$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/64e4c7b0-0d1f-3f81-9e1b-1cf0a4f3c3a6.roa File: 64e4c7b0-0d1f-3f81-9e1b-1cf0a4f3c3a6.roa (raw, json) Hash identifier: Iuk9ybRT+QfGAJ7IO9iXab97RvUJI3Xl6Eox520Uxhg= Subject key identifier: 95:AA:A0:E3:15:BB:84:BF:35:D2:46:93:5C:D4:B2:F2:1A:20:3D:15 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F9A688704ECC6BFDFE2D77280 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/64e4c7b0-0d1f-3f81-9e1b-1cf0a4f3c3a6.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 701 IP address blocks: 129.44.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:87:04:ec:c6:bf:df:e2:d7:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=3f1966f8-5293-49bb-b175-c642d85f981a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a6:7d:3f:40:5a:8c:88:4b:c3:fe:1f:ac:7d: 9f:6f:7d:38:62:26:85:c7:24:50:59:5d:8f:01:70: 36:31:29:50:75:15:e5:8c:02:8f:70:41:74:0c:d5: 95:46:27:0d:89:41:f3:54:54:1a:7c:51:2d:bc:5c: 17:56:74:82:1f:fe:e8:01:17:f0:9a:16:a6:47:d0: 08:d4:43:a9:c6:ce:27:18:ad:7a:77:36:6d:97:3c: bd:9f:3a:cd:8f:c0:ac:66:e5:fd:f6:b2:37:c3:87: 75:b5:76:cb:de:dd:8f:5e:89:f3:9c:81:b0:98:4b: d7:ed:8a:c0:86:25:cf:43:c1:58:14:dc:fb:08:88: 4c:73:40:45:ff:50:fe:09:6d:1b:26:03:01:b6:83: 04:93:e0:45:ad:ad:6c:31:fc:c9:ab:85:2d:ea:f1: 6c:59:eb:d2:7a:92:a0:95:a9:0b:3e:04:18:67:f2: 61:36:66:cb:45:3d:a9:9c:85:ba:b1:4c:67:8f:31: d5:54:3a:94:45:a2:0a:cd:b3:2c:f2:73:f7:fb:d4: 01:08:ed:03:9b:d0:f5:a6:44:eb:5e:91:5e:9e:cd: d2:e2:c5:1f:20:f7:a8:a4:d8:48:1f:d2:c8:56:fa: 10:56:08:c8:80:96:ae:9b:00:b8:7d:e5:ec:c2:af: 76:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AA:A0:E3:15:BB:84:BF:35:D2:46:93:5C:D4:B2:F2:1A:20:3D:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/64e4c7b0-0d1f-3f81-9e1b-1cf0a4f3c3a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 129.44.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:36:41:de:10:99:b5:3d:48:b6:5b:7c:89:13:c2:25:22:6b: d8:18:35:94:31:18:69:cf:9a:df:92:f3:76:a6:c9:3d:52:aa: e7:53:73:57:cf:b4:1e:2e:27:bc:65:61:93:e2:c1:34:ad:80: 9b:e8:18:6b:e5:f4:dd:7a:b7:58:12:3b:78:be:ef:59:08:14: 02:3c:6b:33:7a:f5:c7:ec:65:e0:d4:99:ff:f5:ee:8b:18:4f: ca:2a:cd:6f:7a:e1:f1:ee:f4:cf:de:b9:a1:4c:16:34:56:df: ad:d2:19:fb:01:8f:93:79:4b:26:1f:0c:d9:2c:5a:a1:a1:4a: f3:8d:a5:f4:57:9d:a0:63:3a:ea:1f:61:6e:b8:ea:91:b3:b5: 04:0f:cd:3b:64:0b:f5:d1:57:59:f3:c1:87:7f:50:37:57:e4: 88:2d:12:b9:09:fa:fb:8d:17:df:c9:32:9e:d8:cb:fa:89:7e: e1:2d:a8:c7:e4:aa:ba:4e:d6:9e:68:d7:8a:81:58:ac:be:b4: 4d:0b:38:60:42:95:6a:68:54:18:96:be:73:b3:21:60:d4:7c: 50:f7:b5:3a:ef:7f:25:34:ec:09:cc:3f:7e:f6:f6:45:68:b5: b9:28:b7:1b:b3:9a:23:2f:73:f3:e1:11:24:25:33:0c:67:41: e7:97:9d:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaIcE7Ma/3+LXcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk M2YxOTY2ZjgtNTI5My00OWJiLWIxNzUtYzY0MmQ4NWY5ODFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKZ9P0BajIhLw/4frH2fb304YiaFxyRQWV2P AXA2MSlQdRXljAKPcEF0DNWVRicNiUHzVFQafFEtvFwXVnSCH/7oARfwmhamR9AI 1EOpxs4nGK16dzZtlzy9nzrNj8CsZuX99rI3w4d1tXbL3t2PXonznIGwmEvX7YrA hiXPQ8FYFNz7CIhMc0BF/1D+CW0bJgMBtoMEk+BFra1sMfzJq4Ut6vFsWevSepKg lakLPgQYZ/JhNmbLRT2pnIW6sUxnjzHVVDqURaIKzbMs8nP3+9QBCO0Dm9D1pkTr XpFens3S4sUfIPeopNhIH9LIVvoQVgjIgJaumwC4feXswq92PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWqoOMVu4S/NdJGk1zUsvIaID0VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjRlNGM3YjAtMGQxZi0z ZjgxLTllMWItMWNmMGE0ZjNjM2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgSxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA42Qd4QmbU9SLZbfIkTwiUia9gYNZQxGGnPmt+S83amyT1SqudTc1fP tB4uJ7xlYZPiwTStgJvoGGvl9N16t1gSO3i+71kIFAI8azN69cfsZeDUmf/17osY T8oqzW964fHu9M/euaFMFjRW363SGfsBj5N5SyYfDNksWqGhSvONpfRXnaBjOuof YW646pGztQQPzTtkC/XRV1nzwYd/UDdX5IgtErkJ+vuNF9/JMp7Yy/qJfuEtqMfk qrpO1p5o14qBWKy+tE0LOGBClWpoVBiWvnOzIWDUfFD3tTrvfyU07AnMP3729kVo tbkotxuzmiMvc/PhESQlMwxnQeeXnTc= -----END CERTIFICATE-----Generated at Mon Nov 2 19:11:17 2026 by rpki-client