$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa4a2299-f3e0-3a68-b692-7689970f1f7a.roa File: aa4a2299-f3e0-3a68-b692-7689970f1f7a.roa (raw, json) Hash identifier: WpfSMIm53zakVXhnk9RBiFgKfctp/NKPXl0hmhVq/Ws= Subject key identifier: 82:C2:5D:22:64:F4:77:16:B1:14:AC:9D:EA:1F:CD:20:BE:38:40:A8 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D4D5A8358B52D96378D83E540 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa4a2299-f3e0-3a68-b692-7689970f1f7a.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 6167 IP address blocks: 174.42.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:83:58:b5:2d:96:37:8d:83:e5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=4722f729-9b66-4823-9d7a-6f432524336f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:54:15:ce:d4:95:71:a3:86:53:3a:41:5b:88: c6:f6:73:ae:05:48:0b:8e:90:c5:6b:a1:10:36:87: f5:8b:f2:a9:70:10:3a:2a:5d:6d:76:cb:52:7e:ee: f4:8a:8a:ef:ba:33:19:b1:5a:b6:ad:f0:63:09:4a: 10:0e:19:ef:b4:b4:76:59:bd:5c:11:49:07:0b:e3: 22:7f:24:69:9c:f2:04:dd:e5:9d:b5:24:b7:b7:9e: 69:ab:8f:9e:f8:04:7a:72:54:a8:ed:48:c2:ed:38: 8d:07:3b:ef:ba:a6:fe:2f:0b:08:a2:ec:b6:21:50: 34:73:45:ab:11:77:bf:0b:25:ef:1e:bd:4e:18:9f: 17:d2:00:ff:28:c7:b6:17:f5:24:4f:0e:db:5b:be: 99:44:d7:75:67:3d:96:7f:75:77:40:1e:bf:36:61: a7:8b:cd:74:90:11:16:4a:6b:b3:e3:ce:62:91:71: 5f:92:2e:61:58:3f:6f:aa:31:17:a5:14:67:ad:e5: 68:00:0e:af:d1:7b:b4:15:be:5e:00:b0:2c:a2:20: 34:f9:00:19:b3:4d:47:a6:20:e3:34:4d:00:85:e2: 78:a3:2a:6a:da:bb:3d:d1:09:43:88:4e:25:b2:e2: 50:7c:0a:58:40:4b:f4:a2:1e:aa:1b:97:35:46:ad: 95:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C2:5D:22:64:F4:77:16:B1:14:AC:9D:EA:1F:CD:20:BE:38:40:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa4a2299-f3e0-3a68-b692-7689970f1f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.42.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:fc:ee:8b:19:b3:7b:14:9b:4c:76:b7:9c:01:b5:02:46:f9: e5:67:6c:5e:a3:df:2d:35:74:4c:c9:dd:7c:79:4f:53:56:f7: 8a:4d:6c:4f:1b:65:7a:42:b0:01:2d:75:fa:c8:11:b2:3f:ee: 28:db:2a:41:4a:d2:b0:8f:2f:a5:98:07:08:ec:5c:77:63:2b: 0c:f8:1e:b1:00:34:ee:7a:5a:79:f0:d8:35:f2:de:8e:74:99: b6:a7:25:e6:a0:f3:e2:84:5d:2c:52:e9:68:ba:12:c0:5f:03: cf:f5:c5:c5:4c:94:e2:13:44:3b:ac:d5:cc:67:4b:27:38:3f: 27:05:b1:10:d8:7b:7a:d2:f9:29:99:80:ca:ae:72:fc:df:df: 8a:29:a1:2e:b1:74:23:3b:9c:d8:3c:c2:90:de:21:45:90:53: 42:02:2b:1c:ae:24:11:d8:03:d3:42:17:b3:1e:52:d4:b3:2d: d4:53:5c:24:d9:bd:dd:6f:bf:00:7b:25:51:61:17:54:61:92: d8:91:54:af:17:e0:88:b1:3e:5e:4a:06:0d:34:50:41:23:4c: 0d:b7:70:e9:c5:bf:b0:97:64:25:d6:d8:e5:e4:95:0c:6b:00: 79:b5:c8:a1:cd:d7:0e:94:6e:79:e5:76:22:af:0a:78:9f:0f: ec:f8:7a:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWoNYtS2WN42D5UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk NDcyMmY3MjktOWI2Ni00ODIzLTlkN2EtNmY0MzI1MjQzMzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFQVztSVcaOGUzpBW4jG9nOuBUgLjpDFa6EQ Nof1i/KpcBA6Kl1tdstSfu70iorvujMZsVq2rfBjCUoQDhnvtLR2Wb1cEUkHC+Mi fyRpnPIE3eWdtSS3t55pq4+e+AR6clSo7UjC7TiNBzvvuqb+LwsIouy2IVA0c0Wr EXe/CyXvHr1OGJ8X0gD/KMe2F/UkTw7bW76ZRNd1Zz2Wf3V3QB6/NmGni810kBEW Smuz485ikXFfki5hWD9vqjEXpRRnreVoAA6v0Xu0Fb5eALAsoiA0+QAZs01HpiDj NE0AheJ4oypq2rs90QlDiE4lsuJQfApYQEv0oh6qG5c1Rq2VVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILCXSJk9HcWsRSsneofzSC+OECoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWE0YTIyOTktZjNlMC0z YTY4LWI2OTItNzY4OTk3MGYxZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCriocMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGz87osZs3sUm0x2t5wBtQJG+eVnbF6j3y01dEzJ3Xx5T1NW94pNbE8b ZXpCsAEtdfrIEbI/7ijbKkFK0rCPL6WYBwjsXHdjKwz4HrEANO56Wnnw2DXy3o50 mbanJeag8+KEXSxS6Wi6EsBfA8/1xcVMlOITRDus1cxnSyc4PycFsRDYe3rS+SmZ gMqucvzf34opoS6xdCM7nNg8wpDeIUWQU0ICKxyuJBHYA9NCF7MeUtSzLdRTXCTZ vd1vvwB7JVFhF1RhktiRVK8X4IixPl5KBg00UEEjTA23cOnFv7CXZCXW2OXklQxr AHm1yKHN1w6UbnnldiKvCnifD+z4euQ= -----END CERTIFICATE-----Generated at Mon Apr 13 17:21:52 2026 by rpki-client