$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/321fb60d-9686-3132-a037-9e5f9e621a79.roa File: 321fb60d-9686-3132-a037-9e5f9e621a79.roa (raw, json) Hash identifier: Ofjpt2ScJhdhf8KS8ZiTjnz9hh0/lVEz4veN0NJkrkU= Subject key identifier: 0B:66:ED:B3:91:92:DD:34:A4:07:75:F6:48:51:8E:82:63:8D:E0:39 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F89A8805F86261ABB8DAF4BC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/321fb60d-9686-3132-a037-9e5f9e621a79.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 701 IP address blocks: 216.156.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:80:5f:86:26:1a:bb:8d:af:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=9ddeec9d-2033-4d35-817c-117b0362adf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bc:ad:27:64:e1:bb:31:15:f7:d4:27:f2:22: 2d:c1:06:7b:f3:e1:89:df:c7:0f:59:90:33:22:37: 38:e3:45:d7:89:bc:86:ff:a2:6f:80:85:74:74:1d: da:0a:3f:16:d6:ac:37:51:5c:86:f8:eb:86:df:a2: b2:d2:b8:15:54:42:c4:c5:e8:35:d4:a2:d0:c4:66: 0e:02:df:67:27:2a:18:a4:48:08:dd:de:7d:3f:ee: 84:34:db:52:58:58:75:6c:ba:a3:5e:dc:a4:88:8a: dc:4a:83:d6:ed:e9:a4:cb:fa:9e:cf:cf:fe:5d:09: d8:c6:90:60:8d:2e:df:64:8d:b9:26:03:e3:5f:8f: 41:4d:d8:24:37:3c:1d:b2:4b:93:f4:26:7e:3e:1d: 5f:1e:3d:8e:d2:cf:da:c5:b5:62:06:c3:45:e2:77: 6f:8a:cb:e0:92:03:bb:2a:de:9a:0d:cb:d1:df:91: 10:c2:45:d5:b1:ac:45:5c:fc:d7:9e:f0:e5:de:13: 05:da:69:2e:9d:cb:1a:5a:0c:9b:d4:46:d4:ea:49: 86:22:26:41:35:11:c5:69:59:23:fa:65:b6:e3:47: a4:4d:c1:e6:2c:7b:d5:ec:dd:5e:7f:ee:60:8f:57: 2c:c5:60:ee:50:e4:83:76:38:2e:dd:73:d9:38:f5: 0f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:66:ED:B3:91:92:DD:34:A4:07:75:F6:48:51:8E:82:63:8D:E0:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/321fb60d-9686-3132-a037-9e5f9e621a79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 216.156.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:da:1f:37:33:b3:6d:8f:b0:89:9c:c3:ee:01:75:93:73:3f: 6d:5a:e4:ac:4f:ff:e5:6f:6c:31:db:60:08:26:67:a4:92:dd: 31:f6:c6:b0:a6:5f:7f:54:d3:0d:8b:12:a8:1c:09:a2:f8:f3: bb:b2:8a:05:e7:53:26:99:19:41:1c:0f:33:f6:d6:57:0b:bb: 8f:d2:4b:1c:33:3a:a1:ad:96:d1:28:da:dc:81:0a:9e:58:76: e7:0e:b4:c4:b3:13:e4:c6:99:92:5c:8d:71:41:ca:7d:78:a4: 19:25:06:63:23:3f:74:2e:75:c0:81:10:5a:3f:8e:51:78:39: 3a:fb:46:d6:e9:0e:c1:01:5d:ab:a2:aa:84:8b:eb:05:62:49: 19:99:fc:a1:20:37:b5:e7:07:29:af:3a:4a:d9:bf:3e:49:93: b3:e6:b2:8b:df:fb:de:11:a8:ff:28:63:fb:ae:57:51:53:92: 82:1a:7e:0c:53:d4:26:91:19:b6:61:58:df:7e:1c:ec:a4:6e: 07:04:a3:10:0b:96:02:8e:4d:5e:95:c8:6c:e3:df:c5:45:50: df:07:a8:a8:65:22:8e:2e:78:75:27:b0:71:4f:b0:a3:d0:bf: 2e:3a:32:e1:8b:d8:49:00:6a:72:78:b6:fc:5f:da:8b:23:44: 5d:85:b1:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqIBfhiYau42vS8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk OWRkZWVjOWQtMjAzMy00ZDM1LTgxN2MtMTE3YjAzNjJhZGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrytJ2ThuzEV99Qn8iItwQZ78+GJ38cPWZAz Ijc440XXibyG/6JvgIV0dB3aCj8W1qw3UVyG+OuG36Ky0rgVVELExeg11KLQxGYO At9nJyoYpEgI3d59P+6ENNtSWFh1bLqjXtykiIrcSoPW7emky/qez8/+XQnYxpBg jS7fZI25JgPjX49BTdgkNzwdskuT9CZ+Ph1fHj2O0s/axbViBsNF4ndvisvgkgO7 Kt6aDcvR35EQwkXVsaxFXPzXnvDl3hMF2mkuncsaWgyb1EbU6kmGIiZBNRHFaVkj +mW240ekTcHmLHvV7N1ef+5gj1csxWDuUOSDdjgu3XPZOPUPQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtm7bORkt00pAd19khRjoJjjeA5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzIxZmI2MGQtOTY4Ni0z MTMyLWEwMzctOWU1ZjllNjIxYTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JyYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDaHzczs22PsImcw+4BdZNzP21a5KxP/+VvbDHbYAgmZ6SS3TH2xrCm X39U0w2LEqgcCaL487uyigXnUyaZGUEcDzP21lcLu4/SSxwzOqGtltEo2tyBCp5Y ducOtMSzE+TGmZJcjXFByn14pBklBmMjP3QudcCBEFo/jlF4OTr7RtbpDsEBXaui qoSL6wViSRmZ/KEgN7XnBymvOkrZvz5Jk7Pmsovf+94RqP8oY/uuV1FTkoIafgxT 1CaRGbZhWN9+HOykbgcEoxALlgKOTV6VyGzj38VFUN8HqKhlIo4ueHUnsHFPsKPQ vy46MuGL2EkAanJ4tvxf2osjRF2FsaQ= -----END CERTIFICATE-----Generated at Sun Nov 1 02:52:30 2026 by rpki-client