$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cac28247-3ad2-3f6a-b194-f7bd41b9502f.roa File: cac28247-3ad2-3f6a-b194-f7bd41b9502f.roa (raw, json) Hash identifier: BYu9pb8ngVfvgvNtN/3THrPVcH3fb4s8Fw+4tBoiH28= Subject key identifier: 3C:EA:BD:23:4F:D4:A8:45:63:C3:84:F3:B5:14:9B:91:A0:B1:43:71 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F6C584D03F1842E15C6128EC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cac28247-3ad2-3f6a-b194-f7bd41b9502f.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 6167 IP address blocks: 174.249.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:4d:03:f1:84:2e:15:c6:12:8e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=57182985-6cb1-4226-9c18-7bdcb47376fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ac:57:6c:ba:a6:45:c0:6d:fd:19:17:17:56: df:eb:ae:b5:47:e7:22:7d:79:85:a3:51:86:77:d6: fe:9e:57:b0:15:8c:9b:e0:09:e1:3c:61:84:28:c0: 86:73:6a:11:4a:67:97:d6:a9:a5:83:f2:ef:62:16: c1:7f:b8:17:df:d0:01:d8:22:c8:a3:c7:d2:1e:d9: d9:2f:f2:cd:eb:5c:6f:28:c1:9f:a8:39:24:2a:3a: ba:c2:c5:aa:21:4b:67:7d:0d:53:2b:73:66:03:3d: 8f:41:39:b2:39:c4:6a:03:5b:dc:c6:06:5a:a5:38: 91:34:67:18:3a:6e:63:d8:a9:06:6c:28:cb:04:b2: 6a:2a:34:29:bd:6a:f3:b2:5a:a5:e9:2f:97:60:65: d4:67:a4:39:8b:0b:7f:bb:b3:f8:7a:a5:78:b4:d7: 94:26:18:b2:e2:fc:a5:84:6a:be:dd:e9:a9:eb:86: ae:f7:58:b9:aa:04:f8:24:b9:65:81:24:41:53:77: 07:f4:e6:73:ba:e2:2d:98:48:0f:4e:f9:ed:fd:38: 6e:26:32:a3:9a:0b:5a:5b:e2:ac:c1:c7:21:c8:78: 3d:fa:b6:ac:16:5b:b9:78:69:35:f3:5a:5b:50:da: 56:38:8b:b4:48:d2:45:68:6b:41:3c:f3:51:7f:5c: c6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EA:BD:23:4F:D4:A8:45:63:C3:84:F3:B5:14:9B:91:A0:B1:43:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cac28247-3ad2-3f6a-b194-f7bd41b9502f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.249.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:ac:f5:28:41:14:70:74:af:21:7f:a6:c1:fa:e1:cd:a1:6e: 86:56:1c:ee:16:98:fa:67:84:b5:5d:82:62:a2:a1:a9:30:ab: 79:07:27:c6:41:99:f0:9f:c0:8d:f3:df:2c:87:dc:24:33:e0: ff:95:c9:4d:f6:db:b0:2e:49:8e:cd:68:d4:23:3c:84:ef:8d: a0:4b:7f:b0:a1:a4:bd:b2:4e:c8:2a:13:13:55:b9:ce:22:b5: 19:27:b0:7b:9e:5c:6a:53:4b:2f:f8:56:64:43:39:ba:36:90: ea:d8:ef:8f:18:4a:3a:41:42:15:c5:47:92:8f:c8:49:32:14: 7c:1f:9c:67:97:55:31:56:f2:82:cc:3d:62:98:a6:17:f9:00: b6:66:39:7c:c0:af:74:5a:3c:de:1d:0f:8d:45:1c:ea:08:32: 66:25:2f:87:09:7f:81:79:c1:e8:6f:ec:c8:7c:4e:36:e1:bb: c1:da:6c:54:3c:04:f7:2a:d8:d6:5e:0a:1e:0e:59:ac:5b:5b: 73:f1:3f:79:fa:f5:e3:07:9f:65:85:d8:31:93:a3:cd:55:f8: 42:4f:39:2b:5a:22:d0:d0:54:e7:28:3e:d4:0a:14:e8:66:42: e0:14:53:5e:b4:5b:24:3b:da:45:04:e1:a1:08:a1:ea:37:f0: d3:b6:69:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWE0D8YQuFcYSjsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk NTcxODI5ODUtNmNiMS00MjI2LTljMTgtN2JkY2I0NzM3NmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaxXbLqmRcBt/RkXF1bf6661R+cifXmFo1GG d9b+nlewFYyb4AnhPGGEKMCGc2oRSmeX1qmlg/LvYhbBf7gX39AB2CLIo8fSHtnZ L/LN61xvKMGfqDkkKjq6wsWqIUtnfQ1TK3NmAz2PQTmyOcRqA1vcxgZapTiRNGcY Om5j2KkGbCjLBLJqKjQpvWrzslql6S+XYGXUZ6Q5iwt/u7P4eqV4tNeUJhiy4vyl hGq+3emp64au91i5qgT4JLllgSRBU3cH9OZzuuItmEgPTvnt/ThuJjKjmgtaW+Ks wcchyHg9+rasFlu5eGk181pbUNpWOIu0SNJFaGtBPPNRf1zGIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzqvSNP1KhFY8OE87UUm5GgsUNxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2FjMjgyNDctM2FkMi0z ZjZhLWIxOTQtZjdiZDQxYjk1MDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErvmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWs9ShBFHB0ryF/psH64c2hboZWHO4WmPpnhLVdgmKioakwq3kHJ8ZB mfCfwI3z3yyH3CQz4P+VyU3227AuSY7NaNQjPITvjaBLf7ChpL2yTsgqExNVuc4i tRknsHueXGpTSy/4VmRDObo2kOrY748YSjpBQhXFR5KPyEkyFHwfnGeXVTFW8oLM PWKYphf5ALZmOXzAr3RaPN4dD41FHOoIMmYlL4cJf4F5wehv7Mh8Tjbhu8HabFQ8 BPcq2NZeCh4OWaxbW3PxP3n69eMHn2WF2DGTo81V+EJPOStaItDQVOcoPtQKFOhm QuAUU160WyQ72kUE4aEIoeo38NO2aaA= -----END CERTIFICATE-----Generated at Fri Oct 9 22:52:55 2026 by rpki-client