$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5429411c-e9f5-34ea-a11c-b8ffc700b304.roa File: 5429411c-e9f5-34ea-a11c-b8ffc700b304.roa (raw, json) Hash identifier: CK30LnfKPtpTPr9XMPw8R87gJltLoY/4YvLGS5pJu1w= Subject key identifier: FC:E0:77:B0:52:7A:19:EE:24:A7:7B:22:A2:9A:74:16:16:FF:C1:AA Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D5E1A82FAB27DF440C856A740 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5429411c-e9f5-34ea-a11c-b8ffc700b304.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 6167 IP address blocks: 166.139.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:82:fa:b2:7d:f4:40:c8:56:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=3c0aa8a7-2b4f-4c42-945f-2481f8b0cf15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4c:92:e5:5b:d5:b3:68:67:28:92:2c:b7:17: 3e:b5:ed:48:55:90:b7:0c:0d:bf:12:3a:72:0c:47: 33:b5:61:c6:8e:2a:fb:77:00:c7:57:15:34:af:53: 63:3f:04:12:75:c1:fb:6f:ce:9b:14:d4:ae:81:4d: bc:05:a1:b2:7d:6b:05:30:76:b1:45:93:ce:fa:64: 84:9d:98:7e:fb:b3:02:3f:bd:dd:1a:77:b7:89:9e: 14:d4:b7:eb:7b:a1:45:a8:f1:25:e4:8c:93:d4:91: 8c:7e:f2:6b:02:59:5a:0e:57:26:94:94:fc:00:70: 1c:fe:db:82:a4:de:68:30:c6:76:f4:f4:44:5c:28: 77:c6:54:0f:c1:dd:09:b8:ec:a9:c6:f4:b7:87:e5: 56:f4:01:8b:86:f8:38:d8:56:3b:e0:ce:b8:49:36: ba:5e:f7:0b:5c:a2:a6:09:c5:f1:98:b4:3f:8b:42: 1e:8f:73:84:b0:35:c4:a4:e0:4f:7e:cc:69:e6:77: dd:6b:9e:0c:87:fa:e9:74:99:62:6b:70:68:f6:3e: 5b:aa:88:24:f3:b2:93:c9:e2:7e:94:cf:c1:1b:58: 37:d2:d9:ee:0f:b4:60:7d:1d:be:73:74:b1:45:93: 81:6e:31:9b:c4:4d:0a:ff:9b:93:30:98:bd:75:b6: d4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E0:77:B0:52:7A:19:EE:24:A7:7B:22:A2:9A:74:16:16:FF:C1:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5429411c-e9f5-34ea-a11c-b8ffc700b304.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 166.139.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:52:8c:05:14:d8:ad:b5:44:67:7f:fb:b6:81:56:17:e7:a0: 33:f9:43:bc:78:c8:09:5b:24:ab:cb:6c:2b:e8:0d:6c:35:25: 8f:0e:12:cc:c8:17:c3:07:a4:9f:71:26:12:01:ce:a2:14:6e: 1a:14:65:3f:09:5d:00:fb:f5:7b:1c:91:df:cf:92:cd:1f:ad: 80:98:9f:c8:44:ae:9b:9d:9f:a8:2e:3e:ce:d8:89:e0:c0:6b: cc:05:77:95:c9:c0:aa:4b:aa:be:50:f6:e4:3f:3c:c2:9d:d2: f8:2b:f3:14:8b:aa:3b:f0:31:79:52:8d:fb:79:7f:39:59:17: c4:33:f6:72:ab:c0:fb:a6:d9:d8:e1:1e:27:2b:7c:e3:81:de: fa:d9:c2:e5:f1:04:78:93:a7:24:50:eb:3b:bd:94:8a:26:09: 08:10:9d:9b:22:2e:9b:84:ca:d6:2a:bd:2e:13:d2:c6:ab:7b: 46:ea:9a:c4:dd:bd:b7:dc:51:da:da:2f:79:d4:52:6d:a5:9c: 16:43:cc:a1:9c:f3:a8:e8:3b:8d:02:30:68:5b:e6:23:7c:6e: 2b:96:62:ee:08:7c:c0:f7:52:88:fb:02:bc:22:15:07:b5:df: b5:a5:62:8b:99:4c:47:9a:8d:13:23:e5:f1:9f:ae:49:65:c2: 06:b3:66:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGoL6sn30QMhWp0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk M2MwYWE4YTctMmI0Zi00YzQyLTk0NWYtMjQ4MWY4YjBjZjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UyS5VvVs2hnKJIstxc+te1IVZC3DA2/Ejpy DEcztWHGjir7dwDHVxU0r1NjPwQSdcH7b86bFNSugU28BaGyfWsFMHaxRZPO+mSE nZh++7MCP73dGne3iZ4U1Lfre6FFqPEl5IyT1JGMfvJrAllaDlcmlJT8AHAc/tuC pN5oMMZ29PREXCh3xlQPwd0JuOypxvS3h+VW9AGLhvg42FY74M64STa6XvcLXKKm CcXxmLQ/i0Iej3OEsDXEpOBPfsxp5nfda54Mh/rpdJlia3Bo9j5bqogk87KTyeJ+ lM/BG1g30tnuD7RgfR2+c3SxRZOBbjGbxE0K/5uTMJi9dbbUEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzgd7BSehnuJKd7IqKadBYW/8GqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTQyOTQxMWMtZTlmNS0z NGVhLWExMWMtYjhmZmM3MDBiMzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHposAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChSjAUU2K21RGd/+7aBVhfnoDP5Q7x4yAlbJKvLbCvoDWw1JY8OEszI F8MHpJ9xJhIBzqIUbhoUZT8JXQD79Xsckd/Pks0frYCYn8hErpudn6guPs7YieDA a8wFd5XJwKpLqr5Q9uQ/PMKd0vgr8xSLqjvwMXlSjft5fzlZF8Qz9nKrwPum2djh HicrfOOB3vrZwuXxBHiTpyRQ6zu9lIomCQgQnZsiLpuEytYqvS4T0sare0bqmsTd vbfcUdraL3nUUm2lnBZDzKGc86joO40CMGhb5iN8biuWYu4IfMD3Uoj7ArwiFQe1 37WlYouZTEeajRMj5fGfrkllwgazZlI= -----END CERTIFICATE-----Generated at Mon Apr 13 18:23:24 2026 by rpki-client