$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/10afaf25-818b-37d9-b5f1-801a7b1f4769.roa File: 10afaf25-818b-37d9-b5f1-801a7b1f4769.roa (raw, json) Hash identifier: /jcilVz4w4mm0dliorQ8R2DsQMwFhLkTk2rC5Ma3Tu0= Subject key identifier: 32:F2:BF:49:34:68:40:85:87:99:03:4D:7A:7B:FC:39:43:00:F3:8F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584E3E5F1F360B937623FAE8D280 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/10afaf25-818b-37d9-b5f1-801a7b1f4769.roa Signing time: Sun 21 Jun 2026 09:00:12 +0000 ROA not before: Sun 21 Jun 2026 09:00:12 +0000 ROA not after: Sat 19 Sep 2026 09:00:12 +0000 asID: 6167 IP address blocks: 166.253.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3e:5f:1f:36:0b:93:76:23:fa:e8:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 21 09:00:12 2026 GMT Not After : Sep 19 09:00:12 2026 GMT Subject: CN=2213c64c-b434-4eb5-a4dc-e4b3e1a30066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fa:f2:3e:44:d5:db:2f:a8:c7:5b:22:29:62: 0b:9e:4e:05:06:7d:80:bb:22:ec:2a:e3:9c:e6:ec: 78:16:a1:b4:77:02:af:62:8d:30:61:c0:37:b2:84: 09:fc:c6:5d:4b:f2:8e:a3:a6:75:b7:f8:ac:67:7b: 74:71:b0:8d:4c:9c:13:02:d4:2a:d3:3f:9a:bc:e8: 0c:42:36:d1:04:19:02:a4:5d:57:19:9e:86:49:77: 05:fb:12:e6:d8:b3:39:66:84:99:8a:a2:6e:68:64: f2:74:80:42:1d:75:03:53:45:34:0d:60:39:d9:ab: 88:7e:30:a9:76:02:5b:a2:0c:86:ca:4c:11:e2:cd: ab:75:81:50:eb:d3:5c:d7:c5:4e:a4:fd:b0:0c:12: 57:b5:6d:39:d0:22:80:76:25:c8:95:4c:0c:00:e0: 62:4c:1c:0e:ba:fe:f0:c2:f7:2a:df:59:b3:7b:c0: 90:f9:19:f3:33:59:6c:dd:35:53:7b:81:04:34:3c: b2:96:cd:6e:bb:f8:fc:5e:08:19:07:65:d6:e5:81: 25:f0:08:5e:cb:a2:0e:c6:f6:16:91:87:83:0d:b0: 5a:8d:2b:6f:7a:ff:3f:ca:f6:5c:a8:22:62:29:a7: 5b:d7:68:3a:e9:79:d1:f2:e4:01:d9:3f:fd:ca:c0: 80:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F2:BF:49:34:68:40:85:87:99:03:4D:7A:7B:FC:39:43:00:F3:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/10afaf25-818b-37d9-b5f1-801a7b1f4769.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 166.253.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:47:e3:37:0b:5c:50:1b:14:89:d0:1e:5c:bc:5e:e8:f8:d2: 85:98:16:d4:a2:22:c3:b2:2d:cb:e0:29:c3:49:5e:21:ca:b4: ee:d1:a2:d6:81:a8:64:ac:7b:52:e9:e2:30:65:6f:79:02:f9: 31:d5:ba:ec:2f:a3:a4:28:06:ec:44:15:7e:dc:77:d5:60:4f: 9b:05:54:c9:5b:d9:4f:4f:12:95:d4:7a:90:66:e7:ae:f2:f8: 69:ae:fb:98:66:0e:1e:ac:ec:9e:67:41:7a:59:f7:ae:c5:14: 07:88:2d:46:76:ce:55:c4:68:e3:fd:16:fd:54:ad:b8:ad:71: 34:9d:14:7a:40:20:a1:8c:39:a3:27:9e:94:ff:57:87:5a:f5: 79:c6:3c:97:3d:0a:5f:73:fc:e9:1a:ca:66:72:df:e4:80:63: f1:32:bd:0a:3a:23:06:b5:62:a3:27:79:1c:a3:02:0f:43:00: 76:db:6d:df:0d:ae:ae:95:e9:99:7d:d5:24:ec:58:a4:9f:16: eb:7d:73:22:e4:2f:58:f8:6c:90:be:51:3a:75:35:98:f5:f0: c0:7a:85:06:7f:33:33:bc:9c:05:5c:73:8a:64:9f:75:94:1e: 6b:d5:db:ae:1c:72:6f:1e:4f:47:00:eb:a4:88:a5:2a:58:06: ca:bc:78:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4+Xx82C5N2I/ro0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk MjIxM2M2NGMtYjQzNC00ZWI1LWE0ZGMtZTRiM2UxYTMwMDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/ryPkTV2y+ox1siKWILnk4FBn2AuyLsKuOc 5ux4FqG0dwKvYo0wYcA3soQJ/MZdS/KOo6Z1t/isZ3t0cbCNTJwTAtQq0z+avOgM QjbRBBkCpF1XGZ6GSXcF+xLm2LM5ZoSZiqJuaGTydIBCHXUDU0U0DWA52auIfjCp dgJbogyGykwR4s2rdYFQ69Nc18VOpP2wDBJXtW050CKAdiXIlUwMAOBiTBwOuv7w wvcq31mze8CQ+RnzM1ls3TVTe4EENDyyls1uu/j8XggZB2XW5YEl8Ahey6IOxvYW kYeDDbBajStvev8/yvZcqCJiKadb12g66XnR8uQB2T/9ysCAhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLyv0k0aECFh5kDTXp7/DlDAPOPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTBhZmFmMjUtODE4Yi0z N2Q5LWI1ZjEtODAxYTdiMWY0NzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHpv0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdH4zcLXFAbFInQHly8Xuj40oWYFtSiIsOyLcvgKcNJXiHKtO7RotaB qGSse1Lp4jBlb3kC+THVuuwvo6QoBuxEFX7cd9VgT5sFVMlb2U9PEpXUepBm567y +Gmu+5hmDh6s7J5nQXpZ967FFAeILUZ2zlXEaOP9Fv1UrbitcTSdFHpAIKGMOaMn npT/V4da9XnGPJc9Cl9z/OkaymZy3+SAY/EyvQo6Iwa1YqMneRyjAg9DAHbbbd8N rq6V6Zl91STsWKSfFut9cyLkL1j4bJC+UTp1NZj18MB6hQZ/MzO8nAVcc4pkn3WU HmvV264ccm8eT0cA66SIpSpYBsq8eHA= -----END CERTIFICATE-----Generated at Mon Jul 13 10:39:19 2026 by rpki-client