$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f9ee0cb-e49a-3a5e-a595-1f2e55d75a5e.roa File: 0f9ee0cb-e49a-3a5e-a595-1f2e55d75a5e.roa (raw, json) Hash identifier: 5HQLrs/r8B0eqhmgbY/vQ0QeQKmHy7qkI1bTu3hQKBg= Subject key identifier: 44:46:34:72:2B:7A:E2:95:7E:41:7B:97:B3:0F:2B:6F:38:97:77:A7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D5E1A5C7FA8EBAE5C31AC2E80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f9ee0cb-e49a-3a5e-a595-1f2e55d75a5e.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 6167 IP address blocks: 166.144.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:5c:7f:a8:eb:ae:5c:31:ac:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=4b9cdffd-4a65-4906-8135-c6f12dde1cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:65:6b:5e:d6:ba:5b:03:cc:a0:cd:c9:a2:d4: a7:ce:c8:a1:b9:02:70:a1:a2:59:2a:35:17:65:6f: 68:82:44:63:ec:52:5a:d7:22:21:c2:33:d1:ba:24: cd:74:0f:37:be:8b:62:89:05:1e:42:ae:1e:9e:e1: 54:92:16:fd:19:f9:85:d3:4d:3f:d6:a8:86:e1:22: cb:72:f7:df:cd:bb:ca:97:65:aa:af:85:49:f8:53: 6e:50:14:ec:fb:ad:ea:0f:dd:ec:9f:00:46:a1:01: a0:b4:6a:1e:03:24:85:0e:43:25:16:79:05:5c:56: f4:58:60:94:4a:40:55:fa:e0:86:a6:2e:18:f5:33: 63:f2:83:17:20:2c:40:1c:9d:ec:71:f5:c2:91:43: 69:b8:ac:7d:ae:81:a0:bb:f0:5b:75:0a:3e:a3:84: a0:6b:c9:cc:66:32:56:f8:92:74:85:fd:5b:90:e4: a7:58:36:d1:88:30:10:24:e3:89:1b:13:ea:cf:d7: b0:ba:62:99:6c:91:75:39:12:0c:62:78:87:ad:a6: fa:c7:1c:5c:71:c3:f4:53:c7:79:6a:0c:db:be:c1: 27:77:0a:9d:9e:b6:39:8f:28:94:d1:e7:95:31:d6: 02:b1:28:46:ad:40:44:fc:a7:2d:cd:54:fc:b1:a4: 63:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:46:34:72:2B:7A:E2:95:7E:41:7B:97:B3:0F:2B:6F:38:97:77:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f9ee0cb-e49a-3a5e-a595-1f2e55d75a5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 166.144.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:ff:67:4e:bd:b3:08:27:39:e8:d8:c8:85:eb:49:bc:40:4e: 1d:56:d7:08:55:1c:28:9f:b2:27:1a:80:f4:6b:9c:1b:4e:de: 98:1c:fb:10:b1:53:e6:92:6f:cc:86:0a:6c:63:03:95:f7:0f: c5:fb:e2:78:54:cc:62:69:7b:60:72:a7:0e:7a:9f:a5:14:28: 24:12:18:86:b5:8e:54:6d:f0:e1:c5:8a:9b:4b:62:61:91:7b: 54:78:32:5a:e8:16:fa:00:ab:56:42:ae:80:39:23:42:12:9f: b8:8a:63:d7:55:eb:f4:cf:71:09:00:62:ec:53:2c:ac:54:f4: 42:1f:2a:09:40:74:5e:53:3c:aa:d4:26:40:40:d5:a6:88:be: c3:b6:08:59:5e:6e:32:8d:44:e2:1c:38:42:f4:2a:5e:9c:e4: 16:97:3b:65:fa:33:8d:df:81:74:4d:b5:43:6c:44:cc:5e:af: b2:77:e4:13:9c:8c:52:a3:d5:f1:a9:5a:e2:4d:d7:7f:c8:05: f0:59:71:9e:7a:e0:c6:79:f5:93:21:c4:d6:cb:b5:4e:79:ec: 97:d3:b2:04:f0:fc:73:f0:e3:a9:08:14:09:c4:55:93:12:79: 35:d2:d3:a4:a9:02:26:98:99:fc:fa:ca:fb:9a:4b:ff:4c:a3: 81:70:8f:5e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1eGlx/qOuuXDGsLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk NGI5Y2RmZmQtNGE2NS00OTA2LTgxMzUtYzZmMTJkZGUxY2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8mVrXta6WwPMoM3JotSnzsihuQJwoaJZKjUX ZW9ogkRj7FJa1yIhwjPRuiTNdA83votiiQUeQq4enuFUkhb9GfmF000/1qiG4SLL cvffzbvKl2Wqr4VJ+FNuUBTs+63qD93snwBGoQGgtGoeAySFDkMlFnkFXFb0WGCU SkBV+uCGpi4Y9TNj8oMXICxAHJ3scfXCkUNpuKx9roGgu/BbdQo+o4Sga8nMZjJW +JJ0hf1bkOSnWDbRiDAQJOOJGxPqz9ewumKZbJF1ORIMYniHrab6xxxcccP0U8d5 agzbvsEndwqdnrY5jyiU0eeVMdYCsShGrUBE/KctzVT8saRjWQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFERGNHIreuKVfkF7l7MPK284l3enMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGY5ZWUwY2ItZTQ5YS0z YTVlLWE1OTUtMWYyZTU1ZDc1YTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAppAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAgv9nTr2zCCc56NjIhetJvEBOHVbXCFUcKJ+yJxqA9GucG07emBz7ELFT 5pJvzIYKbGMDlfcPxfvieFTMYml7YHKnDnqfpRQoJBIYhrWOVG3w4cWKm0tiYZF7 VHgyWugW+gCrVkKugDkjQhKfuIpj11Xr9M9xCQBi7FMsrFT0Qh8qCUB0XlM8qtQm QEDVpoi+w7YIWV5uMo1E4hw4QvQqXpzkFpc7Zfozjd+BdE21Q2xEzF6vsnfkE5yM UqPV8ala4k3Xf8gF8Flxnnrgxnn1kyHE1su1Tnnsl9OyBPD8c/DjqQgUCcRVkxJ5 NdLTpKkCJpiZ/PrK+5pL/0yjgXCPXg== -----END CERTIFICATE-----Generated at Mon Apr 13 18:23:15 2026 by rpki-client