$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fa088b5-7963-34a9-9e5a-f0c3555697ce.roa File: 3fa088b5-7963-34a9-9e5a-f0c3555697ce.roa (raw, json) Hash identifier: YDcWdKswTPzkALNaZaqDJK85sgar0VHaZI4LyXq5EVw= Subject key identifier: F1:8E:4B:9E:4B:C6:96:FB:90:F0:AD:7A:84:40:97:AB:7B:ED:81:9C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F90A31069060C9989F5B36880 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fa088b5-7963-34a9-9e5a-f0c3555697ce.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 701 IP address blocks: 96.231.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a3:10:69:06:0c:99:89:f5:b3:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=0eaa2bae-8797-4d14-9b02-a235d327d8e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b7:54:60:99:28:49:8d:94:a5:6f:9c:54:d0: 10:ab:0a:1c:7d:f7:48:dd:c4:f0:b7:e6:a0:fa:a6: 36:24:06:92:64:36:db:68:c5:b9:61:ee:27:62:87: 0f:50:45:15:e1:ab:34:8d:60:17:63:7c:7e:da:0b: aa:fb:4a:53:b1:a6:e7:d9:dc:45:ae:0b:16:e1:0b: c1:30:39:89:db:20:b1:1d:b0:43:ab:98:d8:a7:53: c5:b4:3a:6d:85:01:ad:b0:38:3d:90:7d:4a:f3:47: fb:e8:96:f3:32:b2:d0:3f:8e:06:65:d0:92:78:64: 1b:4d:1a:51:b6:e9:c2:38:bf:67:6c:44:ac:1b:b2: 8d:f0:ab:47:db:e1:a9:42:e5:29:05:b4:dc:98:7e: b1:e4:4b:78:be:6f:e1:3c:fc:71:a8:c1:44:a2:ef: 45:87:78:75:f5:ae:e4:9d:27:02:33:8e:85:36:d4: 9a:54:7f:47:02:4c:c8:61:05:b2:ef:48:97:16:35: 8f:de:eb:cd:f4:0b:99:e4:bd:46:4d:39:fd:69:1c: 9d:80:97:1c:e4:d2:06:e3:6d:82:2e:bf:fb:81:f6: 74:7a:78:a9:e8:d3:66:76:5a:5d:89:50:1f:b0:3b: f7:68:cb:fa:ed:6d:17:67:4b:75:70:08:fc:b9:0b: cc:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:8E:4B:9E:4B:C6:96:FB:90:F0:AD:7A:84:40:97:AB:7B:ED:81:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fa088b5-7963-34a9-9e5a-f0c3555697ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 96.231.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:2a:50:1b:aa:d1:f5:01:6d:12:b1:da:b1:8e:15:5b:90:d1: 87:93:57:bf:25:33:db:f8:43:67:b6:46:3e:36:66:9d:e1:02: bc:74:ec:ca:32:9c:a9:b3:35:3e:44:35:92:c0:57:24:0d:c5: ab:a1:5e:54:df:11:2f:86:a4:85:e8:a6:9a:83:f3:6b:29:07: d6:9a:6d:93:6a:89:4e:c8:ab:21:5e:c1:5d:b6:a5:ca:80:03: 02:0c:dd:58:e3:d2:47:da:cd:1f:2f:65:a0:88:3c:ad:82:bf: 32:0a:19:67:21:f7:4e:85:88:48:90:37:0e:8f:c6:07:cf:34: 09:6b:01:9d:69:aa:05:a6:2f:c7:9b:08:9e:63:39:63:ab:8c: c0:d1:2e:14:c6:e7:3c:59:05:c1:8f:7e:93:3d:12:ec:c3:e1: 56:b6:48:8a:8d:68:0e:53:f0:2b:a6:e4:c4:70:41:98:db:e4: 26:82:75:93:25:3b:ff:d0:38:11:a7:fc:05:51:95:8e:ea:4e: 94:71:84:e9:b0:34:e1:89:88:d4:33:36:6e:a8:b3:81:e3:70: 88:10:b1:b5:b1:10:04:3e:bc:34:34:46:80:19:02:15:bb:ef: c1:f7:6c:31:ee:0b:3e:ef:70:bd:d5:8c:1e:2c:ed:98:be:16: 67:20:6d:4e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE+QoxBpBgyZifWzaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk MGVhYTJiYWUtODc5Ny00ZDE0LTliMDItYTIzNWQzMjdkOGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrdUYJkoSY2UpW+cVNAQqwocffdI3cTwt+ag +qY2JAaSZDbbaMW5Ye4nYocPUEUV4as0jWAXY3x+2guq+0pTsabn2dxFrgsW4QvB MDmJ2yCxHbBDq5jYp1PFtDpthQGtsDg9kH1K80f76JbzMrLQP44GZdCSeGQbTRpR tunCOL9nbESsG7KN8KtH2+GpQuUpBbTcmH6x5Et4vm/hPPxxqMFEou9Fh3h19a7k nScCM46FNtSaVH9HAkzIYQWy70iXFjWP3uvN9AuZ5L1GTTn9aRydgJcc5NIG422C Lr/7gfZ0enip6NNmdlpdiVAfsDv3aMv67W0XZ0t1cAj8uQvMtQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPGOS55Lxpb7kPCteoRAl6t77YGcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2ZhMDg4YjUtNzk2My0z NGE5LTllNWEtZjBjMzU1NTY5N2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYOcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEATCpQG6rR9QFtErHasY4VW5DRh5NXvyUz2/hDZ7ZGPjZmneECvHTsyjKc qbM1PkQ1ksBXJA3Fq6FeVN8RL4akheimmoPzaykH1pptk2qJTsirIV7BXbalyoAD AgzdWOPSR9rNHy9loIg8rYK/MgoZZyH3ToWISJA3Do/GB880CWsBnWmqBaYvx5sI nmM5Y6uMwNEuFMbnPFkFwY9+kz0S7MPhVrZIio1oDlPwK6bkxHBBmNvkJoJ1kyU7 /9A4Eaf8BVGVjupOlHGE6bA04YmI1DM2bqizgeNwiBCxtbEQBD68NDRGgBkCFbvv wfdsMe4LPu9wvdWMHiztmL4WZyBtTg== -----END CERTIFICATE-----Generated at Sun Nov 1 06:05:06 2026 by rpki-client