$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fd32110-2549-302d-a090-2361ceb42d58.roa File: 3fd32110-2549-302d-a090-2361ceb42d58.roa (raw, json) Hash identifier: SXx/fE2rGOb681uZ+JZxNf42s3E5XOAd0UC7UFXAaDc= Subject key identifier: 17:88:7B:6E:0B:0D:4E:37:C2:19:00:A2:3E:C0:9D:FF:BF:1D:10:C6 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F90A30E72865755F741A46480 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fd32110-2549-302d-a090-2361ceb42d58.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 701 IP address blocks: 68.239.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a3:0e:72:86:57:55:f7:41:a4:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=1d2f31d1-2cee-4d05-9d72-ed308e814ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e4:77:04:52:a1:55:0e:43:d8:4c:d4:93:e1: b5:fc:6c:8b:0c:cc:1a:0a:de:41:85:4f:13:c5:94: 84:70:38:a2:fe:e7:45:42:99:44:1a:a0:51:99:b7: de:fa:a5:54:72:b8:7d:c1:9f:da:c3:fc:41:db:59: 45:f0:bb:4c:ff:3e:08:18:0b:fa:d5:b3:6b:40:3a: 8d:cb:9c:56:37:a4:a2:32:a7:59:ca:4e:bc:01:c5: b5:15:02:be:c5:a1:0d:0c:57:05:28:de:de:bc:97: aa:c8:bf:75:03:a8:ee:65:1e:63:a9:10:42:88:e8: d1:3e:0a:33:de:62:ad:f6:37:79:29:b9:6d:46:72: 81:90:d3:8a:7a:ec:95:f4:22:6f:73:20:43:6c:bc: a6:3d:0e:34:be:d9:c5:e4:ca:ab:6c:a6:0d:07:59: 77:90:c1:2f:a8:35:5c:39:13:5c:30:dd:9e:48:5f: 3a:ef:36:48:2f:ad:d6:4b:f9:2d:19:78:5e:e4:0e: ac:75:92:e5:65:c6:8d:46:df:4d:ed:0e:07:d4:af: d4:c5:db:13:7c:52:3e:b0:f7:01:f6:b6:40:b4:7c: dc:c6:cf:57:ef:0b:a2:6c:80:a0:af:63:be:36:6c: f6:e9:65:40:11:76:6e:5d:36:a4:fa:8e:f3:f9:28: 87:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:88:7B:6E:0B:0D:4E:37:C2:19:00:A2:3E:C0:9D:FF:BF:1D:10:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3fd32110-2549-302d-a090-2361ceb42d58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.239.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:82:f1:fb:cf:1c:26:a0:7c:23:87:c5:52:a4:22:09:e9:c7: 16:59:ca:e6:37:30:ca:40:00:bc:68:8d:41:1a:2e:6c:61:16: ad:85:58:2c:63:5e:9e:c6:26:7f:31:94:14:6d:28:08:73:f1: 84:ff:be:ce:6e:b5:34:30:d8:55:ac:c9:70:ad:52:97:29:65: 22:85:a3:8d:d6:60:bc:9a:c3:1d:04:69:23:69:3f:7c:bd:ca: db:43:08:2f:c7:c3:a4:c2:06:7a:ad:0b:5b:2e:c1:0d:c2:25: ea:2f:6d:fc:8b:94:72:b4:98:f3:b2:da:a8:74:fd:df:e6:88: ef:af:1d:80:20:92:29:d2:65:3d:a1:0f:55:63:29:af:0d:d1: 1a:c8:9e:64:c7:c2:cc:bf:07:e1:ec:5d:4f:92:b6:25:9a:47: 46:21:69:e3:6e:32:68:ea:45:17:e7:fc:68:61:1c:a2:9d:95: 58:8e:c7:f9:c2:18:ae:95:ce:bb:04:a1:a5:7c:d4:04:d7:d7: af:20:2a:be:a0:df:a1:0c:d0:90:e1:8b:e7:ab:34:8b:10:ce: de:a1:a3:3c:33:ab:fb:30:ec:ff:ec:48:9f:86:ce:b7:3f:db: de:7a:84:9f:b0:af:83:bd:e7:a3:c5:1c:e4:f1:40:e4:8c:46: f5:ca:e5:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+Qow5yhldV90GkZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk MWQyZjMxZDEtMmNlZS00ZDA1LTlkNzItZWQzMDhlODE0YWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOR3BFKhVQ5D2EzUk+G1/GyLDMwaCt5BhU8T xZSEcDii/udFQplEGqBRmbfe+qVUcrh9wZ/aw/xB21lF8LtM/z4IGAv61bNrQDqN y5xWN6SiMqdZyk68AcW1FQK+xaENDFcFKN7evJeqyL91A6juZR5jqRBCiOjRPgoz 3mKt9jd5KbltRnKBkNOKeuyV9CJvcyBDbLymPQ40vtnF5MqrbKYNB1l3kMEvqDVc ORNcMN2eSF867zZIL63WS/ktGXhe5A6sdZLlZcaNRt9N7Q4H1K/UxdsTfFI+sPcB 9rZAtHzcxs9X7wuibICgr2O+Nmz26WVAEXZuXTak+o7z+SiHdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeIe24LDU43whkAoj7Anf+/HRDGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2ZkMzIxMTAtMjU0OS0z MDJkLWEwOTAtMjM2MWNlYjQyZDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRO8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2C8fvPHCagfCOHxVKkIgnpxxZZyuY3MMpAALxojUEaLmxhFq2FWCxj Xp7GJn8xlBRtKAhz8YT/vs5utTQw2FWsyXCtUpcpZSKFo43WYLyawx0EaSNpP3y9 yttDCC/Hw6TCBnqtC1suwQ3CJeovbfyLlHK0mPOy2qh0/d/miO+vHYAgkinSZT2h D1VjKa8N0RrInmTHwsy/B+HsXU+StiWaR0YhaeNuMmjqRRfn/GhhHKKdlViOx/nC GK6VzrsEoaV81ATX168gKr6g36EM0JDhi+erNIsQzt6hozwzq/sw7P/sSJ+Gzrc/ 2956hJ+wr4O956PFHOTxQOSMRvXK5dM= -----END CERTIFICATE-----Generated at Sun Nov 1 20:09:54 2026 by rpki-client