$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35c1df24-99da-325c-ab92-21410a3f50a8.roa File: 35c1df24-99da-325c-ab92-21410a3f50a8.roa (raw, json) Hash identifier: a8Ys4MnGxOLy8pngMiCKQcch0Q7FdNEKC0lJ8YbGhyo= Subject key identifier: 17:F0:35:68:89:04:CD:E5:0E:A8:3D:25:90:23:55:12:45:67:51:60 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EE7BCC1CAEDD8E2E89D19A980 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35c1df24-99da-325c-ab92-21410a3f50a8.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 701 IP address blocks: 71.114.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:c1:ca:ed:d8:e2:e8:9d:19:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=3a8efd77-88c5-4962-b43e-a28dd87be56d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:61:6d:d0:d1:38:30:5c:05:c3:2e:19:3c:e3: 98:19:5a:75:b7:d9:78:d9:51:a9:71:5e:63:30:45: 8a:50:ff:33:a0:d3:df:ac:cd:23:87:3b:d8:1e:b8: 3b:06:a2:86:46:a1:18:34:63:08:50:09:24:8e:ad: 1c:ee:35:20:6d:06:85:37:79:43:7c:c1:5b:68:1d: 16:aa:79:93:e2:f8:8f:ac:ac:53:80:da:f5:44:59: 2d:0b:8e:20:26:ec:13:1b:80:e6:42:54:7b:57:c1: 37:af:22:c2:c5:5c:9c:a6:dd:f0:26:98:e1:68:22: ff:1a:57:2e:51:e7:69:35:2b:84:23:52:15:13:f8: fb:f9:11:4e:ef:05:08:12:55:d8:38:70:08:eb:00: 99:76:81:54:8c:e5:4d:65:52:90:cc:79:3a:02:9d: ee:25:90:e0:10:3b:89:c1:56:0f:ea:28:28:78:2a: 46:96:16:8c:39:3f:f2:83:4b:8f:5c:e8:aa:12:1d: d7:63:8b:9f:ac:a5:46:3b:ce:23:2d:7f:72:f9:ca: e0:7f:97:e0:06:69:ac:d1:d3:f3:a8:ed:10:18:f2: 8f:ef:a9:d4:8a:5b:10:93:36:bf:4f:96:5e:1d:e9: f9:52:1f:55:ac:6d:38:50:c8:2f:d0:05:f0:73:82: 66:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F0:35:68:89:04:CD:E5:0E:A8:3D:25:90:23:55:12:45:67:51:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35c1df24-99da-325c-ab92-21410a3f50a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.114.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:f7:a9:e7:60:b2:5d:7c:be:18:28:1d:cb:6e:44:a9:13:a5: 23:d5:c5:95:20:7d:17:d6:e1:29:f4:66:6a:1e:81:f3:1d:6a: 98:3b:5c:0f:49:a8:e9:64:5b:45:66:d2:ca:db:46:32:65:6f: 96:7c:1b:1e:d5:65:ba:10:63:43:01:fe:c4:5c:9b:cd:3b:79: 4d:74:ae:a5:79:56:59:12:45:fc:66:10:55:05:5a:56:f1:e3: 63:4d:97:0a:69:c8:5d:8d:fc:db:2d:2c:0d:1d:9c:f7:9e:fb: 08:bb:5f:9b:65:40:e6:c3:57:e2:1f:c8:6c:23:41:01:f5:7d: 18:86:fd:7c:40:8c:90:d0:2f:b0:c3:8d:7e:2b:28:0d:5e:1d: 45:3d:a7:ca:bb:45:5a:de:15:38:a0:14:e0:dc:da:36:c7:c1: be:07:98:35:4e:80:b5:41:c2:c7:4e:b8:55:93:22:f7:7f:8e: eb:3c:c6:6b:ab:59:66:35:8d:11:76:fb:fb:8d:f1:7d:1b:61: 42:59:ac:03:2c:ed:2f:1b:c3:1a:4b:cc:4e:19:4d:d2:cc:b6: 39:e6:6d:3d:37:ca:a0:3b:c2:34:37:e4:a7:6d:51:d4:47:2d: 5c:3a:e8:2f:b9:ef:d5:4b:d4:6f:8a:d6:84:60:f3:61:a7:1a: 07:36:75:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvMHK7dji6J0ZqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk M2E4ZWZkNzctODhjNS00OTYyLWI0M2UtYTI4ZGQ4N2JlNTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2Ft0NE4MFwFwy4ZPOOYGVp1t9l42VGpcV5j MEWKUP8zoNPfrM0jhzvYHrg7BqKGRqEYNGMIUAkkjq0c7jUgbQaFN3lDfMFbaB0W qnmT4viPrKxTgNr1RFktC44gJuwTG4DmQlR7V8E3ryLCxVycpt3wJpjhaCL/Glcu UedpNSuEI1IVE/j7+RFO7wUIElXYOHAI6wCZdoFUjOVNZVKQzHk6Ap3uJZDgEDuJ wVYP6igoeCpGlhaMOT/yg0uPXOiqEh3XY4ufrKVGO84jLX9y+crgf5fgBmms0dPz qO0QGPKP76nUilsQkza/T5ZeHen5Uh9VrG04UMgv0AXwc4JmGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfwNWiJBM3lDqg9JZAjVRJFZ1FgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzVjMWRmMjQtOTlkYS0z MjVjLWFiOTItMjE0MTBhM2Y1MGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER3JgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFH3qedgsl18vhgoHctuRKkTpSPVxZUgfRfW4Sn0ZmoegfMdapg7XA9J qOlkW0Vm0srbRjJlb5Z8Gx7VZboQY0MB/sRcm807eU10rqV5VlkSRfxmEFUFWlbx 42NNlwppyF2N/NstLA0dnPee+wi7X5tlQObDV+IfyGwjQQH1fRiG/XxAjJDQL7DD jX4rKA1eHUU9p8q7RVreFTigFODc2jbHwb4HmDVOgLVBwsdOuFWTIvd/jus8xmur WWY1jRF2+/uN8X0bYUJZrAMs7S8bwxpLzE4ZTdLMtjnmbT03yqA7wjQ35KdtUdRH LVw66C+579VL1G+K1oRg82GnGgc2deo= -----END CERTIFICATE-----Generated at Sun Sep 13 15:51:11 2026 by rpki-client