$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a645de5-12c6-3586-98e4-f14b53efb238.roa File: 0a645de5-12c6-3586-98e4-f14b53efb238.roa (raw, json) Hash identifier: QcuMp1FX0mFJhBCUdCAnFuTa3ysv5yGY6HiiI3iBfi4= Subject key identifier: 5D:EB:2B:AB:85:5B:6C:3E:C3:48:2A:8B:E1:1C:CA:90:D8:18:D3:09 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EF7179C4DB8058E4EDE154400 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a645de5-12c6-3586-98e4-f14b53efb238.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 701 IP address blocks: 71.161.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:9c:4d:b8:05:8e:4e:de:15:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=ea892299-0ab4-4ffd-a229-cfa4d16e4809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:29:c3:9f:b6:57:e8:c0:53:cd:bd:1c:ed:0f: 25:c4:28:0d:4b:cf:f4:b4:12:0d:93:8e:1e:c3:7c: 56:aa:b1:ba:1f:b1:6c:69:ee:65:c5:b8:a9:4d:41: 55:df:52:5a:f2:02:dd:42:28:df:e0:77:5e:47:44: c9:74:18:67:80:df:92:ad:cf:0e:0a:83:8e:36:31: a0:48:3d:ea:94:13:4c:a9:0a:72:d5:94:30:4f:28: f6:24:eb:b0:05:69:79:41:a0:60:49:84:b7:7d:5f: 24:cc:36:8a:c5:11:f2:4b:5e:3e:a5:ff:1c:90:03: a2:0f:a6:83:62:55:be:ad:b8:9c:a9:f7:3f:69:81: 65:40:11:81:9f:85:ce:e2:9a:3d:15:8d:9a:35:7d: 15:11:24:1d:ee:e9:5b:dc:f3:2c:10:be:5a:95:1c: 80:ad:cc:45:59:87:f2:ef:10:31:01:aa:a1:87:d9: 52:c4:e2:c7:45:20:b7:98:de:74:08:77:b2:c4:f0: 5d:81:97:88:7a:95:e2:09:4f:4c:e2:a3:79:1d:b9: 5b:b2:74:06:e7:4c:f8:7f:8b:78:b6:d8:f7:17:3b: e3:98:ef:77:3b:e7:93:27:a8:9d:ce:08:4f:25:39: ee:53:ce:51:ba:0b:43:70:30:c1:b7:8d:a4:15:e8: af:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:EB:2B:AB:85:5B:6C:3E:C3:48:2A:8B:E1:1C:CA:90:D8:18:D3:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0a645de5-12c6-3586-98e4-f14b53efb238.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.161.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:86:d1:1b:8c:08:0b:f2:4f:ce:7d:3f:4b:c9:4b:d9:dc:b9: 12:7b:66:f0:33:c8:84:51:7b:76:29:38:6c:16:3b:69:cc:64: 4a:9d:54:cb:e0:a1:33:a9:5e:d9:eb:ec:e8:c0:33:2e:23:07: d0:ab:36:dc:b8:e3:a1:d6:01:de:55:e5:1b:44:78:43:75:e5: f8:93:0a:a8:44:38:a1:ae:f9:5b:5d:3f:ef:93:45:2a:95:86: a3:4c:1f:fa:57:1f:5f:87:14:4c:53:ec:c5:62:0e:51:4f:02: a3:b0:fa:b4:3a:38:81:18:cc:96:1f:e8:ae:0b:b8:f6:ea:b9: f0:d3:e4:3f:8f:1d:3d:e2:15:9c:6e:a5:29:d2:0b:99:11:e9: 42:ce:8f:96:5c:ec:11:25:23:65:96:28:d6:b1:bf:c8:72:0f: 11:db:7e:98:97:c2:a3:77:dd:91:66:62:61:42:b9:53:d4:e0: fb:73:c9:82:44:03:8d:cb:d3:03:1b:48:25:96:69:4f:1f:f1: 60:40:f1:a1:15:a0:e4:90:8c:37:5d:5c:e2:43:a8:7e:8b:63: b3:c8:e6:75:fe:d4:88:88:17:22:d8:c4:22:ad:d9:d1:a3:f4: 96:2c:c5:99:bf:11:e7:ac:e9:f0:c6:44:56:db:9b:74:0e:ce: 59:b8:1e:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F5xNuAWOTt4VRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk ZWE4OTIyOTktMGFiNC00ZmZkLWEyMjktY2ZhNGQxNmU0ODA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCnDn7ZX6MBTzb0c7Q8lxCgNS8/0tBINk44e w3xWqrG6H7Fsae5lxbipTUFV31Ja8gLdQijf4HdeR0TJdBhngN+Src8OCoOONjGg SD3qlBNMqQpy1ZQwTyj2JOuwBWl5QaBgSYS3fV8kzDaKxRHyS14+pf8ckAOiD6aD YlW+rbicqfc/aYFlQBGBn4XO4po9FY2aNX0VESQd7ulb3PMsEL5alRyArcxFWYfy 7xAxAaqhh9lSxOLHRSC3mN50CHeyxPBdgZeIepXiCU9M4qN5HblbsnQG50z4f4t4 ttj3FzvjmO93O+eTJ6idzghPJTnuU85RugtDcDDBt42kFeivuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3rK6uFW2w+w0gqi+EcypDYGNMJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGE2NDVkZTUtMTJjNi0z NTg2LTk4ZTQtZjE0YjUzZWZiMjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER6HwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuG0RuMCAvyT859P0vJS9ncuRJ7ZvAzyIRRe3YpOGwWO2nMZEqdVMvg oTOpXtnr7OjAMy4jB9CrNty446HWAd5V5RtEeEN15fiTCqhEOKGu+VtdP++TRSqV hqNMH/pXH1+HFExT7MViDlFPAqOw+rQ6OIEYzJYf6K4LuPbqufDT5D+PHT3iFZxu pSnSC5kR6ULOj5Zc7BElI2WWKNaxv8hyDxHbfpiXwqN33ZFmYmFCuVPU4PtzyYJE A43L0wMbSCWWaU8f8WBA8aEVoOSQjDddXOJDqH6LY7PI5nX+1IiIFyLYxCKt2dGj 9JYsxZm/Eees6fDGRFbbm3QOzlm4Hv8= -----END CERTIFICATE-----Generated at Sun Sep 13 16:41:52 2026 by rpki-client