$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fa422b1-6c2f-3cdd-941e-11db0b48a6be.roa File: 3fa422b1-6c2f-3cdd-941e-11db0b48a6be.roa (raw, json) Hash identifier: XhJBT5CiZ22dOtfm7Xh+KExsfu4iuUdHfz/VmeRT6gM= Subject key identifier: 0E:52:FB:41:EF:CC:52:17:AF:09:EA:F2:0E:DB:99:2A:51:93:ED:C4 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584E2809B02B6F6E908308AE1E80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fa422b1-6c2f-3cdd-941e-11db0b48a6be.roa Signing time: Sat 13 Jun 2026 09:00:12 +0000 ROA not before: Sat 13 Jun 2026 09:00:12 +0000 ROA not after: Fri 11 Sep 2026 09:00:12 +0000 asID: 6167 IP address blocks: 174.234.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:28:09:b0:2b:6f:6e:90:83:08:ae:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 13 09:00:12 2026 GMT Not After : Sep 11 09:00:12 2026 GMT Subject: CN=33b395d9-ea4a-4ee2-85a5-0aaeab045c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:94:3d:2b:8a:78:af:b9:df:9b:9c:2e:9e:df: 36:34:16:82:7b:38:be:69:9e:92:46:3c:28:e5:01: 1c:cb:46:83:4b:e2:52:da:ca:c6:e3:ff:ee:79:05: c5:9c:4a:cf:aa:e9:21:a7:63:65:29:6f:35:a2:cd: 8e:58:26:e0:63:86:3e:6b:92:ca:4c:46:2a:c8:6b: 2e:ff:69:f3:f9:4d:15:7b:a1:ef:b2:a7:1e:cd:46: 59:4e:7d:a2:df:7c:38:b2:3e:85:84:b0:a7:98:9c: 7f:92:25:10:27:bd:cd:ef:b3:33:28:55:1d:fc:da: e2:41:ba:42:76:6b:04:46:e1:38:00:fb:49:3c:8d: aa:57:74:58:d5:81:ac:c9:80:99:72:74:0a:e4:09: b3:15:bb:20:2d:68:24:45:27:05:11:79:73:8d:79: 85:a9:2f:e5:ec:54:3f:40:27:0f:24:ea:33:af:45: aa:5d:9b:3b:09:a0:09:b3:16:8a:ea:78:2e:55:5d: f0:50:3a:8c:96:67:26:3d:16:09:65:c9:00:46:9d: 09:75:27:83:b1:19:73:ab:f8:b6:f5:e9:27:61:98: 13:5d:70:0f:0b:50:c3:dc:a3:09:71:d5:f7:a4:6c: 3f:32:8a:33:78:07:72:ef:d7:c0:d2:2f:78:ee:50: df:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:52:FB:41:EF:CC:52:17:AF:09:EA:F2:0E:DB:99:2A:51:93:ED:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fa422b1-6c2f-3cdd-941e-11db0b48a6be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.234.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:28:54:dd:62:4a:fa:66:16:f1:86:05:fa:53:98:6f:12:b3: 16:f8:d4:b4:c1:92:53:ab:b5:0e:6c:4b:85:bf:fa:c3:2a:3b: ec:79:85:1b:f0:2d:4f:76:e0:bf:7c:f6:99:d0:92:e4:3b:78: 5a:c5:f4:d5:46:2f:58:fa:e2:e4:83:1e:16:9a:93:bd:24:a4: c3:a8:83:03:2d:d1:ab:7f:5e:98:ed:f1:36:ad:fa:26:ef:10: 0d:08:7d:38:c7:59:df:0f:ed:10:3e:04:f0:08:b4:22:3c:5a: 7e:08:56:78:9c:ea:89:55:c0:da:65:75:e5:89:2e:c9:74:68: 4e:fc:c5:35:89:98:1b:71:c2:58:9d:ee:5d:33:3a:de:df:d0: 11:ed:2a:11:d8:12:b1:6b:21:bb:43:cf:4c:7a:e2:df:fe:ed: 73:6b:30:65:a5:a3:92:51:e4:33:9b:e1:ca:68:15:34:be:37: 8c:8c:5c:5a:68:c0:a3:c4:e5:15:40:40:12:6a:9d:c5:bb:aa: 26:6d:75:44:b5:bd:55:54:07:b4:7f:16:c0:5a:b7:4a:c4:59: a6:1d:7c:04:27:e2:a8:aa:6a:44:1a:51:ee:d3:62:9a:29:9a: d3:3e:e0:64:07:9c:3d:52:19:05:61:ef:14:33:db:16:46:d9: b2:1d:c4:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4oCbArb26QgwiuHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDYxMzA5MDAxMloXDTI2MDkxMTA5MDAxMlowLzEtMCsGA1UEAxMk MzNiMzk1ZDktZWE0YS00ZWUyLTg1YTUtMGFhZWFiMDQ1YzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpQ9K4p4r7nfm5wunt82NBaCezi+aZ6SRjwo 5QEcy0aDS+JS2srG4//ueQXFnErPqukhp2NlKW81os2OWCbgY4Y+a5LKTEYqyGsu /2nz+U0Ve6HvsqcezUZZTn2i33w4sj6FhLCnmJx/kiUQJ73N77MzKFUd/NriQbpC dmsERuE4APtJPI2qV3RY1YGsyYCZcnQK5AmzFbsgLWgkRScFEXlzjXmFqS/l7FQ/ QCcPJOozr0WqXZs7CaAJsxaK6nguVV3wUDqMlmcmPRYJZckARp0JdSeDsRlzq/i2 9eknYZgTXXAPC1DD3KMJcdX3pGw/MoozeAdy79fA0i947lDfDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5S+0HvzFIXrwnq8g7bmSpRk+3EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2ZhNDIyYjEtNmMyZi0z Y2RkLTk0MWUtMTFkYjBiNDhhNmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEruqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgoVN1iSvpmFvGGBfpTmG8Ssxb41LTBklOrtQ5sS4W/+sMqO+x5hRvw LU924L989pnQkuQ7eFrF9NVGL1j64uSDHhaak70kpMOogwMt0at/Xpjt8Tat+ibv EA0IfTjHWd8P7RA+BPAItCI8Wn4IVnic6olVwNpldeWJLsl0aE78xTWJmBtxwlid 7l0zOt7f0BHtKhHYErFrIbtDz0x64t/+7XNrMGWlo5JR5DOb4cpoFTS+N4yMXFpo wKPE5RVAQBJqncW7qiZtdUS1vVVUB7R/FsBat0rEWaYdfAQn4qiqakQaUe7TYpop mtM+4GQHnD1SGQVh7xQz2xZG2bIdxHk= -----END CERTIFICATE-----Generated at Sat Jun 13 18:44:32 2026 by rpki-client