$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a238c617-d277-3d4a-92d0-4ab2790ecee4.roa File: a238c617-d277-3d4a-92d0-4ab2790ecee4.roa (raw, json) Hash identifier: cbU/R2/Tc+1AwizzY0SZ8JXnAQOVTSsSLokreL9H9bE= Subject key identifier: 2A:86:01:A9:65:BC:DC:A3:9C:53:28:DA:9E:83:0A:F6:8A:5E:B2:2C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F5FC80663940563A191AD5B40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a238c617-d277-3d4a-92d0-4ab2790ecee4.roa Signing time: Sat 03 Oct 2026 01:00:12 +0000 ROA not before: Sat 03 Oct 2026 01:00:12 +0000 ROA not after: Fri 01 Jan 2027 02:00:12 +0000 asID: 6167 IP address blocks: 174.217.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5f:c8:06:63:94:05:63:a1:91:ad:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 3 01:00:12 2026 GMT Not After : Jan 1 02:00:12 2027 GMT Subject: CN=0e07a2b4-acb0-4b27-96c2-2a7edef24ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1f:13:89:51:ff:89:1c:0f:a6:3e:d5:f6:c6: c5:e4:f9:0b:b3:9b:9c:06:e4:66:fa:8e:6e:a6:0b: 3b:08:05:d6:ef:77:c9:6e:13:fd:b0:4e:46:f9:9a: 8f:40:57:5f:0a:0c:42:1a:d1:1b:f7:5e:23:af:d7: 46:73:7a:3f:f7:aa:38:89:11:93:f1:43:ad:3e:d5: 38:16:b4:b6:4e:13:f0:2f:c9:a0:84:e6:a4:71:ce: 78:a1:06:86:6a:61:87:bc:98:eb:87:2a:1a:66:bf: 50:a5:32:57:fc:71:31:c6:5c:32:8f:99:a3:02:67: cd:bc:cf:65:9e:62:34:cb:86:af:86:9e:91:00:f1: fd:70:50:ac:62:33:55:0c:29:03:65:d1:10:c7:a1: 70:05:40:4e:28:c1:4a:ba:e3:7b:81:2c:ca:f3:d1: 64:d2:ec:38:05:a9:0f:e4:4c:89:aa:35:54:a2:3b: 54:cf:a2:72:d2:f0:e8:c6:e8:00:e5:0c:35:79:9f: 25:8a:6f:93:f7:5e:07:7f:f4:d2:49:91:78:a6:15: c8:ab:51:93:d9:e9:51:f7:2a:de:33:db:a0:59:30: 3f:c1:cf:90:3f:02:32:46:21:c6:14:15:2f:c2:24: 46:af:be:b6:6a:de:70:f7:51:c6:9a:26:38:a1:93: e5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:86:01:A9:65:BC:DC:A3:9C:53:28:DA:9E:83:0A:F6:8A:5E:B2:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a238c617-d277-3d4a-92d0-4ab2790ecee4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.217.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:0a:be:d2:1c:6b:dd:7b:43:34:02:e6:8e:2e:fc:8e:d0:9b: b7:e0:57:57:dd:89:49:14:61:9e:5e:2b:d7:4d:30:fe:bd:c6: 33:d8:7b:ca:d2:98:a4:4a:94:b8:66:3d:6e:0a:8c:af:42:1b: 5c:8f:ba:db:b4:a3:45:01:ec:ca:91:cf:77:b7:b4:87:a2:d5: 76:61:a3:d2:52:59:e5:d7:ae:56:8f:84:6b:df:01:97:a7:73: a5:f1:ef:25:93:19:5e:05:ba:4b:d6:c3:e7:df:6c:8a:81:1a: 88:57:07:92:57:ad:95:a2:ee:a6:56:0a:1e:81:4b:7e:8d:51: 8b:08:41:e7:42:27:4a:0e:cd:e5:7f:b1:91:a6:df:ce:2b:6f: 5d:11:8d:8d:86:2d:58:d4:d9:85:bf:9d:3d:5e:be:cb:32:d9: dc:85:9a:30:14:d6:47:d4:2b:e9:45:cb:a0:85:8f:2a:e4:2e: 9a:fd:b2:88:eb:61:3e:93:40:73:45:db:1a:5b:b9:22:5d:7c: 77:b6:23:12:17:88:34:b6:94:27:83:4b:c6:4f:41:69:0b:02: c0:2e:97:4a:9c:f8:24:ac:70:c8:8e:76:c5:55:f4:c8:bf:b1: 0f:8d:9b:19:76:7c:7e:4a:e3:b1:21:39:ba:df:f6:f8:84:e9: 21:bb:91:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9fyAZjlAVjoZGtW0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAwMzAxMDAxMloXDTI3MDEwMTAyMDAxMlowLzEtMCsGA1UEAxMk MGUwN2EyYjQtYWNiMC00YjI3LTk2YzItMmE3ZWRlZjI0ZWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh8TiVH/iRwPpj7V9sbF5PkLs5ucBuRm+o5u pgs7CAXW73fJbhP9sE5G+ZqPQFdfCgxCGtEb914jr9dGc3o/96o4iRGT8UOtPtU4 FrS2ThPwL8mghOakcc54oQaGamGHvJjrhyoaZr9QpTJX/HExxlwyj5mjAmfNvM9l nmI0y4avhp6RAPH9cFCsYjNVDCkDZdEQx6FwBUBOKMFKuuN7gSzK89Fk0uw4BakP 5EyJqjVUojtUz6Jy0vDoxugA5Qw1eZ8lim+T914Hf/TSSZF4phXIq1GT2elR9yre M9ugWTA/wc+QPwIyRiHGFBUvwiRGr762at5w91HGmiY4oZPl+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqGAallvNyjnFMo2p6DCvaKXrIsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTIzOGM2MTctZDI3Ny0z ZDRhLTkyZDAtNGFiMjc5MGVjZWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEKvtIca917QzQC5o4u/I7Qm7fgV1fdiUkUYZ5eK9dNMP69xjPYe8rS mKRKlLhmPW4KjK9CG1yPutu0o0UB7MqRz3e3tIei1XZho9JSWeXXrlaPhGvfAZen c6Xx7yWTGV4FukvWw+ffbIqBGohXB5JXrZWi7qZWCh6BS36NUYsIQedCJ0oOzeV/ sZGm384rb10RjY2GLVjU2YW/nT1evssy2dyFmjAU1kfUK+lFy6CFjyrkLpr9sojr YT6TQHNF2xpbuSJdfHe2IxIXiDS2lCeDS8ZPQWkLAsAul0qc+CSscMiOdsVV9Mi/ sQ+Nmxl2fH5K47EhObrf9viE6SG7kSE= -----END CERTIFICATE-----Generated at Tue Oct 13 20:51:20 2026 by rpki-client