$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3f9bec5-8977-39ee-a8ad-199602882af1.roa File: c3f9bec5-8977-39ee-a8ad-199602882af1.roa (raw, json) Hash identifier: 5mjgBtFa0Dc3KFNY8oJxL2xdPaPWcC4vrdxNRj15zzU= Subject key identifier: 00:25:5B:8E:AA:74:06:05:8D:22:7C:57:AB:E0:B8:EF:55:25:BA:7D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EA79B7A223F96746D2E92D000 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3f9bec5-8977-39ee-a8ad-199602882af1.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 6167 IP address blocks: 174.216.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:7a:22:3f:96:74:6d:2e:92:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=19117075-45cf-4a87-bb6f-53e415a67aea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f8:20:f9:ce:35:00:96:8b:9b:d1:dd:ab:6e: a7:50:10:84:9d:15:70:dc:8d:5b:36:49:97:b8:63: 18:2b:0a:6d:b1:fa:67:75:0a:c4:b1:80:06:4b:f8: 68:00:33:fc:62:c2:52:43:1e:02:a4:11:0c:19:49: a0:cb:69:62:b8:8f:67:00:a4:bd:c7:d1:fa:0d:f1: cf:e9:46:96:a9:e8:9a:4d:3b:a0:83:72:9b:45:8a: 2f:c4:38:8d:86:ad:43:96:47:3b:e9:02:fd:c2:62: 27:b2:93:51:a4:aa:d5:19:58:36:32:53:53:a6:f8: d4:fa:18:28:c5:db:e7:78:c5:54:0d:85:bf:c2:b2: d3:90:fc:69:29:d1:f9:ff:3a:48:d1:93:db:7a:06: 1d:b2:ac:62:d5:0e:1a:69:fa:b4:35:20:2d:bd:65: 90:3f:6f:28:01:0b:c6:6b:c7:9f:93:03:4e:68:1a: 54:e3:4c:56:a6:11:67:5d:71:69:9d:c6:34:9b:7b: 1b:5d:69:2c:2b:80:ea:31:3b:c3:fb:8d:c7:25:f7: 22:3a:60:de:bc:56:55:2d:ee:be:e4:a3:74:8f:4a: 80:6d:7f:c4:b3:a0:41:39:26:d7:be:35:99:2a:8e: 81:37:90:8c:8b:be:a3:17:d9:dc:7e:0b:c6:e4:ea: 1e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:25:5B:8E:AA:74:06:05:8D:22:7C:57:AB:E0:B8:EF:55:25:BA:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3f9bec5-8977-39ee-a8ad-199602882af1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.216.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:7b:e1:18:09:8a:8f:74:0c:d8:da:c6:ee:e4:72:99:fc:48: b6:17:09:6d:59:f5:26:12:01:90:1c:00:d7:c1:d1:4f:ff:25: 49:9d:0a:da:b9:14:c0:3d:85:6b:d3:2e:1e:e6:50:3a:01:42: 1f:65:15:3f:81:cf:d0:75:b7:13:36:56:f9:5a:8b:48:0d:7d: 5d:3f:8e:46:af:a9:fb:25:23:72:50:d0:69:fc:91:8d:17:11: aa:98:e0:12:d6:2e:b7:ab:6e:ca:68:88:d1:66:95:ed:d1:d2: 36:c8:8d:0e:e7:d0:6c:58:21:e9:6d:31:f4:fd:46:ca:77:8f: 3f:1b:47:14:51:31:ef:a9:f8:d2:ec:9c:94:83:46:52:b9:b5: 69:11:cd:84:8d:eb:50:d6:f3:75:28:6f:ba:f0:1e:7a:d8:d8: ab:b9:ba:c9:36:87:9e:28:79:5e:87:bc:73:58:f0:99:ff:61: 01:97:f9:f1:f6:b0:78:b7:73:77:88:59:77:75:a7:7e:7a:c9: 82:d8:6c:d0:33:c0:b4:10:99:85:a8:da:7b:77:d9:46:6a:47: 2d:0d:0c:05:22:70:0c:9c:bf:99:66:12:61:dd:e5:49:12:48: d9:8b:eb:82:49:b3:30:1d:01:af:dc:b3:ba:14:f9:51:e2:97: aa:6e:78:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm3oiP5Z0bS6S0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTkxMTcwNzUtNDVjZi00YTg3LWJiNmYtNTNlNDE1YTY3YWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvgg+c41AJaLm9Hdq26nUBCEnRVw3I1bNkmX uGMYKwptsfpndQrEsYAGS/hoADP8YsJSQx4CpBEMGUmgy2liuI9nAKS9x9H6DfHP 6UaWqeiaTTugg3KbRYovxDiNhq1Dlkc76QL9wmInspNRpKrVGVg2MlNTpvjU+hgo xdvneMVUDYW/wrLTkPxpKdH5/zpI0ZPbegYdsqxi1Q4aafq0NSAtvWWQP28oAQvG a8efkwNOaBpU40xWphFnXXFpncY0m3sbXWksK4DqMTvD+43HJfciOmDevFZVLe6+ 5KN0j0qAbX/Es6BBOSbXvjWZKo6BN5CMi76jF9ncfgvG5OoeIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAlW46qdAYFjSJ8V6vguO9VJbp9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzNmOWJlYzUtODk3Ny0z OWVlLWE4YWQtMTk5NjAyODgyYWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADB74RgJio90DNjaxu7kcpn8SLYXCW1Z9SYSAZAcANfB0U//JUmdCtq5 FMA9hWvTLh7mUDoBQh9lFT+Bz9B1txM2Vvlai0gNfV0/jkavqfslI3JQ0Gn8kY0X EaqY4BLWLrerbspoiNFmle3R0jbIjQ7n0GxYIeltMfT9Rsp3jz8bRxRRMe+p+NLs nJSDRlK5tWkRzYSN61DW83Uob7rwHnrY2Ku5usk2h54oeV6HvHNY8Jn/YQGX+fH2 sHi3c3eIWXd1p356yYLYbNAzwLQQmYWo2nt32UZqRy0NDAUicAycv5lmEmHd5UkS SNmL64JJszAdAa/cs7oU+VHil6pueOE= -----END CERTIFICATE-----Generated at Wed Jul 29 04:04:03 2026 by rpki-client