$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4498fc92-81b2-32be-aaf7-e59737169153.roa File: 4498fc92-81b2-32be-aaf7-e59737169153.roa (raw, json) Hash identifier: wRhZquWJjuvZhHvQpNIEa5mBzuZ1iLZzQdS5Z1h+tyQ= Subject key identifier: 95:C4:37:04:F0:6B:0F:53:A3:E1:3D:32:DC:D5:64:EE:37:BF:51:B0 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584ECA6C843840B91A5B07E67240 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4498fc92-81b2-32be-aaf7-e59737169153.roa Signing time: Mon 10 Aug 2026 13:00:12 +0000 ROA not before: Mon 10 Aug 2026 13:00:12 +0000 ROA not after: Sun 08 Nov 2026 14:00:12 +0000 asID: 6167 IP address blocks: 174.248.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ca:6c:84:38:40:b9:1a:5b:07:e6:72:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 10 13:00:12 2026 GMT Not After : Nov 8 14:00:12 2026 GMT Subject: CN=4cd8a1f2-df15-4fd9-922c-4d418b758106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:61:9f:07:a3:6d:e0:1b:96:28:1f:7b:36:91: b3:7b:da:e2:00:cf:19:a2:7c:de:f7:8e:d9:b5:71: 45:c3:a8:ff:14:a9:1a:fa:ad:28:18:24:c7:38:04: 80:d0:b1:d4:4f:bf:64:32:69:f4:dc:bc:15:a6:68: a0:65:8d:75:c1:65:70:47:9f:db:de:0e:57:91:bd: a5:9f:b1:28:1f:2c:a7:c8:fc:d6:2d:bb:4f:9e:2c: 05:48:b0:25:b4:14:bc:b0:0e:76:a0:aa:47:10:63: 80:f4:e7:70:a4:0d:94:10:63:6f:74:ad:58:2c:95: 26:34:62:47:18:c3:8c:76:76:bc:92:b4:c8:32:e2: b4:d5:3a:0c:e0:94:f8:74:f4:a1:f1:34:6f:f2:f5: 04:f2:6a:91:09:89:3b:b0:a3:9f:d2:dc:14:9f:15: 30:09:fb:93:b5:7a:89:4b:c6:95:06:fd:50:2a:e0: 30:90:bb:09:58:3c:0e:b8:bb:06:a9:d7:9e:75:14: 82:15:63:ae:9a:92:1a:ff:fa:eb:31:72:29:dc:f5: be:c7:2a:bb:1b:7f:f5:94:18:85:ae:85:40:a1:a6: 4e:02:bf:10:25:7a:39:c1:fe:13:71:45:5c:a9:1d: 01:b1:aa:0b:4e:01:73:bc:95:a6:5e:6f:e6:5f:51: cb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C4:37:04:F0:6B:0F:53:A3:E1:3D:32:DC:D5:64:EE:37:BF:51:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4498fc92-81b2-32be-aaf7-e59737169153.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.248.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:c0:33:e1:21:74:15:08:34:1a:31:cf:2c:81:05:6d:88:79: 73:63:27:51:b7:32:62:31:65:b6:a1:bf:70:9a:b2:0f:3f:ab: 6e:b9:7a:17:f3:22:0f:39:5e:ff:2d:4b:4a:14:f2:d2:f1:af: be:23:58:4b:0f:0a:2d:3d:4d:c0:8c:59:13:e3:e9:8b:e8:83: 7d:34:2b:96:12:a1:b9:00:11:1c:65:6c:d7:5b:d9:36:9c:20: e9:6b:ef:c4:98:98:33:24:44:47:73:5e:ab:38:2b:88:02:6f: ea:56:54:9d:92:75:6a:4c:c0:bf:2d:36:43:99:05:81:69:99: d1:e9:bf:e3:2f:cc:2c:b3:df:72:1e:51:fa:41:4c:a2:31:39: 33:10:fe:2c:34:8a:9c:70:b7:3c:29:34:02:34:fc:65:a7:d2: 8d:c2:f7:7b:6a:61:47:17:a7:60:7b:78:9d:71:be:76:2d:5f: 8d:1c:f3:dc:c7:d6:63:70:94:c3:70:41:6f:59:ea:ea:21:54: 9f:74:1a:71:f2:ae:a3:ee:40:5d:0d:60:18:d7:3a:4b:a1:c0: 3c:79:37:9a:3a:07:81:29:01:4b:62:e6:2e:ff:a1:31:ac:2e: f3:a3:a7:d0:d9:7b:e8:34:31:7c:8d:b1:ac:03:9d:ea:4c:39: 77:34:86:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7KbIQ4QLkaWwfmckAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgxMDEzMDAxMloXDTI2MTEwODE0MDAxMlowLzEtMCsGA1UEAxMk NGNkOGExZjItZGYxNS00ZmQ5LTkyMmMtNGQ0MThiNzU4MTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWGfB6Nt4BuWKB97NpGze9riAM8Zonze947Z tXFFw6j/FKka+q0oGCTHOASA0LHUT79kMmn03LwVpmigZY11wWVwR5/b3g5Xkb2l n7EoHyynyPzWLbtPniwFSLAltBS8sA52oKpHEGOA9OdwpA2UEGNvdK1YLJUmNGJH GMOMdna8krTIMuK01ToM4JT4dPSh8TRv8vUE8mqRCYk7sKOf0twUnxUwCfuTtXqJ S8aVBv1QKuAwkLsJWDwOuLsGqdeedRSCFWOumpIa//rrMXIp3PW+xyq7G3/1lBiF roVAoaZOAr8QJXo5wf4TcUVcqR0BsaoLTgFzvJWmXm/mX1HLJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXENwTwaw9To+E9MtzVZO43v1GwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDQ5OGZjOTItODFiMi0z MmJlLWFhZjctZTU5NzM3MTY5MTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrviMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbAM+EhdBUINBoxzyyBBW2IeXNjJ1G3MmIxZbahv3Casg8/q265ehfz Ig85Xv8tS0oU8tLxr74jWEsPCi09TcCMWRPj6Yvog300K5YSobkAERxlbNdb2Tac IOlr78SYmDMkREdzXqs4K4gCb+pWVJ2SdWpMwL8tNkOZBYFpmdHpv+MvzCyz33Ie UfpBTKIxOTMQ/iw0ipxwtzwpNAI0/GWn0o3C93tqYUcXp2B7eJ1xvnYtX40c89zH 1mNwlMNwQW9Z6uohVJ90GnHyrqPuQF0NYBjXOkuhwDx5N5o6B4EpAUti5i7/oTGs LvOjp9DZe+g0MXyNsawDnepMOXc0hrM= -----END CERTIFICATE-----Generated at Thu Aug 27 22:51:03 2026 by rpki-client