$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e6d20d6-2f2e-36b6-9f9f-5624b3952c38.roa File: 4e6d20d6-2f2e-36b6-9f9f-5624b3952c38.roa (raw, json) Hash identifier: DbdjeE0pG8QWdSAaApRicPrkCeI1bbEoh9d6xKm+XQE= Subject key identifier: 71:9B:F4:AE:50:48:4F:59:E8:CD:DC:11:7E:E3:3D:C9:1C:BB:7A:82 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F90A31D194D0BF58C0FAF5A40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e6d20d6-2f2e-36b6-9f9f-5624b3952c38.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 701 IP address blocks: 72.70.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a3:1d:19:4d:0b:f5:8c:0f:af:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=9879bd48-c3f2-4b56-a931-8f6363dde7fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:70:3a:d1:bf:1e:15:ca:47:d4:e4:c3:c3:50: 21:fe:27:4c:d3:fc:03:3e:99:f1:d5:ed:d1:09:9d: 8b:38:9b:6f:49:b9:7c:c5:3c:cc:a1:28:9c:38:1e: c7:90:b5:bd:a2:2f:5d:95:4e:d4:d1:11:e7:c4:ae: c1:f5:ae:55:fe:1d:f8:ed:96:66:0e:59:2b:9a:cf: f2:d3:17:1a:77:be:31:c5:9a:90:d3:b6:c8:a8:7e: 93:14:61:35:c1:a9:93:46:ce:a8:01:79:dc:21:5b: a8:29:cd:3a:ea:47:7f:5c:2e:d3:b9:dc:e2:be:66: 12:d8:7d:ef:75:20:c5:4b:d7:89:de:5a:95:bc:71: 3f:6f:0f:b0:cc:a2:f3:7d:f4:3e:c8:85:4f:b8:d8: 80:d7:44:e9:e8:97:e1:2c:c2:b8:b0:76:1e:1c:83: f0:4b:c6:74:a4:5a:f5:24:30:a8:69:55:d9:3a:d7: dd:f2:71:a5:74:a2:d0:ff:2e:0f:ea:39:82:35:ac: 2f:0c:7e:44:19:a0:7e:59:f2:b3:e1:22:94:b5:2c: 14:92:0b:03:1b:6f:f2:b5:04:19:c0:36:8a:40:1f: cb:08:94:f9:ef:d5:ef:7b:88:12:ff:82:b7:55:f9: 85:6b:09:08:36:d0:1c:2b:47:81:78:d3:c6:d6:19: b7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:9B:F4:AE:50:48:4F:59:E8:CD:DC:11:7E:E3:3D:C9:1C:BB:7A:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e6d20d6-2f2e-36b6-9f9f-5624b3952c38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.70.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:e6:76:fa:2b:47:07:74:b2:2f:22:76:76:b6:5e:67:24:bf: 98:e1:ca:c2:4b:ba:fc:0d:29:f7:97:79:53:05:a6:02:65:11: 71:7c:6f:8c:7b:6a:92:ab:c9:1b:6a:02:f2:ee:2b:25:de:51: 19:64:ff:4d:1e:cf:95:51:9d:41:83:b6:3b:be:bb:e8:dd:54: 8b:a4:32:0c:b3:4d:d0:e9:cb:86:10:bf:be:01:bf:66:08:16: 61:34:de:a2:2a:1b:c2:79:74:b9:b4:f8:91:cc:fc:fb:ec:4b: 51:02:bd:89:04:ce:48:5b:18:f7:03:30:51:1c:4c:94:a5:fd: 40:49:93:7a:45:d0:8c:a4:db:1c:79:26:0b:73:09:8b:4a:73: 49:cc:00:25:d3:3d:b2:1a:50:18:d0:76:a3:c0:e1:d1:70:6b: 30:f6:16:11:6c:65:18:8f:1c:22:64:02:c4:03:cf:7c:c0:a7: 13:0b:04:fd:26:f1:2f:b5:2e:ad:d6:80:a6:0a:cb:82:6e:e2: 7f:b3:74:dc:f6:85:f9:c9:0f:64:91:7c:c9:3f:3f:dc:d7:6b: 34:62:02:a1:65:34:64:f3:c9:ef:00:e8:ec:db:26:58:37:92: d4:62:f9:55:17:85:02:90:7c:3b:3e:b2:34:4f:b0:6f:f6:94: 76:8e:94:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+Qox0ZTQv1jA+vWkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk OTg3OWJkNDgtYzNmMi00YjU2LWE5MzEtOGY2MzYzZGRlN2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHA60b8eFcpH1OTDw1Ah/idM0/wDPpnx1e3R CZ2LOJtvSbl8xTzMoSicOB7HkLW9oi9dlU7U0RHnxK7B9a5V/h347ZZmDlkrms/y 0xcad74xxZqQ07bIqH6TFGE1wamTRs6oAXncIVuoKc066kd/XC7TudzivmYS2H3v dSDFS9eJ3lqVvHE/bw+wzKLzffQ+yIVPuNiA10Tp6JfhLMK4sHYeHIPwS8Z0pFr1 JDCoaVXZOtfd8nGldKLQ/y4P6jmCNawvDH5EGaB+WfKz4SKUtSwUkgsDG2/ytQQZ wDaKQB/LCJT579Xve4gS/4K3VfmFawkINtAcK0eBeNPG1hm3LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGb9K5QSE9Z6M3cEX7jPckcu3qCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGU2ZDIwZDYtMmYyZS0z NmI2LTlmOWYtNTYyNGIzOTUyYzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSEaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKzmdvorRwd0si8idna2Xmckv5jhysJLuvwNKfeXeVMFpgJlEXF8b4x7 apKryRtqAvLuKyXeURlk/00ez5VRnUGDtju+u+jdVIukMgyzTdDpy4YQv74Bv2YI FmE03qIqG8J5dLm0+JHM/PvsS1ECvYkEzkhbGPcDMFEcTJSl/UBJk3pF0Iyk2xx5 JgtzCYtKc0nMACXTPbIaUBjQdqPA4dFwazD2FhFsZRiPHCJkAsQDz3zApxMLBP0m 8S+1Lq3WgKYKy4Ju4n+zdNz2hfnJD2SRfMk/P9zXazRiAqFlNGTzye8A6OzbJlg3 ktRi+VUXhQKQfDs+sjRPsG/2lHaOlGU= -----END CERTIFICATE-----Generated at Sun Nov 1 19:55:06 2026 by rpki-client