$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f4320125-88f6-3770-a9d9-1df746388c80.roa File: f4320125-88f6-3770-a9d9-1df746388c80.roa (raw, json) Hash identifier: Qm2jd01ZA8TpOf1AEYDQnW1ym9CD/1MuBGCWDZLN9kw= Subject key identifier: 9F:10:8B:0B:59:FF:AE:82:02:42:0C:0F:7A:0A:D8:C9:CF:96:AE:AD Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584ED001FEC713D2DEE95F881A70 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f4320125-88f6-3770-a9d9-1df746388c80.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 6167 IP address blocks: 174.42.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:fe:c7:13:d2:de:e9:5f:88:1a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=66b76a59-b98d-408b-ad00-374248d388ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:31:eb:91:31:14:96:17:d1:3c:81:ac:bd:ec: 30:2f:45:a3:6c:af:81:fc:90:be:26:a1:90:4a:a0: 41:4f:62:fa:7b:4f:98:95:5a:35:a9:4f:ba:61:cf: f3:c4:70:07:1e:5e:37:c7:71:69:31:2c:0e:ee:26: 6f:88:36:90:82:a9:e9:75:55:35:87:2a:01:c2:38: 65:5d:f1:e2:df:03:47:95:68:bd:c0:98:8e:11:75: 8a:be:31:55:85:d1:9b:68:7b:67:db:3c:33:cc:b8: e5:c3:a7:42:da:ed:e4:fb:84:fd:49:f3:d7:21:a1: 29:08:24:33:65:f2:d3:57:b3:ef:6a:2c:a5:a7:51: a9:df:a6:89:e4:46:85:af:af:9a:b1:c9:20:1c:ae: 03:37:54:24:8b:41:b9:5f:a1:dc:bc:28:18:7d:9c: 75:0b:bb:9e:0a:ac:18:3b:56:c5:5c:70:ce:07:fa: 8b:99:52:74:16:16:cc:49:c6:ab:0b:8a:a3:77:e9: 84:3f:ae:29:d8:0c:9e:8e:f8:c9:9d:c7:ce:b0:0b: c3:07:8f:57:f4:ce:a3:e2:da:90:3f:14:96:41:06: f0:f8:e9:0f:80:78:bc:38:91:09:46:7a:80:47:d7: bb:d1:1c:a7:da:27:32:f0:ff:b7:1f:65:97:81:be: 48:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:10:8B:0B:59:FF:AE:82:02:42:0C:0F:7A:0A:D8:C9:CF:96:AE:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f4320125-88f6-3770-a9d9-1df746388c80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.42.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:7a:b0:ee:f3:7f:0d:88:e9:42:ea:42:79:94:5e:d9:7a:bd: 10:ec:7f:70:c1:3a:f5:8c:1d:b9:62:1f:95:89:58:44:12:83: 0a:1f:dc:62:0a:8e:fc:70:c6:25:a3:ac:8b:89:e9:39:8d:51: 9e:e8:c7:8f:88:fd:9f:46:09:78:83:9d:ea:58:3c:0d:e6:9b: 97:96:ed:11:58:a8:f6:a6:61:2a:b4:0d:da:91:a5:d3:87:e5: f5:6e:39:40:9f:d7:56:d9:2e:cc:fe:0d:0c:cb:16:0d:45:cf: c4:77:ce:ed:c7:7d:4e:ca:22:18:72:97:d4:6b:0f:4a:39:c5: e5:71:16:f1:eb:2d:d9:df:71:94:8a:39:11:fb:f3:73:0b:14: 0a:63:27:62:65:3c:2a:e8:d3:3c:cd:ec:e5:98:eb:77:76:b9: a2:94:5f:ca:f3:62:75:92:66:46:97:0d:b5:32:56:86:7b:d3: 02:46:1b:fa:92:5b:3c:0b:2d:84:0f:d8:48:15:a7:49:d4:39: 9e:7a:7e:35:88:54:ca:2b:f5:ef:80:3b:46:45:b2:86:c3:11: 7d:13:79:ba:2a:9b:0b:31:a4:0d:17:c1:10:b4:a0:b8:39:b0: 79:51:69:7d:c6:5d:b8:9f:51:71:97:6a:a9:15:5a:1b:bf:df: 84:2b:1e:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAf7HE9Le6V+IGnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk NjZiNzZhNTktYjk4ZC00MDhiLWFkMDAtMzc0MjQ4ZDM4OGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jHrkTEUlhfRPIGsvewwL0WjbK+B/JC+JqGQ SqBBT2L6e0+YlVo1qU+6Yc/zxHAHHl43x3FpMSwO7iZviDaQgqnpdVU1hyoBwjhl XfHi3wNHlWi9wJiOEXWKvjFVhdGbaHtn2zwzzLjlw6dC2u3k+4T9SfPXIaEpCCQz ZfLTV7Pvaiylp1Gp36aJ5EaFr6+asckgHK4DN1Qki0G5X6HcvCgYfZx1C7ueCqwY O1bFXHDOB/qLmVJ0FhbMScarC4qjd+mEP64p2AyejvjJncfOsAvDB49X9M6j4tqQ PxSWQQbw+OkPgHi8OJEJRnqAR9e70Ryn2icy8P+3H2WXgb5I8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8QiwtZ/66CAkIMD3oK2MnPlq6tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjQzMjAxMjUtODhmNi0z NzcwLWE5ZDktMWRmNzQ2Mzg4YzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCriqYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFV6sO7zfw2I6ULqQnmUXtl6vRDsf3DBOvWMHbliH5WJWEQSgwof3GIK jvxwxiWjrIuJ6TmNUZ7ox4+I/Z9GCXiDnepYPA3mm5eW7RFYqPamYSq0DdqRpdOH 5fVuOUCf11bZLsz+DQzLFg1Fz8R3zu3HfU7KIhhyl9RrD0o5xeVxFvHrLdnfcZSK ORH783MLFApjJ2JlPCro0zzN7OWY63d2uaKUX8rzYnWSZkaXDbUyVoZ70wJGG/qS WzwLLYQP2EgVp0nUOZ56fjWIVMor9e+AO0ZFsobDEX0TeboqmwsxpA0XwRC0oLg5 sHlRaX3GXbifUXGXaqkVWhu/34QrHrA= -----END CERTIFICATE-----Generated at Sat Aug 22 10:22:43 2026 by rpki-client