$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5a41d72-de62-31af-a776-d58ec1ef355b.roa File: d5a41d72-de62-31af-a776-d58ec1ef355b.roa (raw, json) Hash identifier: /8sugt5HDsDvoWzx/VjEBYERIu9Ki6R8MGU87OVJ82Y= Subject key identifier: E7:7E:41:08:57:5B:51:3E:C9:BF:DD:58:49:DF:9F:D1:7F:EB:F4:12 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D59EA61223C07D0B2F5250E80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5a41d72-de62-31af-a776-d58ec1ef355b.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 6167 IP address blocks: 174.209.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:61:22:3c:07:d0:b2:f5:25:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=8e48ed0d-a725-46d0-a62e-a69f6337d696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5f:d1:03:b8:c0:26:04:54:16:78:a9:7e:41: 16:ac:24:8c:1b:d4:eb:2d:3f:6f:f7:16:d3:ce:78: e7:ed:89:8b:08:08:69:04:24:d8:c1:c8:74:b0:44: cf:c7:65:44:18:55:b0:d1:ff:c2:3c:c3:06:62:d2: 23:bd:d6:e8:56:e8:7c:44:8e:72:7c:a9:ed:1f:4b: d8:5d:70:17:a8:2d:e6:c9:f3:95:29:62:32:46:0c: 2e:91:60:2b:08:0c:18:21:be:be:09:55:85:69:66: b2:42:c2:f8:f5:ad:ee:09:33:f0:75:89:9c:35:3e: d8:3a:d0:01:2d:bd:42:b3:24:9d:f9:08:ae:e1:1f: 2a:02:61:a2:7f:fb:0f:a8:53:de:5b:52:a0:27:81: 9c:c3:d1:bb:66:4c:52:2a:f6:f3:f6:3c:16:cd:6e: 2f:3f:fc:e2:79:66:75:c2:66:9d:81:e9:39:14:55: d8:58:aa:13:d9:48:30:fc:c4:6c:e1:d9:09:dc:00: 6b:70:56:4f:b7:24:17:16:7e:d1:fa:cb:a2:4b:f2: ef:7e:dc:54:9a:10:f6:b8:ed:4e:c0:ae:9e:10:93: 8d:be:8c:54:ed:97:61:2f:36:6f:8c:4b:22:0e:57: b0:ac:6b:b0:30:54:c9:5d:50:7b:50:e5:d9:3a:ce: ff:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:7E:41:08:57:5B:51:3E:C9:BF:DD:58:49:DF:9F:D1:7F:EB:F4:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5a41d72-de62-31af-a776-d58ec1ef355b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.209.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:fc:63:ee:3e:eb:fc:a3:a5:88:cf:fe:26:d2:2b:bc:c1:26: c1:52:d2:02:47:f2:ab:33:2b:4e:b8:c7:87:74:34:fd:e4:bc: f8:c3:e7:02:c4:52:97:3e:61:1a:55:c8:6d:7d:bc:90:b1:22: 41:58:98:f3:81:0c:c5:ad:2c:fc:31:46:4b:ca:85:25:eb:e9: be:ab:2a:27:64:d2:06:1c:b3:e9:d6:59:7c:b9:20:5b:bb:eb: b6:f9:22:7e:83:79:96:fc:b7:19:65:6b:cb:ad:60:79:d2:c6: 6f:ba:df:ea:f5:ee:5d:70:da:00:02:46:5a:f8:64:13:b7:37: ac:28:c6:d5:fe:f9:68:20:1c:c1:d8:ec:dc:32:57:ae:8a:2f: ec:ac:25:97:4a:b0:00:f5:6b:81:0a:6b:ef:09:77:4b:36:aa: 8d:89:56:49:9f:34:af:cc:51:37:93:a2:18:29:01:14:56:79: d7:bc:03:e1:3a:f7:e2:7f:51:55:39:b8:38:92:f2:a0:13:93: 59:d4:34:f9:00:00:79:61:13:00:6c:cf:61:0e:02:34:35:a1: 4d:00:eb:e3:17:9a:2b:88:1a:fe:93:bd:57:65:aa:07:8b:62: e5:2d:90:9f:a9:3d:81:cb:bc:cb:2e:24:91:9e:48:09:f8:e1: 3b:43:06:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6mEiPAfQsvUlDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk OGU0OGVkMGQtYTcyNS00NmQwLWE2MmUtYTY5ZjYzMzdkNjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV/RA7jAJgRUFnipfkEWrCSMG9TrLT9v9xbT znjn7YmLCAhpBCTYwch0sETPx2VEGFWw0f/CPMMGYtIjvdboVuh8RI5yfKntH0vY XXAXqC3myfOVKWIyRgwukWArCAwYIb6+CVWFaWayQsL49a3uCTPwdYmcNT7YOtAB Lb1CsySd+Qiu4R8qAmGif/sPqFPeW1KgJ4Gcw9G7ZkxSKvbz9jwWzW4vP/zieWZ1 wmadgek5FFXYWKoT2Ugw/MRs4dkJ3ABrcFZPtyQXFn7R+suiS/LvftxUmhD2uO1O wK6eEJONvoxU7ZdhLzZvjEsiDlewrGuwMFTJXVB7UOXZOs7/ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOd+QQhXW1E+yb/dWEnfn9F/6/QSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDVhNDFkNzItZGU2Mi0z MWFmLWE3NzYtZDU4ZWMxZWYzNTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADT8Y+4+6/yjpYjP/ibSK7zBJsFS0gJH8qszK064x4d0NP3kvPjD5wLE Upc+YRpVyG19vJCxIkFYmPOBDMWtLPwxRkvKhSXr6b6rKidk0gYcs+nWWXy5IFu7 67b5In6DeZb8txlla8utYHnSxm+63+r17l1w2gACRlr4ZBO3N6woxtX++WggHMHY 7NwyV66KL+ysJZdKsAD1a4EKa+8Jd0s2qo2JVkmfNK/MUTeTohgpARRWede8A+E6 9+J/UVU5uDiS8qATk1nUNPkAAHlhEwBsz2EOAjQ1oU0A6+MXmiuIGv6TvVdlqgeL YuUtkJ+pPYHLvMsuJJGeSAn44TtDBmg= -----END CERTIFICATE-----Generated at Mon Apr 13 17:18:00 2026 by rpki-client