$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b32987b2-7a7a-3c7b-8cde-bf6b3a9427e9.roa File: b32987b2-7a7a-3c7b-8cde-bf6b3a9427e9.roa (raw, json) Hash identifier: sOSS9uVmpDmsgz06X7W+pOaylMP4ciRh3S2QbLob03w= Subject key identifier: C6:8F:33:7B:D7:A4:4E:0C:50:8B:08:53:D6:ED:6D:2C:A2:F0:77:C1 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584E2809AFB429718FF0F914DC80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b32987b2-7a7a-3c7b-8cde-bf6b3a9427e9.roa Signing time: Sat 13 Jun 2026 09:00:12 +0000 ROA not before: Sat 13 Jun 2026 09:00:12 +0000 ROA not after: Fri 11 Sep 2026 09:00:12 +0000 asID: 6167 IP address blocks: 174.232.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:28:09:af:b4:29:71:8f:f0:f9:14:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 13 09:00:12 2026 GMT Not After : Sep 11 09:00:12 2026 GMT Subject: CN=d939cf97-484d-4b64-b032-254c1b35a038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3c:9c:c9:ea:30:83:1e:6c:27:1d:91:1e:64: 94:42:58:d7:85:fe:c9:24:f9:8d:3b:cb:16:39:95: 27:23:60:d8:fc:74:40:d8:be:35:d6:62:47:ad:4e: 8d:5c:53:2b:b6:91:85:e5:88:b5:28:1a:5f:15:f6: f0:de:d4:91:cf:44:4e:39:b4:23:e4:4b:03:92:b4: 4d:f9:6d:8d:75:39:64:da:2b:ba:93:b6:80:1f:30: e3:ce:29:36:48:e3:ab:89:37:2f:69:87:a3:64:17: 52:aa:8a:2d:b9:fe:f1:07:3c:67:b7:93:2a:80:40: 99:12:02:2c:60:0c:56:2a:be:4a:c9:28:07:24:b6: dc:dd:fd:1c:8a:6b:9b:cf:df:cb:55:c8:30:e4:45: 96:ff:47:ba:b7:7f:ea:14:5a:9b:c4:42:51:01:7b: ac:a2:3b:46:2a:39:8c:55:fe:29:d8:00:ab:ec:c9: b3:d0:55:4d:d3:80:50:00:f0:02:d4:03:6d:33:83: be:b9:8b:31:b6:41:fa:4c:4c:d0:b8:fb:d6:90:0a: 79:8c:96:26:e1:c5:72:8c:99:e8:3c:e3:0d:5e:49: 14:34:dd:3c:d9:39:df:7b:f6:66:c6:d5:37:d7:88: d9:0f:d1:e6:f9:7c:38:83:c3:66:de:26:cf:82:b6: 3b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:8F:33:7B:D7:A4:4E:0C:50:8B:08:53:D6:ED:6D:2C:A2:F0:77:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b32987b2-7a7a-3c7b-8cde-bf6b3a9427e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.232.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:ea:dc:2a:1c:d8:b7:1e:e3:c4:42:f1:75:c3:cd:5c:65:c0: 48:13:79:51:7f:11:18:74:a5:c6:76:ad:c5:e3:14:07:df:e8: 97:a5:6d:8b:f9:83:41:7f:9d:f2:9c:74:fe:46:a9:fa:75:51: b8:fd:0a:57:f4:31:86:46:d7:2d:fb:f2:08:5d:e2:11:f6:de: fb:94:6c:3a:44:41:a9:2d:e3:6f:83:57:36:65:46:e2:18:a1: 5f:fe:f5:e0:6e:95:5f:c9:02:a1:52:5e:3e:6a:c8:0f:7b:63: f7:96:84:a7:83:0b:d1:79:bf:9a:5d:92:c7:eb:99:4c:74:94: 6b:eb:9c:1d:ef:04:b0:a0:d5:4d:71:a9:15:ab:ff:7b:f1:da: da:e3:84:6b:05:00:0e:20:93:9f:0a:04:fa:29:ae:65:98:0d: f6:ff:a8:5e:a2:41:c7:0f:33:ce:ec:6b:21:ee:37:dc:db:53: 35:bb:33:a4:92:7e:37:26:34:ce:d8:b6:b0:c6:d2:e8:14:31: 43:60:6e:50:89:50:a8:88:05:a7:1c:7f:56:a1:3d:8e:f0:96: c0:d2:e0:8b:d7:42:f4:93:3b:03:e7:22:1a:c0:6a:fa:8d:a2: a5:49:93:d5:36:f2:c3:a9:8c:3b:0e:65:7b:b5:b6:88:df:e5: 8d:24:f4:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4oCa+0KXGP8PkU3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDYxMzA5MDAxMloXDTI2MDkxMTA5MDAxMlowLzEtMCsGA1UEAxMk ZDkzOWNmOTctNDg0ZC00YjY0LWIwMzItMjU0YzFiMzVhMDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTycyeowgx5sJx2RHmSUQljXhf7JJPmNO8sW OZUnI2DY/HRA2L411mJHrU6NXFMrtpGF5Yi1KBpfFfbw3tSRz0ROObQj5EsDkrRN +W2NdTlk2iu6k7aAHzDjzik2SOOriTcvaYejZBdSqootuf7xBzxnt5MqgECZEgIs YAxWKr5KySgHJLbc3f0cimubz9/LVcgw5EWW/0e6t3/qFFqbxEJRAXusojtGKjmM Vf4p2ACr7Mmz0FVN04BQAPAC1ANtM4O+uYsxtkH6TEzQuPvWkAp5jJYm4cVyjJno POMNXkkUNN082Tnfe/ZmxtU314jZD9Hm+Xw4g8Nm3ibPgrY7TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMaPM3vXpE4MUIsIU9btbSyi8HfBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjMyOTg3YjItN2E3YS0z YzdiLThjZGUtYmY2YjNhOTQyN2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrujqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbq3Coc2Lce48RC8XXDzVxlwEgTeVF/ERh0pcZ2rcXjFAff6JelbYv5 g0F/nfKcdP5Gqfp1Ubj9Clf0MYZG1y378ghd4hH23vuUbDpEQakt42+DVzZlRuIY oV/+9eBulV/JAqFSXj5qyA97Y/eWhKeDC9F5v5pdksfrmUx0lGvrnB3vBLCg1U1x qRWr/3vx2trjhGsFAA4gk58KBPoprmWYDfb/qF6iQccPM87sayHuN9zbUzW7M6SS fjcmNM7YtrDG0ugUMUNgblCJUKiIBaccf1ahPY7wlsDS4IvXQvSTOwPnIhrAavqN oqVJk9U28sOpjDsOZXu1tojf5Y0k9Do= -----END CERTIFICATE-----Generated at Sat Jun 13 17:35:38 2026 by rpki-client