$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29f2f972-8653-3688-9bc8-f78adbb0d8ef.roa File: 29f2f972-8653-3688-9bc8-f78adbb0d8ef.roa (raw, json) Hash identifier: 6haDHvkNMtfQe4xbbdTGQGxSa/gSFPZAbzm38wBjAfw= Subject key identifier: CE:85:2E:B9:C5:F9:1C:CC:6B:D0:D2:FA:09:A3:22:22:C9:F2:C5:69 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F89A87FE252413783D3843E00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29f2f972-8653-3688-9bc8-f78adbb0d8ef.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 701 IP address blocks: 209.116.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:7f:e2:52:41:37:83:d3:84:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=7572b564-1110-43a3-b205-98f36e599a28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:4f:13:e3:cc:89:5c:ec:aa:21:9c:6a:c2:42: 2b:8c:73:94:fa:e3:cc:0e:3c:ba:f2:79:09:57:2a: c9:76:70:65:3f:6b:0b:9c:8a:e5:d4:3e:f5:44:dc: df:da:bd:43:0f:94:19:04:ca:96:b2:1e:a0:9d:e4: 62:01:40:1f:fc:f7:c9:e7:ae:55:63:ab:32:be:77: fc:6d:89:b6:18:91:73:a3:28:28:8c:09:3c:f5:23: c9:95:a1:b6:ce:6a:08:c7:40:72:75:56:f3:2b:22: e3:2c:fa:39:75:b1:11:94:39:16:24:9b:ae:99:71: a6:a7:50:ae:9c:f0:3e:3a:06:c8:3b:41:af:eb:5c: 9c:b6:80:1f:d9:6b:ba:2a:f7:89:0b:21:a5:d6:ca: 8b:75:3d:bc:b8:74:cb:a7:46:93:61:a6:3c:de:a5: f9:16:66:7c:4f:ce:85:39:b5:a1:eb:40:ea:6c:39: b2:02:b7:39:7e:6a:b7:bd:c1:22:75:19:15:87:19: 8f:1c:7f:6e:f3:46:5e:af:a2:47:7a:47:9b:91:e8: c8:14:50:84:4c:b6:07:51:d9:23:9b:c0:27:b2:59: 90:94:3e:6a:b7:ee:c5:7d:27:49:7c:7c:3e:5d:8b: b8:e5:90:d9:ac:20:6c:35:26:41:3c:a1:2a:5f:39: 21:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:85:2E:B9:C5:F9:1C:CC:6B:D0:D2:FA:09:A3:22:22:C9:F2:C5:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29f2f972-8653-3688-9bc8-f78adbb0d8ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 209.116.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:05:b5:8d:8b:a5:9c:22:34:79:38:05:8b:07:37:25:3d:9e: 82:bc:f9:0d:e8:76:54:61:9c:3e:10:ec:d9:2c:0c:33:d0:64: 0e:c1:60:ce:ce:98:59:77:51:31:f4:9c:c0:b2:4a:eb:1c:8d: 03:78:32:23:a5:c7:56:6a:25:45:c7:9c:94:83:e3:bd:87:83: 4d:31:50:b0:ea:cb:87:28:eb:fb:c8:8f:fa:ab:17:b2:7d:56: fe:5f:84:6b:a2:00:a5:4d:cc:60:e5:59:8d:fc:ab:a1:64:ad: 4d:53:81:df:30:31:4d:31:e7:14:68:79:a2:61:cb:af:1d:ce: 9c:74:dc:51:78:41:d0:38:e9:d1:f0:b7:4e:64:18:4a:92:d3: ff:53:e0:7f:82:3e:0f:0b:8a:ae:6a:a7:6d:9d:29:61:bb:0a: 31:ff:93:c7:15:f5:6f:11:c5:e4:a3:87:5f:8b:39:59:e6:ae: b2:65:4e:29:2d:dd:ee:20:23:5d:36:3a:dc:c1:48:c4:04:89: 00:71:30:78:93:a9:0a:7b:09:d5:b4:7a:82:96:23:b2:68:92: 68:0e:8c:0e:93:cb:92:2e:f8:f2:54:32:61:4a:61:95:a6:64: ab:5b:54:ca:5b:d4:af:18:27:fb:3d:ba:09:76:42:ef:42:11: b2:77:e5:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqH/iUkE3g9OEPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk NzU3MmI1NjQtMTExMC00M2EzLWIyMDUtOThmMzZlNTk5YTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgk8T48yJXOyqIZxqwkIrjHOU+uPMDjy68nkJ VyrJdnBlP2sLnIrl1D71RNzf2r1DD5QZBMqWsh6gneRiAUAf/PfJ565VY6syvnf8 bYm2GJFzoygojAk89SPJlaG2zmoIx0BydVbzKyLjLPo5dbERlDkWJJuumXGmp1Cu nPA+OgbIO0Gv61yctoAf2Wu6KveJCyGl1sqLdT28uHTLp0aTYaY83qX5FmZ8T86F ObWh60DqbDmyArc5fmq3vcEidRkVhxmPHH9u80Zer6JHekebkejIFFCETLYHUdkj m8AnslmQlD5qt+7FfSdJfHw+XYu45ZDZrCBsNSZBPKEqXzkhzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6FLrnF+RzMa9DS+gmjIiLJ8sVpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjlmMmY5NzItODY1My0z Njg4LTliYzgtZjc4YWRiYjBkOGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XSYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALgFtY2LpZwiNHk4BYsHNyU9noK8+Q3odlRhnD4Q7NksDDPQZA7BYM7O mFl3UTH0nMCySuscjQN4MiOlx1ZqJUXHnJSD472Hg00xULDqy4co6/vIj/qrF7J9 Vv5fhGuiAKVNzGDlWY38q6FkrU1Tgd8wMU0x5xRoeaJhy68dzpx03FF4QdA46dHw t05kGEqS0/9T4H+CPg8Liq5qp22dKWG7CjH/k8cV9W8RxeSjh1+LOVnmrrJlTikt 3e4gI102OtzBSMQEiQBxMHiTqQp7CdW0eoKWI7JokmgOjA6Ty5Iu+PJUMmFKYZWm ZKtbVMpb1K8YJ/s9ugl2Qu9CEbJ35XM= -----END CERTIFICATE-----Generated at Sun Nov 1 05:56:57 2026 by rpki-client