$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e5a8fa8-5a50-3d96-be17-1236c6984c80.roa File: 8e5a8fa8-5a50-3d96-be17-1236c6984c80.roa (raw, json) Hash identifier: 9IpQC/Q8cZiKFhPqG3/dUOC52I0GCV3rWUnd/4drDvU= Subject key identifier: AB:42:C7:1F:D7:EB:74:1C:40:DB:11:22:57:B7:9E:7D:77:40:D2:8F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D59EAB2A5D72B859FE003B2B0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e5a8fa8-5a50-3d96-be17-1236c6984c80.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 6167 IP address blocks: 174.254.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:b2:a5:d7:2b:85:9f:e0:03:b2:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=36e244fc-881f-4cb0-9267-4795e4d6b134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:eb:6b:a2:48:21:1d:f1:1e:10:f6:8e:61:38: bd:ed:04:4e:6d:86:d8:b3:89:51:01:00:e1:7c:e5: dc:b3:87:21:85:d6:9c:80:29:c1:84:66:b0:cc:93: de:df:f3:1a:48:b6:1f:29:90:db:86:db:0d:e6:95: 58:3b:f2:81:83:af:29:af:56:79:5c:8c:dc:d0:0e: 5a:02:8f:2f:8d:73:b3:bd:af:50:19:c3:f7:4f:ff: 31:e4:b5:04:64:1d:a1:74:b0:fc:c0:db:b6:47:3f: 57:a9:87:f4:28:c4:3d:a0:24:fa:56:bb:c8:68:03: df:88:03:09:9e:20:10:1a:84:d5:0f:e9:73:4f:ef: b9:ad:52:ab:ed:a4:5f:94:ce:48:c5:e4:c4:47:28: 68:b3:90:a1:11:fa:b2:64:4b:51:23:2b:c6:67:6c: 2b:2e:0d:0e:2b:23:88:48:15:12:55:a9:c2:a5:21: 54:75:f7:2a:94:0b:99:90:a9:57:05:6b:a7:28:de: 6e:44:f3:97:17:93:b7:98:a8:ef:f3:19:cc:24:f1: b1:7e:a4:cd:0c:95:f1:b1:21:db:a4:e6:30:fb:ff: 3e:30:a0:45:e9:22:5e:2c:42:9d:a1:32:8d:78:d1: 36:46:6f:dc:85:67:c0:f1:ad:6c:dd:eb:75:b9:01: bd:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:42:C7:1F:D7:EB:74:1C:40:DB:11:22:57:B7:9E:7D:77:40:D2:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8e5a8fa8-5a50-3d96-be17-1236c6984c80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.254.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:4e:9e:c1:14:17:74:3a:48:f0:db:ec:c9:84:bb:40:fa:0f: 77:0b:4c:f1:95:9d:8c:d7:0e:34:44:c7:c8:2a:03:75:e5:8f: 86:2a:29:44:f8:78:0d:b8:b4:89:5e:83:d3:16:2d:d2:3e:7b: 9c:ef:ac:db:91:21:30:21:e8:16:04:9e:5a:e1:b0:52:16:b7: f8:f8:a7:08:5b:41:4e:ca:81:aa:8f:d7:5c:57:72:d6:d7:d2: 4c:fb:73:e0:ed:da:bf:d4:a3:03:b5:56:b1:8b:3a:08:84:ea: 94:db:58:02:2e:f3:91:65:48:4f:c4:ad:4d:ee:f0:63:43:39: 3f:ec:b5:55:56:56:44:c6:40:9f:65:26:15:ed:71:8a:3f:02: 0e:2f:85:e8:c7:09:f0:a5:d4:9c:89:ac:51:88:75:3d:ef:3c: 8f:df:bd:c6:e4:90:e9:2d:9e:e5:74:ff:d1:b7:6e:8b:1f:58: a0:2e:9b:20:d7:ef:ac:2c:d4:d6:c1:fe:87:77:a2:19:1b:1d: 0f:86:ed:d8:e5:8b:dc:5a:56:89:9b:09:f2:d6:c8:ef:6c:52: 57:90:c7:5b:35:72:0e:59:07:fe:44:cb:ea:1f:77:e4:8f:9a: 1d:6a:71:53:60:66:c1:80:b2:12:39:b0:d9:34:ef:56:c6:d0: 38:15:f6:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6rKl1yuFn+ADsrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk MzZlMjQ0ZmMtODgxZi00Y2IwLTkyNjctNDc5NWU0ZDZiMTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+trokghHfEeEPaOYTi97QRObYbYs4lRAQDh fOXcs4chhdacgCnBhGawzJPe3/MaSLYfKZDbhtsN5pVYO/KBg68pr1Z5XIzc0A5a Ao8vjXOzva9QGcP3T/8x5LUEZB2hdLD8wNu2Rz9XqYf0KMQ9oCT6VrvIaAPfiAMJ niAQGoTVD+lzT++5rVKr7aRflM5IxeTERyhos5ChEfqyZEtRIyvGZ2wrLg0OKyOI SBUSVanCpSFUdfcqlAuZkKlXBWunKN5uRPOXF5O3mKjv8xnMJPGxfqTNDJXxsSHb pOYw+/8+MKBF6SJeLEKdoTKNeNE2Rm/chWfA8a1s3et1uQG99QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtCxx/X63QcQNsRIle3nn13QNKPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGU1YThmYTgtNWE1MC0z ZDk2LWJlMTctMTIzNmM2OTg0YzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErv7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlOnsEUF3Q6SPDb7MmEu0D6D3cLTPGVnYzXDjREx8gqA3Xlj4YqKUT4 eA24tIleg9MWLdI+e5zvrNuRITAh6BYEnlrhsFIWt/j4pwhbQU7KgaqP11xXctbX 0kz7c+Dt2r/UowO1VrGLOgiE6pTbWAIu85FlSE/ErU3u8GNDOT/stVVWVkTGQJ9l JhXtcYo/Ag4vhejHCfCl1JyJrFGIdT3vPI/fvcbkkOktnuV0/9G3bosfWKAumyDX 76ws1NbB/od3ohkbHQ+G7djli9xaVombCfLWyO9sUleQx1s1cg5ZB/5Ey+ofd+SP mh1qcVNgZsGAshI5sNk071bG0DgV9tU= -----END CERTIFICATE-----Generated at Mon Apr 13 17:18:24 2026 by rpki-client