$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/436b970c-6176-36fc-9f8c-5b27bf3732f5.roa File: 436b970c-6176-36fc-9f8c-5b27bf3732f5.roa (raw, json) Hash identifier: /GeOf6HLDiDG09OGXZ7sal/OBYKjw2NrNMmfe3Kh02k= Subject key identifier: 96:8B:8D:03:A5:5D:AD:AD:1C:27:62:AF:9C:A7:AF:14:25:CA:8D:2C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EF7177E6517E359F16536E600 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/436b970c-6176-36fc-9f8c-5b27bf3732f5.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 701 IP address blocks: 71.245.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:7e:65:17:e3:59:f1:65:36:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=d622a181-0083-4271-9b1e-dfac16c29dc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2b:88:4c:6b:02:7f:de:6b:4b:be:e4:54:e9: 65:14:fd:d7:70:e3:be:0d:9f:d2:60:1b:84:42:2a: 6a:e9:66:c4:cf:4f:0d:3c:15:86:8b:29:2c:f6:12: 18:0d:8d:c4:6e:92:32:1d:ce:95:01:99:1c:bc:31: 6f:eb:69:68:c6:dc:5f:74:ea:43:2c:9f:d5:0d:19: 80:bc:29:ee:ee:b9:3d:f5:24:ae:9c:f4:f7:ad:68: 94:c7:3a:e5:19:db:86:42:85:b1:02:5d:d8:7b:ee: 25:06:4e:dd:2a:73:18:2c:4c:d4:80:27:84:b2:d4: ee:32:5d:19:8d:95:ef:69:d5:93:27:24:51:7d:b6: 3f:f9:c4:5d:25:81:8c:79:fa:42:a6:dc:e2:73:b3: fe:fa:25:c6:37:ab:f5:fe:d8:25:1b:95:72:57:bf: 60:b4:7c:6d:50:53:3a:77:2f:ef:81:e4:78:d1:7f: 84:37:b6:6a:9c:0f:50:9b:97:cc:f4:d7:2e:c6:b3: 38:4a:99:79:17:ca:93:3b:91:b5:7f:35:45:c0:d1: 31:84:d8:36:7a:ee:16:bc:9e:df:a7:08:30:61:97: 58:2f:4d:ef:a6:a3:e4:00:6f:06:72:19:d0:4c:51: df:65:97:b4:1f:9b:22:66:99:9c:32:ec:b1:2c:0c: a2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8B:8D:03:A5:5D:AD:AD:1C:27:62:AF:9C:A7:AF:14:25:CA:8D:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/436b970c-6176-36fc-9f8c-5b27bf3732f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.245.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:3f:53:a2:42:e3:fa:f1:07:b5:58:06:b9:3b:ba:f8:89:9f: 6c:3b:76:9d:e8:ca:a0:9e:9f:1b:15:3d:38:cf:e1:d7:48:04: b8:4a:a0:d0:5e:00:cb:88:2b:f3:5a:04:20:4f:b0:f3:63:b2: 34:ef:37:d6:33:95:a5:fb:49:62:e9:25:39:c6:e0:94:ef:03: ac:61:76:7c:24:97:eb:c5:f0:09:24:ab:00:e1:ce:6c:5b:00: 7b:f5:59:8c:f8:3f:e6:d3:ca:eb:bf:fe:ca:ad:d2:74:63:19: f9:01:5e:46:08:d1:1a:70:e1:b9:2c:bc:f1:10:ed:f7:27:fa: db:d6:52:8f:22:89:3e:b1:0e:53:b1:9f:05:89:b2:f6:a8:e7: 67:de:18:f3:8c:18:37:93:62:2e:c5:02:41:ba:7e:38:1f:ea: ef:63:a2:44:6e:4d:d9:9b:ba:b2:9b:51:6f:42:61:02:df:f8: c1:78:b7:a2:30:ec:6a:0a:15:22:1a:77:74:74:59:38:59:cb: cb:a8:c6:77:43:fa:db:f0:a2:76:4a:82:89:4c:b7:95:8e:0c: 87:86:13:3a:66:27:7f:a1:46:20:38:23:07:f4:22:53:bb:8e: 9d:07:2b:48:5f:eb:d0:2a:db:96:3b:2b:da:e8:76:c7:33:66: e8:0d:eb:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F35lF+NZ8WU25gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk ZDYyMmExODEtMDA4My00MjcxLTliMWUtZGZhYzE2YzI5ZGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyuITGsCf95rS77kVOllFP3XcOO+DZ/SYBuE Qipq6WbEz08NPBWGiyks9hIYDY3EbpIyHc6VAZkcvDFv62loxtxfdOpDLJ/VDRmA vCnu7rk99SSunPT3rWiUxzrlGduGQoWxAl3Ye+4lBk7dKnMYLEzUgCeEstTuMl0Z jZXvadWTJyRRfbY/+cRdJYGMefpCptzic7P++iXGN6v1/tglG5VyV79gtHxtUFM6 dy/vgeR40X+EN7ZqnA9Qm5fM9NcuxrM4Spl5F8qTO5G1fzVFwNExhNg2eu4WvJ7f pwgwYZdYL03vpqPkAG8GchnQTFHfZZe0H5siZpmcMuyxLAyi6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJaLjQOlXa2tHCdir5ynrxQlyo0sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDM2Yjk3MGMtNjE3Ni0z NmZjLTlmOGMtNWIyN2JmMzczMmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFR/WAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAc/U6JC4/rxB7VYBrk7uviJn2w7dp3oyqCenxsVPTjP4ddIBLhKoNBe AMuIK/NaBCBPsPNjsjTvN9YzlaX7SWLpJTnG4JTvA6xhdnwkl+vF8AkkqwDhzmxb AHv1WYz4P+bTyuu//sqt0nRjGfkBXkYI0Rpw4bksvPEQ7fcn+tvWUo8iiT6xDlOx nwWJsvao52feGPOMGDeTYi7FAkG6fjgf6u9jokRuTdmburKbUW9CYQLf+MF4t6Iw 7GoKFSIad3R0WThZy8uoxndD+tvwonZKgolMt5WODIeGEzpmJ3+hRiA4Iwf0IlO7 jp0HK0hf69Aq25Y7K9rodsczZugN68Y= -----END CERTIFICATE-----Generated at Sun Sep 13 15:50:38 2026 by rpki-client