$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b06cf7f6-254e-30f8-8331-780b8798549d.roa File: b06cf7f6-254e-30f8-8331-780b8798549d.roa (raw, json) Hash identifier: YdqCR+48ELXeVTuznfjPs61a8ZK1aWRVG3IOyFCbc/s= Subject key identifier: A1:BA:CC:76:9F:DB:C5:C4:A7:DC:94:BF:F6:14:80:1D:17:F4:82:8B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F6C5847B123FE59888C31E180 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b06cf7f6-254e-30f8-8331-780b8798549d.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 6167 IP address blocks: 174.240.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:47:b1:23:fe:59:88:8c:31:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=71add3bc-0590-41e6-9cc7-78b5288c5627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:64:50:4a:93:7d:52:e4:0e:39:b0:f0:9a:3a: 5d:31:f2:46:b5:65:bc:78:cf:5c:d6:59:84:79:2a: e4:f7:05:a3:5f:35:a8:47:78:7d:fb:f8:9e:2e:5e: 46:09:6f:c1:f7:70:7d:52:7f:b4:05:78:a3:24:b2: 5d:78:8c:c2:31:2e:06:3f:cf:bc:17:f0:f6:47:8a: 52:c4:e2:64:72:86:ac:d5:d1:04:d3:02:bd:1e:4d: 88:a6:b2:82:09:4b:cd:39:a0:07:cf:cb:ce:3a:03: 2b:c4:05:6c:a4:04:e6:78:ec:98:52:0d:d1:af:f8: e3:9a:39:7e:7a:8d:f2:dc:b0:f9:47:75:58:c2:69: 73:32:45:88:b4:e0:ab:39:87:61:eb:24:26:10:82: b5:2a:d0:06:54:fc:62:a4:48:1b:86:6f:3b:f0:34: 08:cb:70:8e:11:d4:7a:a6:a9:a5:f7:81:4f:97:64: 16:1c:a4:7a:44:51:12:a8:92:d6:de:72:e3:f3:8c: 65:00:42:58:8f:7a:97:c2:16:60:07:ca:45:4d:73: 64:0b:73:e0:7e:f8:3c:5f:59:8f:32:39:b2:0b:a6: 2b:41:c9:6c:ea:70:aa:7a:34:76:bf:4b:96:f0:ec: 59:20:52:66:1e:4c:13:c2:30:3e:97:c9:d0:b8:70: 17:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:BA:CC:76:9F:DB:C5:C4:A7:DC:94:BF:F6:14:80:1D:17:F4:82:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b06cf7f6-254e-30f8-8331-780b8798549d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.240.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:bf:d9:ca:14:fb:52:d7:8c:b5:8f:91:a2:55:27:df:09:fd: 04:da:f2:4c:dc:be:80:f2:d4:e9:74:78:89:47:1f:8f:9d:b0: ac:8c:e1:91:fb:a5:53:cd:da:d8:55:0a:09:8e:d4:a1:78:17: 55:1c:87:04:78:06:22:47:2b:e6:42:4f:ad:5e:0d:f3:b4:83: fd:90:31:75:af:b9:21:2e:2c:2d:19:bf:04:22:c1:24:58:c6: b2:57:8d:f4:48:46:05:27:a5:dc:54:80:19:35:f0:53:d9:c7: 6c:71:51:7f:04:a5:ca:02:3a:58:6a:a2:d5:f6:55:ca:f5:01: 12:3b:a3:3a:a0:9f:be:5d:1c:ff:54:23:ce:71:58:90:64:c4: 3b:33:36:39:e2:f4:7f:b3:c7:b4:fa:f1:a2:d2:eb:f2:5d:17: 74:da:f3:b2:79:d0:6e:81:22:b8:44:13:32:15:ac:4e:f0:ca: 4d:cf:e8:0b:fe:25:f5:51:d4:56:bd:20:64:d1:21:dc:7b:24: 7c:d7:45:b9:95:c4:67:b2:3d:b6:c9:7e:6e:26:55:64:6c:f1: 24:5d:55:f8:d9:f1:08:be:d1:be:c5:02:70:ef:50:6f:a3:1a: e6:2a:be:c6:26:33:72:cf:12:7c:9e:6f:70:70:75:7f:c9:68: a7:b0:6c:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWEexI/5ZiIwx4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk NzFhZGQzYmMtMDU5MC00MWU2LTljYzctNzhiNTI4OGM1NjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2RQSpN9UuQOObDwmjpdMfJGtWW8eM9c1lmE eSrk9wWjXzWoR3h9+/ieLl5GCW/B93B9Un+0BXijJLJdeIzCMS4GP8+8F/D2R4pS xOJkcoas1dEE0wK9Hk2IprKCCUvNOaAHz8vOOgMrxAVspATmeOyYUg3Rr/jjmjl+ eo3y3LD5R3VYwmlzMkWItOCrOYdh6yQmEIK1KtAGVPxipEgbhm878DQIy3COEdR6 pqml94FPl2QWHKR6RFESqJLW3nLj84xlAEJYj3qXwhZgB8pFTXNkC3Pgfvg8X1mP MjmyC6YrQcls6nCqejR2v0uW8OxZIFJmHkwTwjA+l8nQuHAXHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKG6zHaf28XEp9yUv/YUgB0X9IKLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjA2Y2Y3ZjYtMjU0ZS0z MGY4LTgzMzEtNzgwYjg3OTg1NDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErvCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAG/2coU+1LXjLWPkaJVJ98J/QTa8kzcvoDy1Ol0eIlHH4+dsKyM4ZH7 pVPN2thVCgmO1KF4F1UchwR4BiJHK+ZCT61eDfO0g/2QMXWvuSEuLC0ZvwQiwSRY xrJXjfRIRgUnpdxUgBk18FPZx2xxUX8EpcoCOlhqotX2Vcr1ARI7ozqgn75dHP9U I85xWJBkxDszNjni9H+zx7T68aLS6/JdF3Ta87J50G6BIrhEEzIVrE7wyk3P6Av+ JfVR1Fa9IGTRIdx7JHzXRbmVxGeyPbbJfm4mVWRs8SRdVfjZ8Qi+0b7FAnDvUG+j GuYqvsYmM3LPEnyeb3BwdX/JaKewbJ4= -----END CERTIFICATE-----Generated at Thu Oct 8 03:42:53 2026 by rpki-client