$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35331e2e-b0e5-3e19-aacc-1dd54ba0be69.roa File: 35331e2e-b0e5-3e19-aacc-1dd54ba0be69.roa (raw, json) Hash identifier: WZfOLJYsHIVtPPkTSGzNXQ3zXfDh2Ws0Kvb2iu928+Y= Subject key identifier: 30:6E:A5:C3:7A:13:96:F0:3D:E0:76:56:50:08:63:B8:03:D4:5F:4F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EEEB76CBDFF68B08DBA9AC480 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35331e2e-b0e5-3e19-aacc-1dd54ba0be69.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 701 IP address blocks: 71.255.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:6c:bd:ff:68:b0:8d:ba:9a:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=1732e15a-ef91-442f-b980-c7ad6b6fb1d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ee:e6:42:46:62:94:af:55:90:29:61:b3:3a: e7:d3:d8:4f:77:13:6c:07:ac:45:2c:79:ff:f3:30: 28:db:dc:21:bb:a7:0b:67:ae:e5:be:5a:80:e0:80: f9:b7:46:8d:bc:2b:91:3a:9d:31:f5:d9:39:f7:57: f0:9d:3a:f1:29:ee:6b:62:09:06:95:47:1b:2c:00: 18:13:42:c8:e1:0c:54:71:c9:0a:18:d2:d8:d3:2f: 38:de:06:02:51:15:85:f7:56:7f:a4:eb:f1:f9:b8: 7d:f0:88:16:db:89:af:96:f9:78:37:f0:39:f5:5a: c6:ea:96:93:aa:e4:cc:24:ec:f8:ed:39:19:3d:6e: eb:1f:76:af:fc:15:c2:72:e0:0b:8a:bd:39:00:3c: 4e:3f:da:4c:53:7d:ee:b3:6a:b1:41:00:ea:6b:3c: b1:5a:a7:0c:eb:3d:81:05:ed:55:41:46:e2:d6:da: 28:12:a6:70:38:3c:88:ca:63:f0:7b:73:6f:2b:f5: 0c:1c:fc:6a:2f:4c:72:65:66:21:e7:2d:44:43:18: 37:74:71:f1:4c:ed:ba:27:bf:20:33:e4:05:78:a5: 97:2a:58:7d:bc:83:55:d4:ac:c6:71:16:0a:df:93: a5:9f:42:cd:bb:01:52:0a:51:47:4b:e2:19:48:0a: b7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6E:A5:C3:7A:13:96:F0:3D:E0:76:56:50:08:63:B8:03:D4:5F:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35331e2e-b0e5-3e19-aacc-1dd54ba0be69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.255.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:6f:7b:0c:41:a4:94:bb:1f:49:5d:7d:ad:c1:b3:23:b7:e2: 89:45:ed:59:dc:0e:56:10:4a:7b:5f:8c:2b:d6:78:95:ca:65: 30:55:1b:8c:8e:58:75:75:33:f6:6b:61:03:64:81:95:12:75: 19:aa:39:0b:88:b2:0e:3b:70:a5:dc:62:22:11:be:cb:85:27: c9:6e:02:13:a8:27:0f:1e:63:ef:54:60:4e:15:82:73:7d:2d: b6:db:dd:49:a5:3c:72:fc:da:12:b7:bf:64:52:31:fe:c4:94: c7:04:06:97:f3:72:48:6c:e4:19:7d:5c:56:2a:e8:ef:53:08: d4:8c:20:ff:75:39:65:ec:da:cc:20:b3:57:b5:44:ae:11:c8: 35:92:89:f4:39:23:61:19:5c:2a:a0:1f:14:f0:cd:c5:4f:fe: 0f:98:77:38:da:25:bb:8e:19:c1:eb:84:f1:71:2e:2a:01:89: 60:6f:b3:19:b7:aa:40:6e:70:2b:f8:2f:89:04:f4:fd:66:cb: 29:90:6d:01:16:e3:fe:f4:5c:ee:0a:bd:fa:0c:f1:4f:69:8c: f6:99:12:ad:ef:d5:ec:6e:1f:54:b8:c0:6f:b4:aa:cd:6d:ad: c8:79:55:42:db:41:82:86:86:c3:93:dd:45:d0:30:cc:40:48: 67:cc:88:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut2y9/2iwjbqaxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk MTczMmUxNWEtZWY5MS00NDJmLWI5ODAtYzdhZDZiNmZiMWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou7mQkZilK9VkClhszrn09hPdxNsB6xFLHn/ 8zAo29whu6cLZ67lvlqA4ID5t0aNvCuROp0x9dk591fwnTrxKe5rYgkGlUcbLAAY E0LI4QxUcckKGNLY0y843gYCURWF91Z/pOvx+bh98IgW24mvlvl4N/A59VrG6paT quTMJOz47TkZPW7rH3av/BXCcuALir05ADxOP9pMU33us2qxQQDqazyxWqcM6z2B Be1VQUbi1tooEqZwODyIymPwe3NvK/UMHPxqL0xyZWYh5y1EQxg3dHHxTO26J78g M+QFeKWXKlh9vINV1KzGcRYK35Oln0LNuwFSClFHS+IZSAq3LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBupcN6E5bwPeB2VlAIY7gD1F9PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzUzMzFlMmUtYjBlNS0z ZTE5LWFhY2MtMWRkNTRiYTBiZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFR/8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKhvewxBpJS7H0ldfa3BsyO34olF7VncDlYQSntfjCvWeJXKZTBVG4yO WHV1M/ZrYQNkgZUSdRmqOQuIsg47cKXcYiIRvsuFJ8luAhOoJw8eY+9UYE4VgnN9 Lbbb3UmlPHL82hK3v2RSMf7ElMcEBpfzckhs5Bl9XFYq6O9TCNSMIP91OWXs2swg s1e1RK4RyDWSifQ5I2EZXCqgHxTwzcVP/g+YdzjaJbuOGcHrhPFxLioBiWBvsxm3 qkBucCv4L4kE9P1myymQbQEW4/70XO4KvfoM8U9pjPaZEq3v1exuH1S4wG+0qs1t rch5VULbQYKGhsOT3UXQMMxASGfMiOY= -----END CERTIFICATE-----Generated at Sun Sep 13 18:09:30 2026 by rpki-client