$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa4a2299-f3e0-3a68-b692-7689970f1f7a.roa File: aa4a2299-f3e0-3a68-b692-7689970f1f7a.roa (raw, json) Hash identifier: 8b19x04PSA/evI5+6HKlHgoBoh1yfugxWSbD1oww2Fo= Subject key identifier: 3A:40:6E:FF:2F:D2:2C:9C:E4:A3:84:9B:4A:67:CC:6A:56:2C:75:C5 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F71EDAD4B517DB46B93D676D0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa4a2299-f3e0-3a68-b692-7689970f1f7a.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 6167 IP address blocks: 174.42.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:ad:4b:51:7d:b4:6b:93:d6:76:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=7ae55bab-d3a7-4bba-9c71-7ac9b90cc986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d2:d6:f2:6c:16:29:00:ae:21:b7:7e:3f:ef: 1b:d9:41:9e:d2:a2:ad:d7:01:b8:a8:03:81:5c:59: 65:e7:44:35:2e:e4:3c:30:5f:91:19:51:14:b6:89: f5:ad:bc:9a:bc:8f:6b:ab:79:6d:15:23:10:f4:55: 7a:62:47:f8:20:ad:af:a0:7f:18:7d:8a:4c:d1:d4: ca:97:8a:7e:dc:1b:f1:fd:59:3c:32:eb:78:04:26: 26:7b:4a:b2:b5:4f:4f:68:71:67:4e:9b:ac:1b:75: 6a:52:26:03:f2:2d:f3:87:d0:b2:3e:36:17:91:c0: f6:23:e1:5b:99:f1:93:6a:4b:50:b0:87:b4:b7:23: 42:d5:df:f7:1a:ec:9a:2c:83:66:98:e8:d7:05:71: 7a:8f:f7:23:ab:d2:8d:97:a2:a3:e0:a1:8c:ae:ac: 93:51:70:ac:05:75:4a:64:20:02:00:c8:82:41:72: 31:95:26:13:7b:8d:a4:93:fb:12:d3:f3:51:3b:03: 68:91:f1:cb:75:8c:ff:fa:55:46:03:96:97:f6:1d: a3:9a:08:67:bc:11:91:eb:d9:fb:7b:51:1a:dd:80: 24:48:fd:6f:af:99:a6:7d:ac:de:98:c8:74:47:06: 4e:96:97:f3:3c:6e:97:ca:5f:e9:bc:53:8f:a3:f6: 51:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:40:6E:FF:2F:D2:2C:9C:E4:A3:84:9B:4A:67:CC:6A:56:2C:75:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aa4a2299-f3e0-3a68-b692-7689970f1f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.42.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:11:13:82:7e:bc:7f:e7:5b:32:55:69:4d:b3:f6:ae:d8:5c: 99:11:17:aa:73:17:91:80:12:44:89:65:ec:38:2b:70:17:47: 6d:71:e7:6f:9a:82:b6:8f:40:a9:c7:c5:6f:a3:ad:3f:c6:56: 02:04:9f:72:87:e7:ea:5b:66:4a:d3:d8:99:52:db:aa:60:b9: b7:f9:de:60:3f:d5:7c:93:5d:c2:cd:f4:7c:8d:5f:4b:cf:52: fd:fe:77:40:44:c0:67:73:b3:7b:fe:c7:a3:67:87:9d:4e:34: d0:6e:a8:57:24:eb:7f:f8:a4:61:0d:aa:b1:6e:93:5d:8d:d3: 1d:96:7d:a5:92:9f:74:92:70:ee:3c:6a:dc:bc:31:c5:46:ed: e5:55:d9:a0:5f:08:5a:ce:ce:56:81:94:04:ea:de:e7:1a:08: 76:d2:6f:d7:46:1b:4f:eb:96:63:a9:37:f0:b7:89:ff:22:df: eb:c5:2d:07:c1:fe:d2:cd:b2:65:e7:44:04:6b:42:fe:66:d0: 31:23:61:d6:fc:9b:e6:d0:a6:14:73:66:43:1d:cd:a0:0e:c3: b9:f1:24:a9:a9:5a:36:39:44:6b:db:d3:cc:6d:16:3d:ce:a4: 98:9f:2a:73:d3:a5:5a:0a:cd:48:f1:79:58:a3:2f:07:3c:00: 53:6c:cd:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7a1LUX20a5PWdtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk N2FlNTViYWItZDNhNy00YmJhLTljNzEtN2FjOWI5MGNjOTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldLW8mwWKQCuIbd+P+8b2UGe0qKt1wG4qAOB XFll50Q1LuQ8MF+RGVEUton1rbyavI9rq3ltFSMQ9FV6Ykf4IK2voH8YfYpM0dTK l4p+3Bvx/Vk8Mut4BCYme0qytU9PaHFnTpusG3VqUiYD8i3zh9CyPjYXkcD2I+Fb mfGTaktQsIe0tyNC1d/3GuyaLINmmOjXBXF6j/cjq9KNl6Kj4KGMrqyTUXCsBXVK ZCACAMiCQXIxlSYTe42kk/sS0/NROwNokfHLdYz/+lVGA5aX9h2jmghnvBGR69n7 e1Ea3YAkSP1vr5mmfazemMh0RwZOlpfzPG6Xyl/pvFOPo/ZRGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpAbv8v0iyc5KOEm0pnzGpWLHXFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWE0YTIyOTktZjNlMC0z YTY4LWI2OTItNzY4OTk3MGYxZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCriocMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADERE4J+vH/nWzJVaU2z9q7YXJkRF6pzF5GAEkSJZew4K3AXR21x52+a graPQKnHxW+jrT/GVgIEn3KH5+pbZkrT2JlS26pgubf53mA/1XyTXcLN9HyNX0vP Uv3+d0BEwGdzs3v+x6Nnh51ONNBuqFck63/4pGENqrFuk12N0x2WfaWSn3SScO48 aty8McVG7eVV2aBfCFrOzlaBlATq3ucaCHbSb9dGG0/rlmOpN/C3if8i3+vFLQfB /tLNsmXnRARrQv5m0DEjYdb8m+bQphRzZkMdzaAOw7nxJKmpWjY5RGvb08xtFj3O pJifKnPTpVoKzUjxeVijLwc8AFNszQQ= -----END CERTIFICATE-----Generated at Sun Oct 11 07:55:16 2026 by rpki-client