$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f8a1aaa-8aff-316f-9bda-dbce8e1731c2.roa File: 8f8a1aaa-8aff-316f-9bda-dbce8e1731c2.roa (raw, json) Hash identifier: dD+OCozLaYfWVY0A5LQ5m0cm/au0dIAgfkPDNN6sIVM= Subject key identifier: E3:6A:19:A6:43:52:AF:78:06:F7:2F:BF:39:5C:6A:7C:54:12:DA:37 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F497F02D1ABB83C3935891000 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f8a1aaa-8aff-316f-9bda-dbce8e1731c2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 6167 IP address blocks: 174.218.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:02:d1:ab:b8:3c:39:35:89:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=09ee64a9-ab19-4e20-b8e7-068f4496f5eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1e:1b:3a:2e:a6:93:f1:a9:47:45:1a:19:44: 58:96:58:83:06:12:18:53:89:df:59:a1:3f:61:25: 29:34:9a:c6:d9:ca:a3:2a:75:4d:20:30:a3:86:45: 8f:2d:c5:aa:a3:2e:78:35:2d:8a:27:d6:c9:63:5a: 90:45:c1:80:ec:d6:0d:19:35:02:01:04:d7:b5:6f: c1:69:0f:be:6b:14:44:a5:32:cd:fe:26:9d:59:8f: 90:40:1d:92:38:21:da:14:fb:8b:05:e4:66:55:b4: e9:f9:8c:b2:8d:e5:8c:c8:b5:b5:05:84:72:77:61: 1a:dd:42:9e:4f:8c:c0:da:09:69:f4:e0:88:1f:2f: a0:06:4f:63:5c:54:46:43:2c:da:35:91:73:dd:1f: d9:88:86:0d:42:07:fb:b3:2b:4d:de:f0:c9:fe:3e: 1b:dc:1e:94:2a:cd:cd:61:89:7c:26:0e:4c:f5:a6: a5:18:85:62:02:7d:44:7e:0b:bf:5f:a0:57:f0:01: 69:92:a1:8b:24:05:3d:89:a6:98:37:c4:e7:6d:34: a4:41:59:9b:eb:76:4a:31:f4:9d:c8:d2:3a:e1:04: a0:85:dd:6c:8d:d2:fe:9f:cf:e7:aa:db:e9:92:cc: b4:72:d9:f8:bd:d8:ae:54:cd:98:9e:b9:03:19:cc: 17:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:6A:19:A6:43:52:AF:78:06:F7:2F:BF:39:5C:6A:7C:54:12:DA:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f8a1aaa-8aff-316f-9bda-dbce8e1731c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.218.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:a0:2a:cf:85:48:1b:03:8a:6d:01:ca:64:99:bd:62:7b:eb: 2b:5e:f6:eb:29:88:c2:c9:6b:d9:6d:3c:e1:9e:b1:e2:8a:39: b2:38:52:0f:7e:25:9c:56:41:9e:e4:f7:1b:61:04:e0:28:40: 62:50:2e:28:89:09:11:95:b5:87:50:b3:6a:cc:55:cf:54:17: 3b:25:c0:2c:aa:d4:72:f6:69:da:96:79:7f:7d:bc:63:5b:26: 2e:bb:68:18:bd:2e:b7:c8:fe:70:c0:91:ab:2e:15:73:b6:d9: 9a:f4:9b:d8:b2:78:cf:1d:a1:e4:3e:58:0c:d8:9e:6d:fe:ef: 9d:db:07:7c:e1:45:07:8c:be:fb:7c:c3:a6:eb:d8:d8:ac:ce: 68:8a:5b:14:ab:c9:35:f7:ca:a1:a1:94:ea:a3:03:3a:92:fd: 49:41:7e:07:19:bf:29:25:07:e4:fa:b9:0b:b0:71:bb:9a:ae: c1:99:c0:92:0d:91:34:08:44:d6:2f:0a:81:ad:5e:70:e5:5a: 7c:a8:9d:13:7a:aa:d7:dc:ed:51:88:9f:04:f0:c9:55:bc:4b: b7:90:ff:f8:06:66:82:5f:d6:b6:54:32:e8:aa:75:01:0a:05: 59:4c:f0:4a:78:49:93:8d:60:b0:2d:b4:1e:3c:c8:68:fe:b6: 98:9f:f5:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfwLRq7g8OTWJEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDllZTY0YTktYWIxOS00ZTIwLWI4ZTctMDY4ZjQ0OTZmNWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR4bOi6mk/GpR0UaGURYlliDBhIYU4nfWaE/ YSUpNJrG2cqjKnVNIDCjhkWPLcWqoy54NS2KJ9bJY1qQRcGA7NYNGTUCAQTXtW/B aQ++axREpTLN/iadWY+QQB2SOCHaFPuLBeRmVbTp+YyyjeWMyLW1BYRyd2Ea3UKe T4zA2glp9OCIHy+gBk9jXFRGQyzaNZFz3R/ZiIYNQgf7sytN3vDJ/j4b3B6UKs3N YYl8Jg5M9aalGIViAn1Efgu/X6BX8AFpkqGLJAU9iaaYN8TnbTSkQVmb63ZKMfSd yNI64QSghd1sjdL+n8/nqtvpksy0ctn4vdiuVM2YnrkDGcwX0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONqGaZDUq94BvcvvzlcanxUEto3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGY4YTFhYWEtOGFmZi0z MTZmLTliZGEtZGJjZThlMTczMWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrtp4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6gKs+FSBsDim0BymSZvWJ76yte9uspiMLJa9ltPOGeseKKObI4Ug9+ JZxWQZ7k9xthBOAoQGJQLiiJCRGVtYdQs2rMVc9UFzslwCyq1HL2adqWeX99vGNb Ji67aBi9LrfI/nDAkasuFXO22Zr0m9iyeM8doeQ+WAzYnm3+753bB3zhRQeMvvt8 w6br2NiszmiKWxSryTX3yqGhlOqjAzqS/UlBfgcZvyklB+T6uQuwcbuarsGZwJIN kTQIRNYvCoGtXnDlWnyonRN6qtfc7VGInwTwyVW8S7eQ//gGZoJf1rZUMuiqdQEK BVlM8Ep4SZONYLAttB48yGj+tpif9Sc= -----END CERTIFICATE-----Generated at Sat Sep 26 07:24:43 2026 by rpki-client