$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0438900c-039e-3fc8-9a9f-0af3e8d14e25.roa File: 0438900c-039e-3fc8-9a9f-0af3e8d14e25.roa (raw, json) Hash identifier: Jkc2jDcmjObtxwXdI8d+MYROEbquk5Q9QI0qZAMuFv0= Subject key identifier: 37:8E:46:F3:F8:B7:98:90:F1:BF:35:EF:F8:04:5E:0C:80:D9:E2:73 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584E2809B6A978A8D643F931D540 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0438900c-039e-3fc8-9a9f-0af3e8d14e25.roa Signing time: Sat 13 Jun 2026 09:00:12 +0000 ROA not before: Sat 13 Jun 2026 09:00:12 +0000 ROA not after: Fri 11 Sep 2026 09:00:12 +0000 asID: 6167 IP address blocks: 174.247.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:28:09:b6:a9:78:a8:d6:43:f9:31:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 13 09:00:12 2026 GMT Not After : Sep 11 09:00:12 2026 GMT Subject: CN=393fda73-50c3-49bb-a4d8-a77f93c200e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:cc:20:e7:a4:6a:76:f3:09:40:85:18:d0:03: 45:96:9b:95:67:69:7b:24:63:ed:79:47:35:a6:e7: 33:fc:c8:27:5f:dc:e1:f8:7e:6a:47:a6:fa:fe:ad: d9:6c:83:f1:9d:c7:24:de:9f:5a:85:f7:0a:dc:8a: bf:5d:2b:8c:f9:c8:d5:fb:c8:af:6f:b5:57:91:66: 6c:8b:bd:a6:20:04:78:4c:0b:aa:bf:09:15:00:95: f4:56:f8:31:56:99:5f:23:03:e4:fb:5f:4d:45:c0: 50:05:27:2f:74:ca:f3:d3:d1:90:85:0f:cf:e4:42: 00:91:35:a8:f1:0c:f0:16:a4:39:d0:4d:cf:76:2d: ce:ab:7b:76:11:50:08:9e:03:1c:0c:10:38:34:03: d7:26:d3:64:67:82:2a:24:7c:db:60:c6:25:9d:df: 02:ae:8c:91:2a:60:e6:8c:03:a8:af:af:21:32:2a: fc:51:3b:17:87:6a:3f:7b:db:01:e7:ee:a9:8a:77: de:00:55:3c:a7:ba:5c:3a:01:d6:43:f9:a2:00:33: 12:8b:20:19:3c:dc:62:eb:7b:79:cb:85:d5:cb:24: 5b:5a:99:ff:1f:2d:a8:cf:16:fc:fe:93:a7:23:58: f1:e2:4c:f0:ec:e9:bb:37:76:9a:22:6e:2f:d7:28: e0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:8E:46:F3:F8:B7:98:90:F1:BF:35:EF:F8:04:5E:0C:80:D9:E2:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0438900c-039e-3fc8-9a9f-0af3e8d14e25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.247.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:f9:42:73:60:10:33:00:0d:41:e9:ab:01:2a:11:df:cc:82: 30:36:0a:5d:88:15:52:6e:8e:2f:8f:d6:ef:14:9d:e4:bc:28: ef:d9:b8:8c:01:12:0a:7d:c9:48:11:2c:93:85:5e:2d:49:e2: 5e:cd:a9:a6:8d:88:4b:88:c5:39:ce:64:60:a0:11:dc:7b:05: 0f:17:55:c1:30:82:05:53:a3:1c:31:c6:8b:22:bf:aa:b9:bc: 13:5a:6b:27:5f:19:74:d5:b9:b1:70:69:f6:47:57:d8:99:28: 96:d3:ed:d0:02:2d:18:6b:a1:14:5a:79:67:d2:be:c2:e8:d6: 16:bf:0a:78:e4:70:2d:6a:fe:db:45:d8:27:87:61:2f:03:62: 57:3b:90:7e:90:0c:8f:a6:40:a1:c6:10:13:ab:fd:be:3b:80: 96:aa:3f:08:3e:ae:0a:1f:85:fa:65:5e:95:b5:d1:b3:c9:ea: db:0f:84:ba:66:be:df:bd:3e:51:4d:3f:a8:bf:ce:41:20:f9: 0b:f4:ef:47:6a:ae:5e:39:5a:1a:d2:36:e8:f3:31:bf:09:24: ba:e3:8c:80:39:16:47:c2:9e:30:d5:68:3a:ba:f1:17:f0:9f: cf:18:1f:39:ee:2f:60:9c:a0:bd:65:8c:59:31:48:50:cf:c7: 7a:77:01:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4oCbapeKjWQ/kx1UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDYxMzA5MDAxMloXDTI2MDkxMTA5MDAxMlowLzEtMCsGA1UEAxMk MzkzZmRhNzMtNTBjMy00OWJiLWE0ZDgtYTc3ZjkzYzIwMGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhswg56RqdvMJQIUY0ANFlpuVZ2l7JGPteUc1 pucz/MgnX9zh+H5qR6b6/q3ZbIPxncck3p9ahfcK3Iq/XSuM+cjV+8ivb7VXkWZs i72mIAR4TAuqvwkVAJX0VvgxVplfIwPk+19NRcBQBScvdMrz09GQhQ/P5EIAkTWo 8QzwFqQ50E3Pdi3Oq3t2EVAIngMcDBA4NAPXJtNkZ4IqJHzbYMYlnd8CroyRKmDm jAOor68hMir8UTsXh2o/e9sB5+6pinfeAFU8p7pcOgHWQ/miADMSiyAZPNxi63t5 y4XVyyRbWpn/Hy2ozxb8/pOnI1jx4kzw7Om7N3aaIm4v1yjgdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeORvP4t5iQ8b817/gEXgyA2eJzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMDQzODkwMGMtMDM5ZS0z ZmM4LTlhOWYtMGFmM2U4ZDE0ZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrvc4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALL5QnNgEDMADUHpqwEqEd/MgjA2Cl2IFVJuji+P1u8UneS8KO/ZuIwB Egp9yUgRLJOFXi1J4l7NqaaNiEuIxTnOZGCgEdx7BQ8XVcEwggVToxwxxosiv6q5 vBNaaydfGXTVubFwafZHV9iZKJbT7dACLRhroRRaeWfSvsLo1ha/CnjkcC1q/ttF 2CeHYS8DYlc7kH6QDI+mQKHGEBOr/b47gJaqPwg+rgofhfplXpW10bPJ6tsPhLpm vt+9PlFNP6i/zkEg+Qv070dqrl45WhrSNujzMb8JJLrjjIA5FkfCnjDVaDq68Rfw n88YHznuL2CcoL1ljFkxSFDPx3p3AVg= -----END CERTIFICATE-----Generated at Sat Jun 13 20:53:37 2026 by rpki-client