$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/df1e7984-c8e0-32ca-9422-9d07ad5d8b37.roa File: df1e7984-c8e0-32ca-9422-9d07ad5d8b37.roa (raw, json) Hash identifier: nrqutodIRYkoaPwTcyfVPNQZSMbwF4zwmy5gjQQYMmM= Subject key identifier: 42:68:7F:71:EB:B7:93:B2:93:6A:5E:BD:BB:BE:90:99:E9:41:AF:93 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F497F01D0B5D36EF1D94C0A00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/df1e7984-c8e0-32ca-9422-9d07ad5d8b37.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 6167 IP address blocks: 174.216.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:01:d0:b5:d3:6e:f1:d9:4c:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d87838a8-e3e8-4904-a327-d7eacaa83534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d1:46:4c:f4:52:79:5b:d2:dd:87:9c:2c:67: 62:9a:af:ad:66:20:c4:3b:45:a0:b8:95:43:5b:36: 45:0d:f5:bf:48:7a:be:bb:cb:ab:58:66:05:ca:f4: 45:de:5d:57:3b:cf:c8:40:e0:55:bc:f2:f7:34:9f: 37:1d:57:85:3c:29:21:91:51:0d:13:34:d4:13:cf: b5:89:50:7a:a0:97:c9:68:cd:b7:e7:25:12:ff:3d: f5:12:9c:cf:d0:b8:f3:cc:ea:61:86:c8:f3:5f:5c: f6:54:48:c5:4c:74:34:4e:39:a1:44:1a:68:0d:90: e7:70:5a:73:13:8c:70:70:03:4b:34:95:02:48:ff: ff:e5:3b:6c:fb:61:98:6e:c4:62:12:bb:bf:7e:3c: fb:d1:56:b9:db:a3:c8:ff:bb:4b:f0:2e:39:b9:7b: 25:0d:5e:98:3e:4b:c0:8e:e7:8f:3b:2f:c9:c9:28: 2d:e5:0b:19:55:47:61:29:7a:42:35:12:26:72:20: 86:65:ba:1d:e2:f0:d9:e6:3c:a9:9f:eb:74:c0:aa: 7f:65:b2:c1:c3:59:07:58:b9:e0:8d:2c:04:5a:2c: 42:d5:d6:c2:61:e4:af:c0:8e:ec:37:75:55:ab:89: 46:50:16:17:08:c8:1e:52:3c:30:f2:cb:10:9c:0a: 56:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:68:7F:71:EB:B7:93:B2:93:6A:5E:BD:BB:BE:90:99:E9:41:AF:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/df1e7984-c8e0-32ca-9422-9d07ad5d8b37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 174.216.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:13:51:fe:ae:65:6e:ff:85:42:16:35:44:97:fe:7f:a0:c0: cb:95:7a:a0:85:a4:5e:9b:a8:09:40:87:ec:0f:6e:c8:97:83: dc:05:cc:dd:50:5a:d5:d6:6f:41:b2:d6:8a:e3:25:bf:bb:0d: 9c:a1:11:43:c7:1d:61:48:b9:17:ff:7e:cd:62:28:47:70:14: 1c:d6:32:1d:e5:52:5f:d4:da:8a:a6:61:cf:2a:39:b1:85:5f: cc:b5:6b:5c:71:7f:69:ba:11:57:8b:90:80:85:7c:15:18:23: be:a5:4f:e0:11:16:cb:51:0f:84:f2:80:73:f0:81:13:7c:0b: 34:4b:72:0b:c8:e3:85:62:37:23:49:34:e8:ce:42:76:d8:27: 49:db:c7:0b:2d:dc:fd:59:3a:15:e2:65:ca:9d:a7:4a:5c:af: 7b:1f:d9:0e:65:a3:a0:bc:34:1f:19:09:63:56:6d:07:b6:5f: 36:56:8e:54:7c:56:9b:9f:ce:50:bb:54:7d:26:35:6f:0e:b9: 94:82:d7:65:b7:8e:cc:7a:e4:d5:c2:ad:ee:cd:d3:c3:fe:90: af:f3:59:ac:d7:f7:f3:74:ed:ff:61:c4:65:28:a9:bf:9c:54: ed:25:38:ad:16:9a:1b:57:15:34:7c:8b:9d:c4:54:d3:84:98: 72:fa:2a:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfwHQtdNu8dlMCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDg3ODM4YTgtZTNlOC00OTA0LWEzMjctZDdlYWNhYTgzNTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldFGTPRSeVvS3YecLGdimq+tZiDEO0WguJVD WzZFDfW/SHq+u8urWGYFyvRF3l1XO8/IQOBVvPL3NJ83HVeFPCkhkVENEzTUE8+1 iVB6oJfJaM235yUS/z31EpzP0LjzzOphhsjzX1z2VEjFTHQ0TjmhRBpoDZDncFpz E4xwcANLNJUCSP//5Tts+2GYbsRiEru/fjz70Va526PI/7tL8C45uXslDV6YPkvA juePOy/JySgt5QsZVUdhKXpCNRImciCGZbod4vDZ5jypn+t0wKp/ZbLBw1kHWLng jSwEWixC1dbCYeSvwI7sN3VVq4lGUBYXCMgeUjww8ssQnApWiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJof3Hrt5Oyk2pevbu+kJnpQa+TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGYxZTc5ODQtYzhlMC0z MmNhLTk0MjItOWQwN2FkNWQ4YjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErtjwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgTUf6uZW7/hUIWNUSX/n+gwMuVeqCFpF6bqAlAh+wPbsiXg9wFzN1Q WtXWb0Gy1orjJb+7DZyhEUPHHWFIuRf/fs1iKEdwFBzWMh3lUl/U2oqmYc8qObGF X8y1a1xxf2m6EVeLkICFfBUYI76lT+ARFstRD4TygHPwgRN8CzRLcgvI44ViNyNJ NOjOQnbYJ0nbxwst3P1ZOhXiZcqdp0pcr3sf2Q5lo6C8NB8ZCWNWbQe2XzZWjlR8 VpufzlC7VH0mNW8OuZSC12W3jsx65NXCre7N08P+kK/zWazX9/N07f9hxGUoqb+c VO0lOK0WmhtXFTR8i53EVNOEmHL6KjQ= -----END CERTIFICATE-----Generated at Fri Sep 25 18:27:26 2026 by rpki-client