$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9c85e8be-2173-3500-b7b7-d1458a4548e3.roa File: 9c85e8be-2173-3500-b7b7-d1458a4548e3.roa (raw, json) Hash identifier: bnXedeUUUNCqsgwcCD62+E64MPGLnS1SCsnVa3jjTLc= Subject key identifier: A3:49:9B:DA:04:5F:AF:06:77:57:43:80:28:8B:E4:8B:1F:4A:19:34 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F6C58487BDB49CE4F63763F60 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9c85e8be-2173-3500-b7b7-d1458a4548e3.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 6167 IP address blocks: 174.241.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:48:7b:db:49:ce:4f:63:76:3f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=d2f95ee4-cbc2-44fb-82c2-f7797c37088f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:33:1c:26:af:a4:ee:0c:a8:38:a6:4d:21:00: c1:e4:44:af:3d:a6:51:c9:a8:ea:40:d0:15:99:33: 71:0a:af:1f:74:f6:c8:aa:04:d1:02:ed:c3:eb:72: 25:ce:b4:4a:ac:46:31:33:6a:98:8c:e7:b7:df:34: c3:9b:1b:61:74:0e:e8:c5:18:09:de:4e:b5:3a:fc: 7b:2f:9f:4a:f5:7b:fc:a2:ae:5f:c9:38:89:be:b6: 3c:17:d3:e7:ac:b6:1b:12:a8:7f:ff:38:f6:19:5c: cd:70:e5:f9:fe:e6:8a:a3:6c:77:9a:9b:97:99:d0: 82:c3:e9:13:a3:af:5a:c8:c7:a8:d9:4f:c5:6a:51: 83:a0:f3:ce:6a:39:26:d8:3b:71:e6:a3:d0:16:c5: 54:8e:83:f3:51:d3:73:0f:17:1c:41:80:98:de:65: 20:25:07:19:c1:c9:62:05:43:7f:86:16:f1:ce:45: 80:b7:2d:66:67:3d:77:4e:0c:91:3c:28:6a:0e:5b: b5:58:f6:01:b4:74:67:a8:ad:83:ab:f0:b5:9b:4c: 5b:ec:5a:f7:2f:6d:19:e3:3a:4c:29:ee:b1:e3:69: 3c:44:e3:84:d1:63:b0:b1:50:20:81:ff:fa:65:b1: 69:e6:92:d7:9d:93:1e:61:3e:ca:d0:4b:b9:17:98: f5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:49:9B:DA:04:5F:AF:06:77:57:43:80:28:8B:E4:8B:1F:4A:19:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9c85e8be-2173-3500-b7b7-d1458a4548e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.241.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:d2:d3:1f:aa:d6:c4:c2:a5:58:3f:94:ea:8f:b7:73:e5:d0: 41:3c:28:fe:d9:89:23:01:6f:bb:9e:54:13:25:69:3c:4e:a7: 42:ce:66:7f:8c:15:40:c8:14:ce:2e:04:da:65:7f:e9:38:35: f6:ba:8b:c6:93:6b:a9:8c:c1:f1:ef:da:a0:0c:f3:77:46:40: 5d:4d:91:01:42:9c:1b:90:b5:a6:74:44:10:d1:4b:f9:31:bf: c5:77:1f:90:27:f7:3d:92:40:cc:55:ee:5b:37:b6:f6:f6:ce: 60:6c:0e:a4:f0:7f:39:8b:2f:4b:2f:6a:b8:3b:39:37:8d:5b: b3:a9:59:07:89:32:71:65:28:55:22:6f:4c:3a:e3:14:58:57: 05:9d:97:a1:a3:18:8a:c0:ec:0c:75:f8:43:92:ae:45:92:a7: e5:80:2d:b0:2a:5d:f6:5b:dc:bb:d1:2a:c5:e3:f0:de:63:cf: a0:38:df:b2:5b:5f:09:27:26:5c:9a:2c:38:e3:aa:2f:5c:8a: b6:fb:00:74:78:a0:f6:e6:b7:b1:20:c2:76:a1:5d:7d:dc:00: 1c:cf:d4:0d:84:66:de:68:f8:e1:88:7e:9a:2d:e1:ca:7b:ab: c6:bc:f0:ec:c5:98:f0:f1:0c:40:3b:ce:f3:a1:2d:a9:29:31: e0:d5:f1:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWEh720nOT2N2P2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk ZDJmOTVlZTQtY2JjMi00NGZiLTgyYzItZjc3OTdjMzcwODhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDMcJq+k7gyoOKZNIQDB5ESvPaZRyajqQNAV mTNxCq8fdPbIqgTRAu3D63IlzrRKrEYxM2qYjOe33zTDmxthdA7oxRgJ3k61Ovx7 L59K9Xv8oq5fyTiJvrY8F9PnrLYbEqh//zj2GVzNcOX5/uaKo2x3mpuXmdCCw+kT o69ayMeo2U/FalGDoPPOajkm2Dtx5qPQFsVUjoPzUdNzDxccQYCY3mUgJQcZwcli BUN/hhbxzkWAty1mZz13TgyRPChqDlu1WPYBtHRnqK2Dq/C1m0xb7Fr3L20Z4zpM Ke6x42k8ROOE0WOwsVAggf/6ZbFp5pLXnZMeYT7K0Eu5F5j1zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNJm9oEX68Gd1dDgCiL5IsfShk0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOWM4NWU4YmUtMjE3My0z NTAwLWI3YjctZDE0NThhNDU0OGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrvGIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALDS0x+q1sTCpVg/lOqPt3Pl0EE8KP7ZiSMBb7ueVBMlaTxOp0LOZn+M FUDIFM4uBNplf+k4Nfa6i8aTa6mMwfHv2qAM83dGQF1NkQFCnBuQtaZ0RBDRS/kx v8V3H5An9z2SQMxV7ls3tvb2zmBsDqTwfzmLL0svarg7OTeNW7OpWQeJMnFlKFUi b0w64xRYVwWdl6GjGIrA7Ax1+EOSrkWSp+WALbAqXfZb3LvRKsXj8N5jz6A437Jb XwknJlyaLDjjqi9cirb7AHR4oPbmt7EgwnahXX3cABzP1A2EZt5o+OGIfpot4cp7 q8a88OzFmPDxDEA7zvOhLakpMeDV8Yc= -----END CERTIFICATE-----Generated at Sun Oct 11 15:22:51 2026 by rpki-client