$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4d9141e-9370-3aa5-a129-89edc3ad7d6a.roa File: c4d9141e-9370-3aa5-a129-89edc3ad7d6a.roa (raw, json) Hash identifier: FF8ddKMpUisUP1yEdpwwXPxuGL/B1Vz0VX10dLnxp1s= Subject key identifier: C3:CA:EB:48:74:61:22:F7:10:0B:62:AA:78:B6:0F:D5:51:1A:D5:B9 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584ED00206A1351E74F5324F6040 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4d9141e-9370-3aa5-a129-89edc3ad7d6a.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 6167 IP address blocks: 174.43.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:02:06:a1:35:1e:74:f5:32:4f:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=1f5aa739-09cc-4d41-bed8-cc662e272fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7b:99:f5:1c:5c:dd:37:01:3e:10:ea:4d:68: 0c:ac:c3:b3:a7:73:84:67:11:86:8e:17:6f:ed:4d: 7f:06:e9:69:f8:62:f0:99:c0:01:8e:ad:99:65:21: 79:ff:72:82:95:c7:11:bb:ed:e2:bc:09:78:cc:88: dd:18:08:fa:1b:a7:03:f7:9b:82:71:8e:53:70:25: e7:42:b0:19:ee:53:23:6c:48:ba:8f:40:f9:b9:78: 6e:31:c3:71:a3:67:af:3c:af:d9:4f:a2:07:f4:75: be:23:ad:cf:b2:62:da:a8:e4:89:0c:fc:82:2e:1b: 71:db:1b:fe:8d:c6:2f:9a:1a:7c:74:87:84:49:25: 2e:1a:36:6a:7a:c7:0d:f3:66:63:6a:73:cc:50:e0: aa:5e:97:b7:94:50:99:8b:d8:47:da:13:8f:62:0e: 38:31:e1:ed:fd:ef:d1:13:13:9d:39:d5:ee:8a:6e: 1a:8a:b8:20:ef:c2:e1:c4:95:e4:69:f8:4a:e2:dd: 0f:56:13:e9:a8:2c:9e:e8:0c:98:db:7c:e2:ab:5a: eb:ed:0c:fa:5b:a7:bc:6d:a6:fa:58:00:12:0b:92: da:90:32:5f:05:da:4d:74:31:bc:43:38:50:b0:2f: 64:c4:45:0b:14:4d:54:e5:17:89:0d:62:06:1f:38: f1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CA:EB:48:74:61:22:F7:10:0B:62:AA:78:B6:0F:D5:51:1A:D5:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c4d9141e-9370-3aa5-a129-89edc3ad7d6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.43.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:16:81:43:40:f6:f1:55:00:80:88:bf:76:e8:6d:ab:f2:40: ca:d2:92:43:34:29:92:09:2a:a0:f1:bb:57:59:2c:35:a9:17: 3d:9d:38:28:46:c3:09:c9:46:33:8a:98:d8:84:16:3a:d8:58: bd:2f:eb:83:a8:b2:c3:f6:37:47:91:fa:56:1d:13:77:9c:c8: 00:ef:9e:b8:98:66:84:9c:61:27:e5:89:5c:23:00:e0:5a:41: 9d:4f:d6:fd:4b:9e:ef:5f:90:7c:3d:de:4b:dd:fb:c3:d0:8a: 5b:0e:0d:27:39:28:0f:3b:f9:61:ef:06:05:7e:89:31:b8:5d: a4:e2:8a:68:77:65:f0:4b:66:83:c8:f5:ee:3c:a2:08:3a:ac: 1b:b2:88:7c:bf:81:1c:fe:63:35:33:5a:35:23:7a:3d:47:55: bf:f7:0f:86:d2:e7:6d:1c:ae:c3:8f:c7:1b:89:60:58:f4:75: 64:b4:75:14:22:96:df:a1:bc:b9:c6:7f:6a:6b:00:fe:93:5b: 3b:91:1b:bc:7b:e9:cc:c0:42:d0:aa:f1:c5:ae:c3:af:2e:13: 63:75:68:7e:dd:8a:a3:f4:ce:38:2a:9b:dc:43:0f:2d:be:09: b2:8f:e9:e3:c6:84:37:a5:fe:5b:a4:ab:f0:f7:75:a8:99:39: 6d:71:af:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAgahNR509TJPYEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk MWY1YWE3MzktMDljYy00ZDQxLWJlZDgtY2M2NjJlMjcyZmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXuZ9Rxc3TcBPhDqTWgMrMOzp3OEZxGGjhdv 7U1/Bulp+GLwmcABjq2ZZSF5/3KClccRu+3ivAl4zIjdGAj6G6cD95uCcY5TcCXn QrAZ7lMjbEi6j0D5uXhuMcNxo2evPK/ZT6IH9HW+I63PsmLaqOSJDPyCLhtx2xv+ jcYvmhp8dIeESSUuGjZqescN82ZjanPMUOCqXpe3lFCZi9hH2hOPYg44MeHt/e/R ExOdOdXuim4airgg78LhxJXkafhK4t0PVhPpqCye6AyY23ziq1rr7Qz6W6e8bab6 WAASC5LakDJfBdpNdDG8QzhQsC9kxEULFE1U5ReJDWIGHzjxowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPK60h0YSL3EAtiqni2D9VRGtW5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzRkOTE0MWUtOTM3MC0z YWE1LWExMjktODllZGMzYWQ3ZDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEritgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0WgUNA9vFVAICIv3bobavyQMrSkkM0KZIJKqDxu1dZLDWpFz2dOChG wwnJRjOKmNiEFjrYWL0v64OossP2N0eR+lYdE3ecyADvnriYZoScYSfliVwjAOBa QZ1P1v1Lnu9fkHw93kvd+8PQilsODSc5KA87+WHvBgV+iTG4XaTiimh3ZfBLZoPI 9e48ogg6rBuyiHy/gRz+YzUzWjUjej1HVb/3D4bS520crsOPxxuJYFj0dWS0dRQi lt+hvLnGf2prAP6TWzuRG7x76czAQtCq8cWuw68uE2N1aH7diqP0zjgqm9xDDy2+ CbKP6ePGhDel/lukq/D3daiZOW1xr18= -----END CERTIFICATE-----Generated at Thu Aug 27 22:49:28 2026 by rpki-client