$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3abac57a-acbf-36e5-86d0-4b174393283c.roa File: 3abac57a-acbf-36e5-86d0-4b174393283c.roa (raw, json) Hash identifier: 5LJvA7mkZ+I3nptxT9JXlD+dvm1fU0DXhm77C7z7qSs= Subject key identifier: DE:04:19:E5:D4:95:0E:5B:FE:80:52:00:CC:F6:53:5C:89:07:DF:DF Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584ECA6C7DA59122968D00941240 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3abac57a-acbf-36e5-86d0-4b174393283c.roa Signing time: Mon 10 Aug 2026 13:00:12 +0000 ROA not before: Mon 10 Aug 2026 13:00:12 +0000 ROA not after: Sun 08 Nov 2026 14:00:12 +0000 asID: 6167 IP address blocks: 174.236.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ca:6c:7d:a5:91:22:96:8d:00:94:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 10 13:00:12 2026 GMT Not After : Nov 8 14:00:12 2026 GMT Subject: CN=970ec3ed-6cfb-4033-be25-978217316d93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5c:b8:80:a9:fa:44:8a:1a:b0:55:95:d0:b1: bf:dc:e4:4d:fa:25:28:a1:21:93:2e:24:c7:8d:cf: 1a:22:17:19:61:1a:64:43:d3:95:8c:55:9a:3a:53: f0:13:85:ba:17:2b:0e:ca:c6:db:f2:71:a2:3c:0c: 8a:d2:a6:85:9b:18:13:03:ed:a5:35:00:f6:c1:5d: df:8a:1f:02:ad:43:4f:47:09:c8:db:0d:df:92:56: ef:b4:84:ac:f1:f7:82:f1:00:b7:5b:9c:c8:6f:bd: 5c:95:f1:48:0c:28:e8:06:bd:5d:a3:85:21:bb:86: 8a:df:17:cb:c2:b4:a1:91:02:90:56:7d:e0:a0:0e: 3a:ba:24:9e:2c:40:bd:a7:71:56:d0:72:78:8f:81: bb:51:bb:55:af:71:e0:ec:31:4e:68:8e:1b:2d:33: be:56:22:09:56:10:0b:59:4b:0d:c5:1b:9d:15:21: c9:28:ec:7a:32:79:50:f7:e5:22:a6:7d:4a:ff:29: 70:f6:a7:2e:d3:d2:06:c5:e1:ef:27:ec:da:25:f9: 12:ca:89:96:04:1f:1c:45:8c:84:1d:83:cd:38:45: fa:39:38:aa:82:07:2a:ec:2c:75:34:74:82:3f:2b: c5:80:81:1b:74:b5:95:2a:20:b3:09:c5:91:e8:5c: 1f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:04:19:E5:D4:95:0E:5B:FE:80:52:00:CC:F6:53:5C:89:07:DF:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3abac57a-acbf-36e5-86d0-4b174393283c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.236.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:eb:27:23:f4:c6:20:69:84:5c:38:72:81:98:4c:9f:74:f8: de:1f:0e:ec:db:6a:a0:9b:68:25:78:2b:58:4d:6e:e8:87:49: 8f:2f:a2:d6:b2:ea:61:71:e0:70:fa:dc:9d:56:b9:00:77:95: 44:be:41:d1:0f:04:a8:5f:7b:9c:93:1e:78:dc:52:05:d5:eb: 4d:fc:f1:b6:2c:50:1f:b3:91:64:c2:b4:c2:bc:44:7b:ea:b6: 5d:39:ec:6b:71:b0:b8:69:63:bb:3b:27:23:92:45:ff:71:66: 37:b9:30:c5:c7:31:7d:cb:2a:ae:16:82:eb:45:ed:7e:3a:46: 55:01:ce:47:5c:b5:8c:df:41:4b:c3:60:32:2a:2c:83:ca:1d: 05:d0:b8:c0:4c:69:07:74:f4:60:03:e7:c0:a5:7c:c4:11:73: da:b1:26:3a:cf:28:71:18:29:0a:2d:c1:86:bb:0c:19:ea:03: ee:08:90:3b:85:37:29:dd:37:de:3a:9a:f0:de:ed:bd:7e:13: 7b:ff:1e:ef:18:3c:c4:ef:1e:f5:cb:b9:70:df:26:a5:56:f6: 0f:57:5e:26:87:8b:cd:04:67:00:49:29:d5:f2:69:36:22:10: e8:2e:08:61:d3:d0:3a:95:cf:0c:40:4e:9e:76:38:3d:15:db: 6a:1f:f8:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7KbH2lkSKWjQCUEkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgxMDEzMDAxMloXDTI2MTEwODE0MDAxMlowLzEtMCsGA1UEAxMk OTcwZWMzZWQtNmNmYi00MDMzLWJlMjUtOTc4MjE3MzE2ZDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1y4gKn6RIoasFWV0LG/3ORN+iUooSGTLiTH jc8aIhcZYRpkQ9OVjFWaOlPwE4W6FysOysbb8nGiPAyK0qaFmxgTA+2lNQD2wV3f ih8CrUNPRwnI2w3fklbvtISs8feC8QC3W5zIb71clfFIDCjoBr1do4Uhu4aK3xfL wrShkQKQVn3goA46uiSeLEC9p3FW0HJ4j4G7UbtVr3Hg7DFOaI4bLTO+ViIJVhAL WUsNxRudFSHJKOx6MnlQ9+Uipn1K/ylw9qcu09IGxeHvJ+zaJfkSyomWBB8cRYyE HYPNOEX6OTiqggcq7Cx1NHSCPyvFgIEbdLWVKiCzCcWR6FwfSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4EGeXUlQ5b/oBSAMz2U1yJB9/fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2FiYWM1N2EtYWNiZi0z NmU1LTg2ZDAtNGIxNzQzOTMyODNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCruyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADrJyP0xiBphFw4coGYTJ90+N4fDuzbaqCbaCV4K1hNbuiHSY8votay 6mFx4HD63J1WuQB3lUS+QdEPBKhfe5yTHnjcUgXV60388bYsUB+zkWTCtMK8RHvq tl057GtxsLhpY7s7JyOSRf9xZje5MMXHMX3LKq4WgutF7X46RlUBzkdctYzfQUvD YDIqLIPKHQXQuMBMaQd09GAD58ClfMQRc9qxJjrPKHEYKQotwYa7DBnqA+4IkDuF NyndN946mvDe7b1+E3v/Hu8YPMTvHvXLuXDfJqVW9g9XXiaHi80EZwBJKdXyaTYi EOguCGHT0DqVzwxATp52OD0V22of+GY= -----END CERTIFICATE-----Generated at Thu Aug 27 22:52:38 2026 by rpki-client