$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8407581a-f4ca-30b7-bdf7-bc8198213159.roa File: 8407581a-f4ca-30b7-bdf7-bc8198213159.roa (raw, json) Hash identifier: bju5wOy1G3KCMhOdJAwQjAPW75WKuQc6/BV19EnQsnw= Subject key identifier: 91:D3:F5:8D:6A:7F:62:54:80:1A:FC:75:D7:EB:DD:08:21:F1:7A:5F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584ECA6C7CC6BF2E6C637C29EA30 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8407581a-f4ca-30b7-bdf7-bc8198213159.roa Signing time: Mon 10 Aug 2026 13:00:12 +0000 ROA not before: Mon 10 Aug 2026 13:00:12 +0000 ROA not after: Sun 08 Nov 2026 14:00:12 +0000 asID: 6167 IP address blocks: 174.234.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ca:6c:7c:c6:bf:2e:6c:63:7c:29:ea:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 10 13:00:12 2026 GMT Not After : Nov 8 14:00:12 2026 GMT Subject: CN=91509340-1427-4c54-99e1-0646105eddc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:aa:f8:ad:29:b7:47:fa:ea:f3:23:1f:a1:c8: c3:1c:53:4d:f9:4a:c1:1c:c4:c6:d6:ee:86:b7:56: aa:2f:0e:8f:e9:f5:52:4e:7b:ce:2c:8f:99:8f:d9: ec:06:30:0e:03:7a:8c:e4:df:51:27:38:da:dd:56: 04:65:e1:92:44:28:65:f8:ee:4c:b6:19:83:41:38: d4:66:4a:62:92:92:06:01:df:de:68:6e:2b:30:c8: 88:a7:58:42:0e:5d:31:9e:fe:6b:73:6c:c0:18:f4: d9:f3:ae:ef:50:e5:c1:98:f8:dc:0e:f4:ac:13:74: 36:2d:da:75:73:2c:d4:9f:2b:0e:1c:e1:45:32:d9: 12:e3:36:b7:c1:b4:d2:07:59:37:6e:3b:1e:a0:9d: ff:d4:87:de:a5:9e:b1:c3:83:93:1e:ee:ff:ac:56: 26:9b:52:ec:f1:22:22:b9:33:20:b5:05:4b:e9:9b: 7a:80:f5:0d:ab:7a:64:77:c5:b6:30:3f:e7:d6:c3: b7:71:d1:f7:8e:52:ac:e2:b5:e9:71:ce:bc:53:24: 08:75:da:02:61:91:0b:e6:f8:ca:15:d8:ee:3f:9d: 06:58:78:ec:46:29:1f:4a:db:80:45:1e:6b:3d:37: c2:00:29:44:43:43:f1:69:06:c7:17:a0:27:8c:fb: d1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D3:F5:8D:6A:7F:62:54:80:1A:FC:75:D7:EB:DD:08:21:F1:7A:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8407581a-f4ca-30b7-bdf7-bc8198213159.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.234.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:51:26:a8:23:e5:bb:ea:93:8a:10:00:1e:41:33:1b:e9:b8: 82:e1:96:f6:fd:f4:3a:3f:c7:f1:32:2d:29:8f:e4:09:68:d2: 12:b7:87:96:01:9c:4e:c9:91:7c:fe:34:9b:b7:7a:9f:5a:df: f3:0f:3a:16:f8:17:aa:39:f8:da:e9:9c:68:d2:35:b5:87:ae: 52:68:dd:63:76:eb:4c:ec:e3:c1:72:86:0c:63:53:ee:0a:73: 90:93:f2:b4:56:70:65:11:8c:8f:5e:64:08:e0:a9:62:57:15: 2a:68:72:b4:fd:d8:c3:dd:38:bd:be:bf:b9:34:5c:f9:f4:db: aa:20:21:fe:83:33:79:f2:f5:22:1e:bc:46:4e:b6:fc:55:fc: ff:b9:ad:c6:9b:7c:88:5c:92:f7:69:81:ec:d7:0b:e2:23:12: c3:6e:27:16:50:7c:fd:39:c2:ff:3f:8c:f7:ca:73:8e:ca:9e: 1f:d1:2c:bc:4f:b8:b5:7c:49:04:7e:cf:83:23:de:9e:a9:38: 1e:57:b9:0c:9f:4e:cc:4c:83:31:a1:34:03:5f:b6:29:b3:d3: b7:fb:2c:b5:d7:c0:07:df:77:0c:6b:0f:a6:e6:6f:07:c1:0d: a4:e3:c2:da:f4:8d:3f:79:69:02:c8:0e:b0:e0:3f:3f:f6:e6: 71:34:26:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7KbHzGvy5sY3wp6jAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgxMDEzMDAxMloXDTI2MTEwODE0MDAxMlowLzEtMCsGA1UEAxMk OTE1MDkzNDAtMTQyNy00YzU0LTk5ZTEtMDY0NjEwNWVkZGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKr4rSm3R/rq8yMfocjDHFNN+UrBHMTG1u6G t1aqLw6P6fVSTnvOLI+Zj9nsBjAOA3qM5N9RJzja3VYEZeGSRChl+O5MthmDQTjU ZkpikpIGAd/eaG4rMMiIp1hCDl0xnv5rc2zAGPTZ867vUOXBmPjcDvSsE3Q2Ldp1 cyzUnysOHOFFMtkS4za3wbTSB1k3bjseoJ3/1IfepZ6xw4OTHu7/rFYmm1Ls8SIi uTMgtQVL6Zt6gPUNq3pkd8W2MD/n1sO3cdH3jlKs4rXpcc68UyQIddoCYZEL5vjK FdjuP50GWHjsRikfStuARR5rPTfCAClEQ0PxaQbHF6AnjPvRmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHT9Y1qf2JUgBr8ddfr3Qgh8XpfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODQwNzU4MWEtZjRjYS0z MGI3LWJkZjctYmM4MTk4MjEzMTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErurwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxRJqgj5bvqk4oQAB5BMxvpuILhlvb99Do/x/EyLSmP5Alo0hK3h5YB nE7JkXz+NJu3ep9a3/MPOhb4F6o5+NrpnGjSNbWHrlJo3WN260zs48FyhgxjU+4K c5CT8rRWcGURjI9eZAjgqWJXFSpocrT92MPdOL2+v7k0XPn026ogIf6DM3ny9SIe vEZOtvxV/P+5rcabfIhckvdpgezXC+IjEsNuJxZQfP05wv8/jPfKc47Knh/RLLxP uLV8SQR+z4Mj3p6pOB5XuQyfTsxMgzGhNANftimz07f7LLXXwAffdwxrD6bmbwfB DaTjwtr0jT95aQLIDrDgPz/25nE0JoU= -----END CERTIFICATE-----Generated at Thu Aug 27 20:55:24 2026 by rpki-client