$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36fecfde-d240-3b8b-bafe-4a9baf8f7954.roa File: 36fecfde-d240-3b8b-bafe-4a9baf8f7954.roa (raw, json) Hash identifier: M0lGzmdFcViflN18lTNpWlkc1YBtM+WLCrM3LFyQos4= Subject key identifier: F7:5B:68:A3:D5:16:29:17:CA:B5:0E:18:72:71:77:D7:4F:E6:4A:65 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F71EDB4B286BDFEC22D7F1B80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36fecfde-d240-3b8b-bafe-4a9baf8f7954.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 22394 IP address blocks: 174.41.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:b4:b2:86:bd:fe:c2:2d:7f:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=5fb7456a-6514-4c31-8851-29eee6a2e5e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e8:5b:ae:7e:8e:cb:c6:5d:12:25:ff:85:49: b6:07:66:2e:19:4e:f1:74:49:4e:8f:65:df:47:31: 27:ea:cb:3e:7c:15:b4:bf:5c:2c:61:13:bc:6a:14: d4:47:49:43:35:38:78:30:67:97:1a:27:e6:85:fe: 44:8f:07:3f:e6:5d:b4:9f:88:8f:5e:6d:92:ed:d1: 4c:cd:65:74:1c:13:3e:16:20:62:cf:d2:00:9d:d3: c4:39:60:5e:b7:5b:da:b2:76:f6:10:93:24:e9:21: be:38:5f:4e:bb:f5:7b:1d:66:78:72:8d:82:35:2f: 43:e9:14:ae:22:82:4c:b9:1f:ef:b4:f8:d4:36:96: e8:16:f2:f5:dc:58:83:06:3b:41:66:2e:da:b2:1e: 8d:f3:e6:6e:f2:dd:40:b2:93:94:d7:05:90:13:f3: f1:95:19:24:8d:b0:06:aa:84:2d:25:09:5b:df:fa: c3:f1:10:ef:13:79:9b:9b:01:f6:43:0f:5f:13:c4: 66:63:c5:c6:59:81:b9:8c:ee:ed:b1:03:f5:bb:8f: 60:28:78:ba:17:93:6c:cc:67:26:18:ff:3a:17:fc: 92:b9:e5:f9:9a:cd:db:e1:89:15:38:9f:bc:4c:e2: 85:4c:4b:b0:e6:3c:47:9c:92:f8:f3:99:70:41:d2: 09:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:5B:68:A3:D5:16:29:17:CA:B5:0E:18:72:71:77:D7:4F:E6:4A:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/36fecfde-d240-3b8b-bafe-4a9baf8f7954.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.41.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:4c:36:ec:3e:84:26:64:b9:4c:d5:6a:96:91:45:63:64:cc: 10:c6:bc:44:a0:1b:7b:37:ad:ee:0d:a7:23:a8:78:96:f0:46: c8:0a:1c:e6:5a:25:44:2e:2a:71:9c:d4:a5:bb:e7:e3:b7:1a: 29:72:7e:fe:41:78:e0:30:95:96:b1:b1:11:a3:c2:5f:08:f6: 88:ff:01:05:bf:9d:4c:8b:50:59:39:50:bc:0e:26:53:50:85: 4d:07:ab:e7:36:eb:48:00:10:3b:27:50:74:8d:ad:00:a0:1d: ea:f6:a3:be:9f:e0:93:61:ec:8c:87:3f:8c:e7:e3:75:2f:21: 7e:57:dd:48:d8:e1:f9:10:d2:c5:19:3c:e7:f8:be:6f:36:bc: 89:2f:e9:e9:f4:38:38:65:82:24:64:38:02:82:12:5b:ac:3c: 04:c1:d2:b9:93:20:75:1a:69:7e:bf:e5:81:1e:3f:82:c5:51: 25:db:1f:2c:09:dc:34:84:2f:af:40:f5:37:69:af:e0:85:79: cf:6e:4c:d0:dd:7d:a6:59:2b:2c:14:ae:fe:b3:84:b4:34:86: b2:c1:2e:78:b8:98:ba:55:eb:9e:45:3c:7c:3c:10:93:c3:91: 0f:9b:95:45:e1:65:5a:0a:ad:f4:07:37:76:b7:26:a7:92:06: 2e:d0:43:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7bSyhr3+wi1/G4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk NWZiNzQ1NmEtNjUxNC00YzMxLTg4NTEtMjllZWU2YTJlNWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuhbrn6Oy8ZdEiX/hUm2B2YuGU7xdElOj2Xf RzEn6ss+fBW0v1wsYRO8ahTUR0lDNTh4MGeXGifmhf5Ejwc/5l20n4iPXm2S7dFM zWV0HBM+FiBiz9IAndPEOWBet1vasnb2EJMk6SG+OF9Ou/V7HWZ4co2CNS9D6RSu IoJMuR/vtPjUNpboFvL13FiDBjtBZi7ash6N8+Zu8t1AspOU1wWQE/PxlRkkjbAG qoQtJQlb3/rD8RDvE3mbmwH2Qw9fE8RmY8XGWYG5jO7tsQP1u49gKHi6F5NszGcm GP86F/ySueX5ms3b4YkVOJ+8TOKFTEuw5jxHnJL485lwQdIJgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdbaKPVFikXyrUOGHJxd9dP5kplMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzZmZWNmZGUtZDI0MC0z YjhiLWJhZmUtNGE5YmFmOGY3OTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrinEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJMNuw+hCZkuUzVapaRRWNkzBDGvESgG3s3re4NpyOoeJbwRsgKHOZa JUQuKnGc1KW75+O3Gilyfv5BeOAwlZaxsRGjwl8I9oj/AQW/nUyLUFk5ULwOJlNQ hU0Hq+c260gAEDsnUHSNrQCgHer2o76f4JNh7IyHP4zn43UvIX5X3UjY4fkQ0sUZ POf4vm82vIkv6en0ODhlgiRkOAKCElusPATB0rmTIHUaaX6/5YEeP4LFUSXbHywJ 3DSEL69A9Tdpr+CFec9uTNDdfaZZKywUrv6zhLQ0hrLBLni4mLpV655FPHw8EJPD kQ+blUXhZVoKrfQHN3a3JqeSBi7QQ2c= -----END CERTIFICATE-----Generated at Mon Oct 12 23:11:51 2026 by rpki-client