$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6eb37439-8c5c-3622-bd27-6ecbbf3498b6.roa File: 6eb37439-8c5c-3622-bd27-6ecbbf3498b6.roa (raw, json) Hash identifier: j0rhePxu19r9zaEp3cqY4SFrLo0gyarp6cSV7vfDoPM= Subject key identifier: 40:7D:18:8B:CE:1A:A7:63:23:8B:99:03:7D:54:5F:0E:4B:EC:76:2B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D773A817E1039EC4E122F7380 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6eb37439-8c5c-3622-bd27-6ecbbf3498b6.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 6167 IP address blocks: 174.200.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:81:7e:10:39:ec:4e:12:2f:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=efd37157-a362-4ee9-b171-02f7a93f5eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:68:20:f6:2c:c9:8d:3d:bf:b6:1a:37:d0:c3: a1:48:1d:58:f8:5c:ac:95:34:b1:0c:ed:18:6e:26: 5b:cb:51:9b:7a:0f:cc:af:b4:78:31:99:ba:e6:35: 7e:69:4d:4d:e7:7e:93:33:b0:4a:3d:f0:f6:8c:9c: 02:a6:09:6b:d9:6f:1a:25:1c:30:10:98:17:8b:b9: 0e:94:d9:91:d5:4f:80:34:3b:a9:77:73:c9:e6:9e: 50:4a:f5:80:7c:11:f6:42:75:e8:32:b2:b0:42:10: cf:44:bf:a2:6d:ee:b2:44:61:bc:8e:95:5d:4e:e7: 21:d7:50:5f:f0:b3:e0:12:52:13:97:67:ce:5d:eb: 2f:6f:65:db:df:73:65:b3:f8:96:57:2d:73:f9:98: 11:9d:1f:d6:5f:4b:4e:cd:d7:56:38:fa:d6:fd:81: 3d:42:c3:70:57:bc:de:d3:be:6e:89:2a:08:e0:bc: cb:9a:ff:a6:a3:cf:50:04:75:69:da:71:10:4b:20: 11:17:3a:7c:29:ea:87:85:75:42:64:5e:14:08:ca: dc:8d:24:eb:77:c5:47:5a:07:35:eb:76:eb:79:a3: fb:68:2d:d9:e6:1f:0a:62:0f:ed:39:a0:6e:20:f6: 75:b5:6e:60:7b:1a:99:c1:73:03:b8:2b:a8:f5:85: 43:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7D:18:8B:CE:1A:A7:63:23:8B:99:03:7D:54:5F:0E:4B:EC:76:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6eb37439-8c5c-3622-bd27-6ecbbf3498b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.200.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:48:26:10:00:d3:f6:2f:3d:21:2d:31:3d:43:a0:7d:ef:51: 99:ed:c2:e7:dc:6c:2f:f2:54:69:76:01:65:b3:5b:0a:4e:7a: 8e:40:dd:64:82:8b:ad:7e:8b:14:cb:9f:39:e9:64:dc:e5:7b: 7b:1f:e1:7f:ef:5e:fe:1a:ad:07:99:5c:44:cf:28:47:c9:23: e3:1b:59:1a:84:75:91:73:82:03:3b:3d:03:9f:20:81:89:a8: 2d:92:48:de:28:07:2f:c0:72:7e:0a:d0:10:79:58:32:d8:2a: f2:05:62:2f:b0:7a:e8:5a:40:16:e3:bb:b3:aa:be:e9:7c:21: 50:9f:39:84:61:8b:b2:98:52:b7:cf:ef:57:e0:e1:4e:2d:1b: 7a:5c:3e:60:d1:8b:fe:52:70:f1:0c:6a:83:72:c5:ab:f5:f1: 38:f6:e5:7b:90:31:31:da:98:21:4e:a5:06:bc:d4:c8:d9:59: eb:b0:d1:82:9f:02:ec:3a:52:db:c7:f1:31:e4:d8:43:2e:cd: 80:29:bf:01:ce:42:84:7c:af:ab:bb:56:d8:e0:25:59:97:92: e6:79:c5:e8:07:72:06:7a:3c:83:b4:3d:de:a8:e1:5e:03:b4: 91:1f:3d:82:42:ca:7f:64:24:ca:82:f7:4a:0d:27:d3:08:26: a7:b9:38:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13OoF+EDnsThIvc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk ZWZkMzcxNTctYTM2Mi00ZWU5LWIxNzEtMDJmN2E5M2Y1ZWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmgg9izJjT2/tho30MOhSB1Y+FyslTSxDO0Y biZby1Gbeg/Mr7R4MZm65jV+aU1N536TM7BKPfD2jJwCpglr2W8aJRwwEJgXi7kO lNmR1U+ANDupd3PJ5p5QSvWAfBH2QnXoMrKwQhDPRL+ibe6yRGG8jpVdTuch11Bf 8LPgElITl2fOXesvb2Xb33Nls/iWVy1z+ZgRnR/WX0tOzddWOPrW/YE9QsNwV7ze 075uiSoI4LzLmv+mo89QBHVp2nEQSyARFzp8KeqHhXVCZF4UCMrcjSTrd8VHWgc1 63breaP7aC3Z5h8KYg/tOaBuIPZ1tW5gexqZwXMDuCuo9YVDvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEB9GIvOGqdjI4uZA31UXw5L7HYrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNmViMzc0MzktOGM1Yy0z NjIyLWJkMjctNmVjYmJmMzQ5OGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrsjoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZIJhAA0/YvPSEtMT1DoH3vUZntwufcbC/yVGl2AWWzWwpOeo5A3WSC i61+ixTLnznpZNzle3sf4X/vXv4arQeZXETPKEfJI+MbWRqEdZFzggM7PQOfIIGJ qC2SSN4oBy/Acn4K0BB5WDLYKvIFYi+weuhaQBbju7Oqvul8IVCfOYRhi7KYUrfP 71fg4U4tG3pcPmDRi/5ScPEMaoNyxav18Tj25XuQMTHamCFOpQa81MjZWeuw0YKf Auw6UtvH8THk2EMuzYApvwHOQoR8r6u7VtjgJVmXkuZ5xegHcgZ6PIO0Pd6o4V4D tJEfPYJCyn9kJMqC90oNJ9MIJqe5OEM= -----END CERTIFICATE-----Generated at Mon Apr 13 17:21:03 2026 by rpki-client