:74:c2:3b:52:ff:04:f2:b9:e2: 04:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:63:67:23:9D:E0:0A:AF:01:FB:19:4E:BB:29:25:4C:A2:E8:88:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/24c8d35d-2a8f-3a1c-94d2-8b05712fa664.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.217.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:d5:43:56:e1:e1:0c:c6:e8:10:e4:3c:be:2b:ad:04:09:45: d2:0e:6b:e3:1f:bb:8e:e5:d6:72:31:34:65:60:f8:44:14:06: 17:fe:a7:7c:08:8b:03:fb:03:b8:f0:fa:8e:ac:56:4a:b8:69: 43:fc:f2:0f:66:76:64:0a:31:63:5b:ed:54:9c:7e:f8:d4:f7: 59:02:bb:b0:7e:6c:aa:7f:9d:c9:88:16:b3:c2:0f:56:69:be: ab:44:81:da:07:c2:c9:4a:9b:0b:68:94:37:ba:79:02:5b:80: dd:ef:40:33:e2:30:b9:c2:87:ea:9e:3e:70:71:0f:c4:e1:92: 9f:15:77:28:db:3d:0f:ca:d8:dc:5e:d0:80:17:19:9f:7c:09: 17:06:86:63:da:b8:12:02:28:a8:f9:88:d8:45:d2:57:3b:14: ae:c5:e0:f0:1a:98:62:58:b7:8b:a0:82:fc:42:bb:5d:6a:07: 9e:bc:8d:d9:e6:54:9f:79:8a:05:19:05:88:b9:df:07:c7:ad: bc:87:c4:e5:0e:13:ee:05:b9:97:86:21:1d:26:82:05:21:35: e3:67:4b:9b:2d:48:ce:f9:f3:60:3d:99:83:7d:fb:14:63:99: ff:16:30:ed:18:36:b9:3d:e1:38:fd:56:12:c1:9c:6a:5d:7e: 07:fc:46:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE69LA06hKCbOj1eh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgwNTE5MDUwM1oXDTI2MTEwMzIwMDUwM1owLzEtMCsGA1UEAxMk NDA0ZDA2OTktMjM3ZS00MmJhLTkyYWQtNTVjMWIzMzJmODE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcXU9tlPh4lKulYRW8y5zNHcv1JctYdBWPAq mntSb8mc6kWINuV1X9miBgIVOz3dNAjdtPrkLZ+GVbQnwuULtiODOIuNs6uTOuEO LEDztEImBw8siYCxjWaMQWy80UH2NJ2/1YjXt3/ngZqB7kXdXZPfGcmniz3wnNEW aLdCV9MQblBrg4oZRd6sf6FmvmGjyZjL1wW7PSu9bSd5BxjYttVzZ2AowWU2u2Tp e0Skq7/XYJsPm5UVRT9Z2mIppcgs3iSk/dR1Sa2JLyzON88pSS9WANYXlvAAiaWj 5OdT1yi22mApt9jaAB3NFUAyA43i916ri710wjtS/wTyueIEewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhjZyOd4AqvAfsZTrspJUyi6IiZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjRjOGQzNWQtMmE4Zi0z YTFjLTk0ZDItOGIwNTcxMmZhNjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbVQ1bh4QzG6BDkPL4rrQQJRdIOa+Mfu47l1nIxNGVg+EQUBhf+p3wI iwP7A7jw+o6sVkq4aUP88g9mdmQKMWNb7VScfvjU91kCu7B+bKp/ncmIFrPCD1Zp vqtEgdoHwslKmwtolDe6eQJbgN3vQDPiMLnCh+qePnBxD8Thkp8VdyjbPQ/K2Nxe 0IAXGZ98CRcGhmPauBICKKj5iNhF0lc7FK7F4PAamGJYt4uggvxCu11qB568jdnm VJ95igUZBYi53wfHrbyHxOUOE+4FuZeGIR0mggUhNeNnS5stSM7582A9mYN9+xRj mf8WMO0YNrk94Tj9VhLBnGpdfgf8Rrg= -----END CERTIFICATE-----Generated at Sat Aug 22 09:30:08 2026 by rpki-client