$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70db925b-72c6-31de-bede-8dfe1846dad0.roa File: 70db925b-72c6-31de-bede-8dfe1846dad0.roa (raw, json) Hash identifier: /VP2xWePJBYmMGxM1dEx9nE7SW8eHCTjmLGaspGtc+U= Subject key identifier: 3F:6F:BA:F8:BB:68:5F:69:C2:3B:D6:38:F9:31:B9:18:D2:3B:A0:E3 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EF717A177EC0B5BAA36039500 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70db925b-72c6-31de-bede-8dfe1846dad0.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 701 IP address blocks: 100.4.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:a1:77:ec:0b:5b:aa:36:03:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=31ab9d51-d063-4ff2-9ed0-90cd35bf2fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:96:c7:37:6f:0d:f8:74:2f:5a:75:13:9d:73: 8f:89:52:b8:07:58:50:33:8c:2e:0a:df:43:f2:f1: 1b:d7:9e:ec:a3:4c:0c:d7:6c:97:d5:7b:a3:f3:8c: 70:64:6f:fe:65:d7:ef:74:bd:11:52:26:40:f2:18: 0f:04:e0:0a:40:2b:76:4f:9e:36:3f:a8:ca:26:0e: 3d:a6:60:f5:83:26:21:56:5b:f4:81:9f:fb:13:34: 56:ab:dd:9b:02:14:6b:91:9e:c9:ab:cd:ec:fa:51: 82:e9:ac:7a:f2:b1:ef:19:46:9b:10:2b:61:25:e3: 8f:40:cd:9b:76:87:71:bc:f5:00:e8:cf:b7:5d:ad: f7:98:5b:21:6e:67:dc:43:41:ca:1b:ce:83:e1:cd: 42:c1:8b:f0:a6:8a:e5:39:2d:ce:3f:70:b0:c6:38: db:d2:ee:47:ca:41:3a:b4:bd:29:6a:ec:ce:b9:eb: 8c:30:7d:f6:d1:83:a8:1d:19:0c:d8:ae:2b:43:d0: 11:4d:c2:31:f2:a9:6a:a5:6f:3d:1c:fb:72:b7:7f: cc:e7:b2:54:bc:a5:63:e1:f8:fe:fb:12:eb:47:78: 01:e5:80:3d:b7:1c:f2:03:99:99:eb:27:53:9c:0c: 57:0f:01:da:40:71:60:54:26:67:cc:0c:6c:8a:ca: d0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:6F:BA:F8:BB:68:5F:69:C2:3B:D6:38:F9:31:B9:18:D2:3B:A0:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70db925b-72c6-31de-bede-8dfe1846dad0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 100.4.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:32:eb:22:e4:b9:0a:cb:8e:b8:1c:40:ea:da:fa:89:b3:65: d6:62:6d:7f:7b:1e:d7:69:b9:9e:d9:d8:4b:d0:de:41:68:fc: e0:2d:e4:ca:24:ef:c9:09:d7:65:38:d2:fc:da:bc:fc:5d:61: 81:7e:3d:f7:b1:0b:8d:23:67:56:a6:5e:ef:73:9f:ac:50:c8: 41:c1:73:62:be:52:5f:05:0a:90:6f:03:33:48:f3:67:72:18: 69:37:92:3e:85:ee:20:51:f3:af:62:19:9e:ce:90:e2:25:92: 28:c6:af:d8:66:58:a6:be:e9:37:a6:88:88:9c:d4:0a:ee:31: ca:a2:dd:3f:ca:f5:39:c5:e2:ab:1d:6e:af:4a:b4:dc:7a:2b: b3:7c:dd:2d:8a:1b:61:09:16:34:be:95:8d:f9:7c:30:3a:ab: 50:31:dd:94:51:a9:41:10:57:20:70:bf:06:b9:5f:67:33:a6: c8:c1:9b:9c:e2:3e:7a:45:dd:b5:a1:aa:a4:ca:66:cb:a5:eb: f1:52:87:4e:59:55:d2:0f:7a:32:6b:56:e1:59:d0:81:0f:35: 65:c7:f7:c7:9a:28:f1:08:14:3f:5b:8c:a5:5b:cb:07:80:e2: 9e:d5:35:11:91:d6:2d:58:17:79:f5:ca:c3:11:e2:b2:5f:51: 3a:7a:2a:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F6F37AtbqjYDlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk MzFhYjlkNTEtZDA2My00ZmYyLTllZDAtOTBjZDM1YmYyZmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5bHN28N+HQvWnUTnXOPiVK4B1hQM4wuCt9D 8vEb157so0wM12yX1Xuj84xwZG/+ZdfvdL0RUiZA8hgPBOAKQCt2T542P6jKJg49 pmD1gyYhVlv0gZ/7EzRWq92bAhRrkZ7Jq83s+lGC6ax68rHvGUabECthJeOPQM2b dodxvPUA6M+3Xa33mFshbmfcQ0HKG86D4c1CwYvwporlOS3OP3Cwxjjb0u5HykE6 tL0pauzOueuMMH320YOoHRkM2K4rQ9ARTcIx8qlqpW89HPtyt3/M57JUvKVj4fj+ +xLrR3gB5YA9txzyA5mZ6ydTnAxXDwHaQHFgVCZnzAxsisrQvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9vuvi7aF9pwjvWOPkxuRjSO6DjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzBkYjkyNWItNzJjNi0z MWRlLWJlZGUtOGRmZTE4NDZkYWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHZASAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAy6yLkuQrLjrgcQOra+omzZdZibX97HtdpuZ7Z2EvQ3kFo/OAt5Mok 78kJ12U40vzavPxdYYF+PfexC40jZ1amXu9zn6xQyEHBc2K+Ul8FCpBvAzNI82dy GGk3kj6F7iBR869iGZ7OkOIlkijGr9hmWKa+6TemiIic1AruMcqi3T/K9TnF4qsd bq9KtNx6K7N83S2KG2EJFjS+lY35fDA6q1Ax3ZRRqUEQVyBwvwa5X2czpsjBm5zi PnpF3bWhqqTKZsul6/FSh05ZVdIPejJrVuFZ0IEPNWXH98eaKPEIFD9bjKVbyweA 4p7VNRGR1i1YF3n1ysMR4rJfUTp6KvM= -----END CERTIFICATE-----Generated at Sun Sep 13 16:40:28 2026 by rpki-client