$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/668844c2-25c7-3f97-9873-cfa3a0d3e0d8.roa File: 668844c2-25c7-3f97-9873-cfa3a0d3e0d8.roa (raw, json) Hash identifier: yHaRStXL7YrApdvV+oEJw5eEnKD7IYX1ydJ97ThYxI4= Subject key identifier: 1E:69:A4:E5:D0:A5:83:FD:8D:90:8B:D9:47:B8:6E:EA:EF:95:39:17 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F6C583C3ABB0E9C96E31BBA80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/668844c2-25c7-3f97-9873-cfa3a0d3e0d8.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 6167 IP address blocks: 174.229.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:3c:3a:bb:0e:9c:96:e3:1b:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=152f04b0-875e-4194-9654-9114ef63c9df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:46:29:45:32:0f:3f:68:49:94:b5:fe:ef:8d: 3e:f0:cf:90:e2:25:72:a2:d8:33:19:4f:56:22:61: c6:6d:39:39:c9:6e:ca:34:a8:48:ec:0c:7a:55:fe: a3:05:3f:5c:df:79:35:9f:40:3c:a8:01:1f:d6:9f: 2f:c7:ad:05:ab:74:ec:09:2d:48:5d:d8:b7:d3:8a: cf:95:89:e9:0a:d1:db:d7:a2:5c:61:ae:26:1f:55: 34:bb:78:b3:0d:7a:92:4c:b1:2b:93:83:65:06:ef: 05:15:4d:db:74:f4:af:89:ef:35:c9:38:c2:77:33: 91:bf:ce:d2:f8:59:8f:03:ab:f4:03:40:1f:2b:31: 9a:3a:e0:74:97:35:4d:61:28:d8:f9:77:00:13:7d: e1:3f:24:a6:a2:1c:25:fa:34:f2:c2:60:15:4a:b8: d9:31:45:5c:e3:50:38:5a:ad:0b:4a:23:1c:ee:56: ec:9d:01:05:86:30:3f:8a:99:62:be:07:53:5e:ca: b9:8f:0d:86:7f:aa:42:fe:36:71:34:80:83:e3:0a: 10:cb:d6:b4:ca:a5:c8:8f:4b:cf:5c:02:c9:8b:6a: aa:30:bd:8f:46:c8:41:1d:8d:e2:d0:b1:57:7f:f9: 86:f2:e3:73:cd:c0:a2:3a:b9:a6:ea:e5:c5:41:9a: 23:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:69:A4:E5:D0:A5:83:FD:8D:90:8B:D9:47:B8:6E:EA:EF:95:39:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/668844c2-25c7-3f97-9873-cfa3a0d3e0d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.229.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:66:f1:26:94:88:70:d7:2e:c4:0b:19:bc:f4:b9:e6:66:27: 87:71:af:45:10:d6:be:8a:26:70:c5:98:e8:df:ba:e1:7e:4f: 7b:90:b0:f7:a4:61:f5:cc:66:dc:c3:46:3c:bd:2f:d9:77:44: d2:f7:46:03:f6:82:bf:f7:92:1d:48:71:8a:45:d7:32:49:60: 20:38:20:5e:04:74:78:7c:6c:77:f7:f6:dc:67:36:15:29:72: 55:37:be:e3:7d:a2:fa:5a:6a:77:01:c3:0b:96:fb:1a:8e:18: cc:f1:26:4c:e9:55:a3:b7:94:10:98:ad:d8:58:2a:9b:e0:89: f1:c1:dd:9b:b1:65:0d:e8:80:16:95:0d:db:f0:d6:d7:bc:d0: 7d:b1:f4:07:63:12:af:2d:37:34:4a:2c:de:2f:a3:1d:bc:cf: aa:b6:37:54:3f:b0:01:30:b6:24:20:e7:e8:6d:45:bb:fa:50: 9b:42:9f:94:17:18:db:10:47:83:2b:36:e1:ff:c6:7f:f3:4e: 71:00:ad:49:b8:32:54:d5:2a:b1:e1:1e:d3:8c:70:8e:71:3a: 85:e7:5a:b7:1c:9c:0b:db:cb:d8:13:9a:11:8c:82:42:bf:28: 8d:1d:ab:8e:37:b6:63:6b:eb:04:78:40:e2:e1:0a:7a:37:9c: 04:f9:d4:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWDw6uw6cluMbuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk MTUyZjA0YjAtODc1ZS00MTk0LTk2NTQtOTExNGVmNjNjOWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0YpRTIPP2hJlLX+740+8M+Q4iVyotgzGU9W ImHGbTk5yW7KNKhI7Ax6Vf6jBT9c33k1n0A8qAEf1p8vx60Fq3TsCS1IXdi304rP lYnpCtHb16JcYa4mH1U0u3izDXqSTLErk4NlBu8FFU3bdPSvie81yTjCdzORv87S +FmPA6v0A0AfKzGaOuB0lzVNYSjY+XcAE33hPySmohwl+jTywmAVSrjZMUVc41A4 Wq0LSiMc7lbsnQEFhjA/iplivgdTXsq5jw2Gf6pC/jZxNICD4woQy9a0yqXIj0vP XALJi2qqML2PRshBHY3i0LFXf/mG8uNzzcCiOrmm6uXFQZojgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5ppOXQpYP9jZCL2Ue4burvlTkXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjY4ODQ0YzItMjVjNy0z Zjk3LTk4NzMtY2ZhM2EwZDNlMGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZm8SaUiHDXLsQLGbz0ueZmJ4dxr0UQ1r6KJnDFmOjfuuF+T3uQsPek YfXMZtzDRjy9L9l3RNL3RgP2gr/3kh1IcYpF1zJJYCA4IF4EdHh8bHf39txnNhUp clU3vuN9ovpaancBwwuW+xqOGMzxJkzpVaO3lBCYrdhYKpvgifHB3ZuxZQ3ogBaV Ddvw1te80H2x9AdjEq8tNzRKLN4vox28z6q2N1Q/sAEwtiQg5+htRbv6UJtCn5QX GNsQR4MrNuH/xn/zTnEArUm4MlTVKrHhHtOMcI5xOoXnWrccnAvby9gTmhGMgkK/ KI0dq443tmNr6wR4QOLhCno3nAT51Co= -----END CERTIFICATE-----Generated at Mon Oct 12 23:23:47 2026 by rpki-client