$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/10afaf25-818b-37d9-b5f1-801a7b1f4769.roa File: 10afaf25-818b-37d9-b5f1-801a7b1f4769.roa (raw, json) Hash identifier: I82fYRvfh+CCU4GuZOWvQz0ssrdqGcn3bFGl9WSW7+4= Subject key identifier: 2E:60:3D:70:4E:C3:C8:00:36:4C:38:6D:65:24:17:DC:63:A2:DC:C9 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D5E1A48AAD9C2B7FEF6041FE0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/10afaf25-818b-37d9-b5f1-801a7b1f4769.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 6167 IP address blocks: 166.253.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:48:aa:d9:c2:b7:fe:f6:04:1f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=34f5ed60-b853-402a-8722-6cab41b43f2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e8:ab:2e:0a:01:d7:39:5b:68:5b:3e:8b:8b: d1:f9:4f:d6:c6:5c:3c:d5:7a:2d:ba:a0:1c:08:bc: 03:ee:ea:24:84:65:83:19:23:3b:22:89:8b:0a:16: 28:bf:81:21:e4:78:88:7e:37:9a:da:e1:9f:7d:b6: 36:b7:f9:96:6b:33:b7:92:09:51:b8:d5:f8:3a:cc: 1f:41:9a:34:bf:f0:17:45:c4:50:cb:19:58:ee:3e: 79:6d:09:59:fe:17:f7:79:56:16:7d:32:f1:8f:2a: a2:f1:53:69:2d:1c:f1:da:6e:d8:73:29:1a:17:95: 80:fa:58:73:57:df:aa:3f:1b:7f:3d:bb:80:59:79: de:27:04:1b:2e:0c:e6:94:a4:c0:16:57:d0:e0:ea: 65:84:45:b9:ea:f3:0e:b0:63:48:98:79:15:3a:cd: 0d:2f:83:5f:95:70:88:6f:ff:e1:8e:7c:51:b8:b0: bc:fe:59:f7:36:3d:6a:8a:f8:9d:af:17:eb:d2:34: ba:8f:fa:38:00:68:5c:16:51:27:6a:bd:25:ca:72: ba:87:86:a7:8e:40:7e:e2:07:d8:91:41:33:90:ed: 2a:78:7f:09:b5:36:4b:88:4b:a0:42:a4:d5:89:6b: 50:24:d3:6b:ca:af:e1:91:9c:e5:c6:0d:21:4b:5f: fc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:60:3D:70:4E:C3:C8:00:36:4C:38:6D:65:24:17:DC:63:A2:DC:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/10afaf25-818b-37d9-b5f1-801a7b1f4769.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 166.253.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:15:18:11:fd:cc:b0:03:d1:b6:9c:c3:c8:42:89:ef:a1:f2: df:8f:e3:93:9c:61:85:7a:7f:3c:1c:21:09:99:2c:86:65:01: d4:f7:8f:a8:75:3e:50:c3:e5:84:92:e4:f1:e7:7e:ec:90:40: 5e:29:8d:d8:62:27:6a:02:1a:01:a6:83:ee:19:07:af:21:9b: 3a:8e:bd:a2:75:01:47:35:b6:bc:13:b2:29:14:71:5f:b7:8c: 1a:04:7a:2c:b0:bc:3f:d7:33:eb:80:be:d0:cf:b6:08:28:59: 1b:46:19:43:23:3c:33:51:be:7c:d6:76:4f:a3:f3:e9:54:1b: 93:e9:9c:fd:92:46:5f:2b:ae:f3:3a:e2:dd:9e:33:bf:97:20: b9:ff:98:94:5b:92:2b:c1:49:08:43:e8:05:4e:12:a2:da:6e: 4e:8e:3f:11:19:5c:d8:db:60:b8:20:2e:34:39:5d:11:96:c5: 5f:dd:5d:99:bf:c5:65:84:a4:92:4c:ea:88:56:02:a8:dc:7d: 8a:a0:8b:5f:3a:10:2a:72:2f:b6:94:51:91:77:0b:8d:f2:57: a0:db:6b:40:0b:43:ce:b5:ce:38:fd:1e:20:5a:71:e2:3e:ef: 29:a5:0c:2a:d8:d4:de:6e:df:79:ca:fe:cd:33:9a:87:45:d2: 6e:67:00:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGkiq2cK3/vYEH+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk MzRmNWVkNjAtYjg1My00MDJhLTg3MjItNmNhYjQxYjQzZjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuirLgoB1zlbaFs+i4vR+U/Wxlw81XotuqAc CLwD7uokhGWDGSM7IomLChYov4Eh5HiIfjea2uGffbY2t/mWazO3kglRuNX4Oswf QZo0v/AXRcRQyxlY7j55bQlZ/hf3eVYWfTLxjyqi8VNpLRzx2m7YcykaF5WA+lhz V9+qPxt/PbuAWXneJwQbLgzmlKTAFlfQ4OplhEW56vMOsGNImHkVOs0NL4NflXCI b//hjnxRuLC8/ln3Nj1qividrxfr0jS6j/o4AGhcFlEnar0lynK6h4anjkB+4gfY kUEzkO0qeH8JtTZLiEugQqTViWtQJNNryq/hkZzlxg0hS1/8CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5gPXBOw8gANkw4bWUkF9xjotzJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTBhZmFmMjUtODE4Yi0z N2Q5LWI1ZjEtODAxYTdiMWY0NzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHpv0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcVGBH9zLAD0bacw8hCie+h8t+P45OcYYV6fzwcIQmZLIZlAdT3j6h1 PlDD5YSS5PHnfuyQQF4pjdhiJ2oCGgGmg+4ZB68hmzqOvaJ1AUc1trwTsikUcV+3 jBoEeiywvD/XM+uAvtDPtggoWRtGGUMjPDNRvnzWdk+j8+lUG5PpnP2SRl8rrvM6 4t2eM7+XILn/mJRbkivBSQhD6AVOEqLabk6OPxEZXNjbYLggLjQ5XRGWxV/dXZm/ xWWEpJJM6ohWAqjcfYqgi186ECpyL7aUUZF3C43yV6Dba0ALQ861zjj9HiBaceI+ 7ymlDCrY1N5u33nK/s0zmodF0m5nAHM= -----END CERTIFICATE-----Generated at Mon Apr 13 17:21:04 2026 by rpki-client