$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4239afdd-7029-349b-b43a-6b162803232d.roa File: 4239afdd-7029-349b-b43a-6b162803232d.roa (raw, json) Hash identifier: yAN6jXNeGFCFyB3LDZ3XgzeN8wahfCyfG1KIUg/GV8o= Subject key identifier: 28:FA:6B:69:67:D7:06:EF:B5:3C:B6:27:5F:8D:A5:63:37:79:ED:A5 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584E3E5F52C74D0480C1CAC87680 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4239afdd-7029-349b-b43a-6b162803232d.roa Signing time: Sun 21 Jun 2026 09:00:12 +0000 ROA not before: Sun 21 Jun 2026 09:00:12 +0000 ROA not after: Sat 19 Sep 2026 09:00:12 +0000 asID: 6167 IP address blocks: 166.156.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3e:5f:52:c7:4d:04:80:c1:ca:c8:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 21 09:00:12 2026 GMT Not After : Sep 19 09:00:12 2026 GMT Subject: CN=36289a03-6a04-474b-9b60-f3ef513bc322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9f:19:45:f9:f8:81:cd:f8:f0:f9:e1:3e:12: 7a:47:4c:76:4c:b9:9b:16:de:45:d7:36:ca:38:4b: 27:af:f2:db:f9:50:f3:98:be:fb:6d:7a:85:34:a2: f9:e9:c3:16:fe:cc:36:57:fd:4f:0c:7c:ac:3b:be: cb:a3:c7:3f:62:00:39:34:31:b2:0e:79:e9:2c:b1: 61:fc:50:58:0b:c3:f6:99:c9:59:f1:75:7b:e2:60: a1:e7:be:8e:e9:83:ba:8e:30:fe:5e:9c:1f:04:dc: 28:e6:3a:6c:ca:33:dc:21:ab:27:cf:13:88:00:07: d5:7f:fd:39:9c:51:67:4e:f4:c6:ed:34:88:7c:ed: 98:f4:91:ce:28:9a:a7:e2:87:72:3a:39:bb:6e:5d: b6:9a:d2:e1:1b:25:ec:b2:03:0a:bf:35:6f:8c:31: b4:de:58:99:3c:1f:19:55:c5:f3:94:32:fd:12:43: 0c:cd:fb:b4:89:8d:d2:40:03:ed:e3:eb:57:46:e6: 6b:35:b1:4b:9f:18:91:84:3e:32:a0:63:54:f7:de: ea:55:f6:34:20:6c:fb:40:50:38:87:d2:56:71:cd: 17:ad:1a:93:59:9c:67:1a:56:e2:79:dc:be:cc:e7: 4f:b0:98:00:38:b3:ee:d3:6d:53:76:b1:65:13:c6: 47:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FA:6B:69:67:D7:06:EF:B5:3C:B6:27:5F:8D:A5:63:37:79:ED:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4239afdd-7029-349b-b43a-6b162803232d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 166.156.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:22:7e:cc:9e:da:3c:02:ca:b1:07:2a:16:19:1a:42:86:cb: cd:3c:f2:0c:de:bc:d8:3c:0c:97:d0:fd:37:b4:f6:33:f9:cb: 50:61:a9:fd:97:4b:e7:4f:1d:22:67:d4:52:e4:20:50:b0:43: de:d5:c6:cd:dc:f0:37:97:ca:b6:f1:e6:d1:4a:5f:37:1d:c1: 27:ca:14:6c:45:8f:1f:35:da:8e:44:8d:94:2a:77:58:20:9d: 91:a3:ff:12:b4:aa:fc:df:4e:63:e4:56:f0:98:72:7d:c7:7c: 60:29:b1:82:74:97:ad:a3:ca:8e:8a:93:bb:a4:05:f5:5f:e0: 68:48:70:ba:90:b4:1e:7c:07:06:9d:a3:c2:63:47:d9:23:c3: ed:df:39:63:a4:99:49:af:2b:38:5c:6f:e5:95:b9:62:2e:10: ce:88:8c:7d:ab:95:cd:63:5d:dc:d4:32:5d:12:5e:28:9d:ed: 3b:d1:f1:e6:14:b0:d5:07:a2:64:82:8b:d8:54:b6:4a:d2:b1: e6:05:48:1d:3d:eb:56:6b:3c:2e:bf:7d:fa:9e:f5:b4:8e:6a: 1f:32:83:1d:f6:a1:f6:f4:d1:2b:02:e3:3d:64:33:be:0f:95: f8:a8:ba:de:9e:c4:dd:1b:50:f0:a9:a6:a3:2a:dc:5c:2b:90: 21:6e:7d:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4+X1LHTQSAwcrIdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk MzYyODlhMDMtNmEwNC00NzRiLTliNjAtZjNlZjUxM2JjMzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1p8ZRfn4gc348PnhPhJ6R0x2TLmbFt5F1zbK OEsnr/Lb+VDzmL77bXqFNKL56cMW/sw2V/1PDHysO77Lo8c/YgA5NDGyDnnpLLFh /FBYC8P2mclZ8XV74mCh576O6YO6jjD+XpwfBNwo5jpsyjPcIasnzxOIAAfVf/05 nFFnTvTG7TSIfO2Y9JHOKJqn4odyOjm7bl22mtLhGyXssgMKvzVvjDG03liZPB8Z VcXzlDL9EkMMzfu0iY3SQAPt4+tXRuZrNbFLnxiRhD4yoGNU997qVfY0IGz7QFA4 h9JWcc0XrRqTWZxnGlbiedy+zOdPsJgAOLPu021TdrFlE8ZHJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCj6a2ln1wbvtTy2J1+NpWM3ee2lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDIzOWFmZGQtNzAyOS0z NDliLWI0M2EtNmIxNjI4MDMyMzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHppyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQifsye2jwCyrEHKhYZGkKGy8088gzevNg8DJfQ/Te09jP5y1Bhqf2X S+dPHSJn1FLkIFCwQ97Vxs3c8DeXyrbx5tFKXzcdwSfKFGxFjx812o5EjZQqd1gg nZGj/xK0qvzfTmPkVvCYcn3HfGApsYJ0l62jyo6Kk7ukBfVf4GhIcLqQtB58Bwad o8JjR9kjw+3fOWOkmUmvKzhcb+WVuWIuEM6IjH2rlc1jXdzUMl0SXiid7TvR8eYU sNUHomSCi9hUtkrSseYFSB0961ZrPC6/ffqe9bSOah8ygx32ofb00SsC4z1kM74P lfiout6exN0bUPCppqMq3FwrkCFufSc= -----END CERTIFICATE-----Generated at Mon Jul 13 11:45:56 2026 by rpki-client