$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/61a0293a-1431-35ac-b811-e7d757ab7660.roa File: 61a0293a-1431-35ac-b811-e7d757ab7660.roa (raw, json) Hash identifier: tUNaDQKto0/vflIZFvtmP0h24QKRpyaJJTs8TFWQCuc= Subject key identifier: 6A:DA:B7:3E:97:84:04:D6:24:55:A7:3A:C8:D9:64:C2:A0:5D:3C:C7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D6C0FAB543A857A99E54B0260 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/61a0293a-1431-35ac-b811-e7d757ab7660.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 6167 IP address blocks: 174.221.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:ab:54:3a:85:7a:99:e5:4b:02:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=8986ca82-a836-44cd-bd5a-93a2b2168e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:28:6a:71:e5:36:b4:63:91:60:ab:51:43:57: 7d:ac:1a:2e:50:d0:3d:32:6b:94:74:4a:df:74:2e: 75:09:ff:89:23:6c:3d:87:eb:d0:a5:b8:d4:92:15: 4d:af:52:c7:7b:32:cf:9d:b8:18:4b:cf:62:8b:e6: 8b:eb:bc:1c:ee:bf:96:40:1b:f5:0d:06:87:66:1a: 6f:02:f1:86:50:81:fc:5c:e2:f2:e9:8b:ba:5b:05: 4c:52:2a:72:92:67:a4:65:9e:37:98:95:1a:6e:f4: d7:07:78:8e:32:07:22:c6:3b:a5:fd:e2:ea:b8:90: 6d:17:c1:75:2c:fd:1d:95:0a:1c:9d:7d:80:6a:a1: 3e:a6:b0:e4:a9:c1:fe:37:4a:1c:21:b2:65:56:7c: e7:b4:79:6d:1b:4c:e9:7d:e2:3b:63:55:6c:9d:47: a8:95:4f:e3:b7:fc:35:8f:9c:c3:85:6c:8e:51:81: 82:bd:44:a4:6e:59:6a:5b:27:21:06:79:f5:78:cc: e3:83:a9:ee:fe:81:07:dd:2e:4d:ab:95:a3:c4:cc: 60:a4:27:a6:63:1d:ee:21:84:f9:cd:cc:51:b1:31: b4:d5:2a:f9:ef:48:51:a8:55:14:ab:6c:f6:15:ca: 38:a9:2a:c2:de:39:4f:1b:7c:b1:45:94:47:d3:56: a0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:DA:B7:3E:97:84:04:D6:24:55:A7:3A:C8:D9:64:C2:A0:5D:3C:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/61a0293a-1431-35ac-b811-e7d757ab7660.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.221.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:d3:1e:e1:f2:86:de:1a:d1:f1:2a:8e:97:36:92:59:05:ce: 38:cb:d8:90:6e:60:03:72:e0:c2:7e:d4:9a:9e:26:ee:42:35: f3:db:1e:65:d7:08:90:9f:57:d3:e1:d5:7d:36:a5:b2:24:93: cd:8a:f6:74:c2:57:fd:6b:c3:8a:57:1e:68:ed:6d:0c:c9:55: 70:47:28:8a:37:c9:38:9a:92:03:55:c7:b5:d7:9a:7d:6b:47: 54:52:5d:ba:a5:96:89:22:7f:8e:72:21:44:c0:bd:25:41:59: 26:d5:b8:4b:5d:bb:d9:21:01:d3:d3:72:ec:5f:11:b1:c2:3c: 2d:4a:1f:ce:81:99:ee:81:70:bf:b3:99:62:28:7a:15:0f:24: f1:a4:9b:f7:17:7e:2c:ab:fb:2f:e4:8e:14:1c:09:8d:46:11: 2a:07:46:a2:cc:ef:27:c0:cc:7f:e0:75:ab:7a:5e:3f:47:f9: 61:b1:01:2d:75:a1:7b:26:3f:e5:4a:10:42:e1:8b:c6:96:45: 27:f0:07:0e:a7:a8:b3:51:f9:18:23:49:d2:64:49:68:6d:b0: 64:94:b2:99:b5:fa:49:3e:39:60:cb:e9:09:81:1a:e2:dd:83: b1:fc:a0:fd:c0:8f:f9:ff:ea:23:11:70:e4:36:d7:af:d4:c9: 9a:3a:57:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD6tUOoV6meVLAmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk ODk4NmNhODItYTgzNi00NGNkLWJkNWEtOTNhMmIyMTY4ZTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlihqceU2tGORYKtRQ1d9rBouUNA9MmuUdErf dC51Cf+JI2w9h+vQpbjUkhVNr1LHezLPnbgYS89ii+aL67wc7r+WQBv1DQaHZhpv AvGGUIH8XOLy6Yu6WwVMUipykmekZZ43mJUabvTXB3iOMgcixjul/eLquJBtF8F1 LP0dlQocnX2AaqE+prDkqcH+N0ocIbJlVnzntHltG0zpfeI7Y1VsnUeolU/jt/w1 j5zDhWyOUYGCvUSkbllqWychBnn1eMzjg6nu/oEH3S5Nq5WjxMxgpCemYx3uIYT5 zcxRsTG01Sr570hRqFUUq2z2Fco4qSrC3jlPG3yxRZRH01ag0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGratz6XhATWJFWnOsjZZMKgXTzHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjFhMDI5M2EtMTQzMS0z NWFjLWI4MTEtZTdkNzU3YWI3NjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErt2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3THuHyht4a0fEqjpc2klkFzjjL2JBuYANy4MJ+1JqeJu5CNfPbHmXX CJCfV9Ph1X02pbIkk82K9nTCV/1rw4pXHmjtbQzJVXBHKIo3yTiakgNVx7XXmn1r R1RSXbqllokif45yIUTAvSVBWSbVuEtdu9khAdPTcuxfEbHCPC1KH86Bme6BcL+z mWIoehUPJPGkm/cXfiyr+y/kjhQcCY1GESoHRqLM7yfAzH/gdat6Xj9H+WGxAS11 oXsmP+VKEELhi8aWRSfwBw6nqLNR+RgjSdJkSWhtsGSUspm1+kk+OWDL6QmBGuLd g7H8oP3Aj/n/6iMRcOQ216/UyZo6VxI= -----END CERTIFICATE-----Generated at Mon Apr 13 18:26:08 2026 by rpki-client