$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/69c1a05f-e49c-3682-a20f-51da947ccac8.roa File: 69c1a05f-e49c-3682-a20f-51da947ccac8.roa (raw, json) Hash identifier: CuyzFwwPi8xtP34jQIIhARkYvHZHMtt4R9KaArQ8SG8= Subject key identifier: D2:C9:F6:F8:61:70:07:F7:3D:5D:C9:1A:06:8A:01:B4:DE:67:F1:58 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D86956D452C00ED3CB2F55400 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/69c1a05f-e49c-3682-a20f-51da947ccac8.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 6167 IP address blocks: 174.220.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:6d:45:2c:00:ed:3c:b2:f5:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=f418f639-0184-4ed0-b922-4c0e6940ab18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f7:f2:f2:34:db:02:d9:cb:62:4f:69:06:a3: 51:ee:41:8c:44:03:e2:52:23:a0:96:d0:1a:7c:29: d2:e0:62:c9:ca:18:87:d7:98:ac:f9:71:fc:b0:49: 46:19:8c:b8:74:eb:94:28:5d:d9:55:52:97:d2:95: 3c:e6:b0:c4:7f:c2:0f:49:5a:52:fb:fd:17:5f:29: b5:66:c6:b9:34:f5:f2:4f:44:a0:cf:88:57:45:61: bb:4b:c5:9e:85:10:e7:d0:85:96:2f:b4:12:b5:44: cb:ee:ca:25:99:b1:62:7d:3f:8c:41:0d:93:cb:47: 57:2e:e1:87:a4:d8:9b:81:a7:5c:ac:93:24:90:a5: df:b1:2c:32:51:39:04:ed:19:ce:a8:13:37:c5:e2: 32:37:c6:12:f8:1a:1e:4b:49:21:aa:72:03:44:2d: b3:95:97:08:60:45:0f:c0:55:cd:ce:55:e2:17:69: f1:37:65:3d:8e:6a:a7:fc:ef:a4:f3:fc:4a:58:cd: 04:d1:73:40:12:e1:97:c2:33:b8:d1:2b:88:7b:3f: 03:21:ee:b7:8b:6d:89:2e:71:6f:39:71:1e:7f:8d: ca:dc:17:d0:42:a4:28:89:41:fa:0a:04:d8:a5:6a: af:9e:16:bc:5f:a7:40:b0:8d:21:8f:03:4f:27:0a: 2e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C9:F6:F8:61:70:07:F7:3D:5D:C9:1A:06:8A:01:B4:DE:67:F1:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/69c1a05f-e49c-3682-a20f-51da947ccac8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.220.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:94:c9:84:b7:c1:6e:4a:a9:61:71:4a:c3:48:0c:e0:64:47: 6c:cf:b7:3a:56:49:bb:67:04:fe:78:16:97:04:af:96:40:a6: cb:2b:cc:b0:b8:60:b1:cd:9b:e6:7e:58:ca:3f:52:94:7d:f7: 6a:b7:d2:fc:dc:f1:9b:ef:62:85:52:0e:ee:7e:ee:e4:c2:56: c0:71:0b:e3:7b:d1:0d:97:1a:8f:38:1c:42:c6:37:c6:26:47: 60:4c:e6:54:a6:4d:44:e0:03:0d:cf:18:70:a2:72:f1:f8:7f: 98:96:32:bb:d5:94:00:b1:00:11:c7:b4:40:a9:b3:60:a4:b5: 77:ae:46:00:b8:2c:9e:60:0c:5e:c1:2d:3b:95:e3:41:ba:5a: e5:0d:f1:9d:44:00:5e:f2:d1:4d:2a:df:7c:45:24:d9:a9:5c: e0:d5:99:2a:a1:31:b2:10:bf:d4:fe:9d:2e:b7:f6:f9:53:48: db:7a:44:4a:aa:26:a5:43:8b:41:12:d0:76:41:00:72:aa:c4: e3:a0:d0:f4:30:68:9a:4c:9c:f4:69:55:0c:d8:2b:a4:c6:5d: d7:9e:14:3d:bf:bf:78:82:03:0d:38:22:9e:58:34:0d:1f:6a: ff:55:86:64:1c:e8:ff:61:ba:4e:41:72:34:d8:29:a3:d2:5a: dc:20:44:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlW1FLADtPLL1VAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk ZjQxOGY2MzktMDE4NC00ZWQwLWI5MjItNGMwZTY5NDBhYjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqffy8jTbAtnLYk9pBqNR7kGMRAPiUiOgltAa fCnS4GLJyhiH15is+XH8sElGGYy4dOuUKF3ZVVKX0pU85rDEf8IPSVpS+/0XXym1 Zsa5NPXyT0Sgz4hXRWG7S8WehRDn0IWWL7QStUTL7solmbFifT+MQQ2Ty0dXLuGH pNibgadcrJMkkKXfsSwyUTkE7RnOqBM3xeIyN8YS+BoeS0khqnIDRC2zlZcIYEUP wFXNzlXiF2nxN2U9jmqn/O+k8/xKWM0E0XNAEuGXwjO40SuIez8DIe63i22JLnFv OXEef43K3BfQQqQoiUH6CgTYpWqvnha8X6dAsI0hjwNPJwouSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLJ9vhhcAf3PV3JGgaKAbTeZ/FYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjljMWEwNWYtZTQ5Yy0z NjgyLWEyMGYtNTFkYTk0N2NjYWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKUyYS3wW5KqWFxSsNIDOBkR2zPtzpWSbtnBP54FpcEr5ZApssrzLC4 YLHNm+Z+WMo/UpR992q30vzc8ZvvYoVSDu5+7uTCVsBxC+N70Q2XGo84HELGN8Ym R2BM5lSmTUTgAw3PGHCicvH4f5iWMrvVlACxABHHtECps2CktXeuRgC4LJ5gDF7B LTuV40G6WuUN8Z1EAF7y0U0q33xFJNmpXODVmSqhMbIQv9T+nS639vlTSNt6REqq JqVDi0ES0HZBAHKqxOOg0PQwaJpMnPRpVQzYK6TGXdeeFD2/v3iCAw04Ip5YNA0f av9VhmQc6P9huk5BcjTYKaPSWtwgRJE= -----END CERTIFICATE-----Generated at Fri Apr 17 15:36:53 2026 by rpki-client