$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3389cdc1-931e-3e0a-ad81-8498b69081e2.roa File: 3389cdc1-931e-3e0a-ad81-8498b69081e2.roa (raw, json) Hash identifier: YX053Khp3EJq0hNJkWahqMWgm+pbHZVJj51AcDTurWQ= Subject key identifier: 44:7E:6D:61:0D:5C:7E:FA:2F:D1:0E:3E:D1:06:36:7C:59:C2:9D:65 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D74700473D42373779D453F80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3389cdc1-931e-3e0a-ad81-8498b69081e2.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 701 IP address blocks: 173.59.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:70:04:73:d4:23:73:77:9d:45:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=70bee073-54d4-4866-900c-e2e58586b749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:79:dc:16:eb:fd:38:27:9e:cc:fd:e4:db:37: eb:08:fe:8a:c3:76:90:82:dd:48:b8:54:a6:6f:36: b0:e3:8c:fe:82:27:98:02:0b:bf:63:5f:cb:d8:3b: 25:19:fd:b0:87:04:62:ed:f4:f2:87:80:75:a3:6c: 4e:c9:fc:a3:7b:5f:5f:6f:41:46:36:b7:3e:03:f0: 04:ee:08:39:31:3d:e7:f7:73:b4:43:43:9d:c7:2a: 8f:d3:7b:43:8a:7e:6b:36:e6:f4:0b:2c:53:7e:5d: 81:9f:5c:ad:3d:d0:da:82:71:59:0d:1c:7b:9e:8c: ca:7c:16:bf:26:8a:fd:c7:7b:bb:0f:e5:8b:64:e8: d9:73:66:7b:14:e1:0a:e2:4b:24:e9:f9:cf:f2:04: 97:86:dd:6f:3f:d2:de:2e:6f:39:64:66:30:c7:3d: b0:a9:9f:f6:10:46:03:21:92:0e:92:d7:32:34:81: 8e:02:24:8b:81:53:31:56:95:de:1d:bd:3c:c3:07: 8e:f1:ff:1f:dc:d1:d0:8b:6d:fb:7d:9f:aa:64:7e: 6c:e9:b4:3f:09:f1:94:17:c8:40:14:ee:f2:b2:c1: 7c:5e:9f:93:81:86:e0:ee:a4:39:59:69:7a:87:b4: e1:3d:75:fc:0c:1f:eb:63:0c:75:8b:e0:38:cb:ce: 83:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:7E:6D:61:0D:5C:7E:FA:2F:D1:0E:3E:D1:06:36:7C:59:C2:9D:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3389cdc1-931e-3e0a-ad81-8498b69081e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 173.59.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:a8:b5:02:d7:6d:59:d0:15:36:35:d1:66:8c:d3:a2:64:12: de:8e:91:09:19:39:ef:eb:04:52:72:69:00:c5:9a:09:85:ea: 14:07:73:ae:65:1a:41:24:26:8c:1b:0b:2b:f8:45:8d:ed:a9: 85:cf:6b:93:70:7e:e8:97:6e:d4:df:0e:7f:96:07:fd:d4:9a: 35:99:da:14:38:bc:25:2b:48:dc:ee:8d:7e:df:05:c0:56:14: 33:37:1e:31:29:7f:32:91:7e:cc:6c:ed:69:92:be:d7:0e:ed: 57:fa:c6:ee:e0:8b:2a:b8:75:e9:f0:b6:9b:fa:1f:0c:5c:5a: 8d:88:9e:16:93:65:29:ef:a6:b6:0a:d8:bc:3e:1c:b7:3e:ac: ca:cc:59:3f:80:30:0f:b5:ce:da:6b:3b:8b:e3:ef:f3:1d:0e: 18:4b:23:c8:00:d1:07:1b:25:71:b9:98:88:bb:8f:cd:97:61: 28:d8:cf:da:fb:06:97:97:67:61:21:7e:c1:e2:97:0a:ab:6c: e3:6a:b9:c7:e7:ad:15:6f:43:ef:6e:a8:a3:21:f4:83:ef:71: c5:c5:9f:6e:7f:81:45:e5:e1:85:6e:27:dc:69:a9:45:62:d8: ed:59:56:93:5e:c2:16:c4:fa:d1:e5:2d:56:21:61:d7:e2:a0: 60:de:0e:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10cARz1CNzd51FP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk NzBiZWUwNzMtNTRkNC00ODY2LTkwMGMtZTJlNTg1ODZiNzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XncFuv9OCeezP3k2zfrCP6Kw3aQgt1IuFSm bzaw44z+gieYAgu/Y1/L2DslGf2whwRi7fTyh4B1o2xOyfyje19fb0FGNrc+A/AE 7gg5MT3n93O0Q0OdxyqP03tDin5rNub0CyxTfl2Bn1ytPdDagnFZDRx7nozKfBa/ Jor9x3u7D+WLZOjZc2Z7FOEK4ksk6fnP8gSXht1vP9LeLm85ZGYwxz2wqZ/2EEYD IZIOktcyNIGOAiSLgVMxVpXeHb08wweO8f8f3NHQi237fZ+qZH5s6bQ/CfGUF8hA FO7yssF8Xp+TgYbg7qQ5WWl6h7ThPXX8DB/rYwx1i+A4y86DXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFER+bWENXH76L9EOPtEGNnxZwp1lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzM4OWNkYzEtOTMxZS0z ZTBhLWFkODEtODQ5OGI2OTA4MWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErTvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqotQLXbVnQFTY10WaM06JkEt6OkQkZOe/rBFJyaQDFmgmF6hQHc65l GkEkJowbCyv4RY3tqYXPa5NwfuiXbtTfDn+WB/3UmjWZ2hQ4vCUrSNzujX7fBcBW FDM3HjEpfzKRfsxs7WmSvtcO7Vf6xu7giyq4denwtpv6HwxcWo2InhaTZSnvprYK 2Lw+HLc+rMrMWT+AMA+1ztprO4vj7/MdDhhLI8gA0QcbJXG5mIi7j82XYSjYz9r7 BpeXZ2EhfsHilwqrbONqucfnrRVvQ+9uqKMh9IPvccXFn25/gUXl4YVuJ9xpqUVi 2O1ZVpNewhbE+tHlLVYhYdfioGDeDm0= -----END CERTIFICATE-----Generated at Fri Apr 17 16:47:21 2026 by rpki-client