$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/873db6a2-7d50-32b1-a9fc-35c900e1c71b.roa File: 873db6a2-7d50-32b1-a9fc-35c900e1c71b.roa (raw, json) Hash identifier: 06MO/3y24d8rDK1lRUgjyf38EXrewfmuWVHxSa8xzzA= Subject key identifier: EB:91:5A:EA:DC:E8:1A:7C:81:9B:E5:C4:F6:56:9B:69:76:1B:EB:07 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EA79B7EDD47D0BC23DB9FAC00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/873db6a2-7d50-32b1-a9fc-35c900e1c71b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 6167 IP address blocks: 174.218.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:7e:dd:47:d0:bc:23:db:9f:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ae896438-9618-4baa-b7bd-8d6be4984071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fa:c8:3d:c0:b8:cf:dd:06:0a:aa:4a:19:bf: a9:18:da:e8:b6:a7:6d:96:59:c6:46:48:20:f0:76: f1:e8:b2:a9:79:f6:c7:5a:da:02:0f:58:85:1f:53: 1f:f0:e3:1c:dc:03:cc:0d:3f:4c:c3:60:cb:c3:b6: 52:70:78:1e:6e:be:dc:0a:24:52:97:3e:af:92:3f: ad:70:f2:da:d5:7c:3b:ec:60:b5:dc:0a:a3:63:cd: 31:6e:99:cb:c0:62:2c:fa:0f:d0:28:91:d6:83:91: 25:12:1b:58:9a:97:b2:6b:f4:94:c0:37:c0:fb:ef: 7c:1c:b2:95:23:ad:31:0d:17:3e:60:7b:a7:4a:01: af:da:96:f0:64:1d:56:94:12:39:c6:82:89:af:ed: 8c:ed:bb:2c:31:65:0f:fc:29:ec:3c:84:97:3a:48: c1:bf:87:53:70:62:00:47:ce:f1:e7:6e:d9:7b:90: d4:39:5d:7c:c7:10:f0:75:da:c6:76:f3:d6:1a:ae: be:e7:56:c4:a9:72:15:02:a5:86:0d:50:d9:11:82: 21:72:be:54:76:78:80:42:27:72:ee:d8:96:a2:62: eb:4b:57:f2:57:1a:71:14:10:56:18:ca:cd:1f:f8: f9:83:97:54:13:da:41:c1:5d:8c:c2:e1:77:10:fd: d5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:91:5A:EA:DC:E8:1A:7C:81:9B:E5:C4:F6:56:9B:69:76:1B:EB:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/873db6a2-7d50-32b1-a9fc-35c900e1c71b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.218.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:0e:54:03:62:7c:7d:79:e7:7b:1f:ab:ad:35:33:23:05:e0: ce:d7:79:fc:2a:eb:c5:65:12:9b:36:e6:8d:4c:83:8f:cd:95: 4f:1f:f6:f4:b5:11:da:09:53:0b:2e:88:9c:44:8f:ee:16:bc: 4a:60:74:04:2d:46:bc:89:50:43:0a:56:98:cc:9c:bf:26:9b: 4e:31:b9:f4:da:68:39:5f:3e:c9:b3:98:76:c7:9a:73:22:9c: 2a:90:ba:fe:8f:1b:a5:7d:33:54:41:0e:fd:c8:59:32:6d:86: 1f:b3:3a:0e:c2:93:c9:1c:8b:69:d6:32:64:6b:d6:2f:5d:74: f1:fa:fe:54:0f:15:31:1d:f0:5a:b5:98:ab:e7:35:81:93:23: 68:97:a5:7c:0a:70:b5:5d:35:04:40:56:d6:5b:c6:d8:8c:e0: a2:88:02:70:dc:df:e6:6a:25:3e:e9:22:e0:d3:2d:e3:ca:99: 63:bc:3c:01:47:39:d8:bf:53:99:dd:5f:a3:f9:94:c6:b2:38: 86:de:0b:a1:1d:d9:47:6a:07:7e:20:22:35:80:ac:e5:27:ad: 5c:ae:92:87:98:ac:ed:13:ff:e3:a7:b7:13:10:ff:cc:85:97: f3:33:7d:98:51:db:f0:f1:23:32:eb:a8:fa:ec:93:65:13:38: fc:33:4c:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm37dR9C8I9ufrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YWU4OTY0MzgtOTYxOC00YmFhLWI3YmQtOGQ2YmU0OTg0MDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvrIPcC4z90GCqpKGb+pGNrotqdtllnGRkgg 8Hbx6LKpefbHWtoCD1iFH1Mf8OMc3APMDT9Mw2DLw7ZScHgebr7cCiRSlz6vkj+t cPLa1Xw77GC13AqjY80xbpnLwGIs+g/QKJHWg5ElEhtYmpeya/SUwDfA++98HLKV I60xDRc+YHunSgGv2pbwZB1WlBI5xoKJr+2M7bssMWUP/CnsPISXOkjBv4dTcGIA R87x527Ze5DUOV18xxDwddrGdvPWGq6+51bEqXIVAqWGDVDZEYIhcr5UdniAQidy 7tiWomLrS1fyVxpxFBBWGMrNH/j5g5dUE9pBwV2MwuF3EP3VIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOuRWurc6Bp8gZvlxPZWm2l2G+sHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODczZGI2YTItN2Q1MC0z MmIxLWE5ZmMtMzVjOTAwZTFjNzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrtrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcOVANifH1553sfq601MyMF4M7Xefwq68VlEps25o1Mg4/NlU8f9vS1 EdoJUwsuiJxEj+4WvEpgdAQtRryJUEMKVpjMnL8mm04xufTaaDlfPsmzmHbHmnMi nCqQuv6PG6V9M1RBDv3IWTJthh+zOg7Ck8kci2nWMmRr1i9ddPH6/lQPFTEd8Fq1 mKvnNYGTI2iXpXwKcLVdNQRAVtZbxtiM4KKIAnDc3+ZqJT7pIuDTLePKmWO8PAFH Odi/U5ndX6P5lMayOIbeC6Ed2UdqB34gIjWArOUnrVyukoeYrO0T/+OntxMQ/8yF l/MzfZhR2/DxIzLrqPrsk2UTOPwzTCg= -----END CERTIFICATE-----Generated at Wed Jul 29 09:32:12 2026 by rpki-client