$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/74571ba8-9bdd-3a69-9109-8281ddfe5ad6.roa File: 74571ba8-9bdd-3a69-9109-8281ddfe5ad6.roa (raw, json) Hash identifier: ZOnUpHN9e9icwY5offbQI+0/+n8jRVUnLq8+yE9ApdI= Subject key identifier: 0C:6B:FA:A0:A6:8F:E8:8B:A6:FD:5E:9A:CC:D2:6D:9C:8D:2D:57:FB Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F90A30E0134569E38E08BD000 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/74571ba8-9bdd-3a69-9109-8281ddfe5ad6.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 701 IP address blocks: 96.238.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a3:0e:01:34:56:9e:38:e0:8b:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=a23a7689-9bf8-4206-8b81-377679f887df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9c:b0:a4:5b:7c:83:80:d9:19:8d:f5:bc:ad: 32:63:1c:5d:77:11:24:83:37:c7:1e:82:e2:e2:fb: 79:c2:55:45:83:b3:b5:e1:af:25:97:5f:1f:e1:d6: 20:8d:b4:58:44:39:78:bb:b7:5f:5d:4a:0e:0d:1b: 2c:4c:56:4c:85:b9:c4:13:15:f5:a0:ce:d7:7d:e1: 85:f0:ad:c4:38:e7:73:6a:53:28:f6:28:3a:8b:93: 42:49:07:b8:d6:7e:0e:e8:62:a7:01:8a:63:3d:0c: 6d:5f:75:b2:e1:a2:95:d4:27:31:51:29:a1:8c:01: e2:e3:09:0e:03:81:34:a2:7e:d7:c0:8b:63:c7:de: ee:c3:61:74:15:60:74:1b:fe:e7:a0:a5:17:88:fd: e4:fe:d7:b4:56:2e:ec:79:75:a9:ed:1f:42:fc:2f: 43:3e:08:9d:21:14:ae:d8:ec:70:0f:eb:9d:5e:60: 60:34:77:bb:14:72:38:77:2e:31:c5:f1:d5:6c:1b: 79:6a:19:49:6d:c7:ca:c2:9a:16:1a:39:59:39:a5: 0e:25:7a:de:33:14:2a:53:07:83:5d:ce:7f:a8:b7: 05:70:7b:87:54:b3:a0:9f:06:7f:23:36:4c:e4:f5: fe:2a:0c:b9:ca:06:4c:d2:a1:87:69:be:41:2f:2e: 69:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:6B:FA:A0:A6:8F:E8:8B:A6:FD:5E:9A:CC:D2:6D:9C:8D:2D:57:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/74571ba8-9bdd-3a69-9109-8281ddfe5ad6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 96.238.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:5d:cc:c3:9a:fe:5c:ca:b9:78:72:54:6e:dc:33:38:32:e7: 48:87:21:d8:5f:74:3a:fa:fb:d0:d8:9b:fa:b0:2a:4a:87:ae: 56:5f:46:d2:ed:d7:30:a3:ce:e1:98:38:1b:62:55:06:4c:2f: 92:8d:58:94:91:3b:4c:85:b5:1f:89:33:4c:63:ca:d0:8a:29: 7c:f6:1b:35:9b:3d:76:8e:7c:f4:8a:74:58:48:ca:b2:6c:2a: 62:b4:a9:7a:17:dc:68:b2:42:32:37:f7:e2:e2:4f:b3:bd:6f: ee:2f:f5:06:f0:4e:5e:65:f9:c1:bc:66:9a:39:7b:37:bf:45: a7:8b:0f:d0:d1:bd:e2:a1:78:ef:dc:61:e2:31:c8:00:e4:4d: 5e:3c:2a:00:3a:86:d1:15:4f:1a:9a:f3:bb:43:1b:0e:da:45: 9f:36:48:02:b5:cd:40:9e:58:74:e2:3f:1d:f3:30:17:57:90: df:36:d5:53:7a:d5:06:97:1e:70:5a:33:8f:3c:bf:ed:86:f5: 35:89:f1:c2:14:de:26:e0:17:98:61:0d:3e:60:54:81:d4:7c: 07:16:d4:3a:3d:50:20:fa:86:28:5f:58:6d:63:1e:d4:98:4f: ea:b0:22:49:f7:27:cf:5d:a4:53:3f:cf:90:c6:43:e0:02:48: e6:2d:a5:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+Qow4BNFaeOOCL0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk YTIzYTc2ODktOWJmOC00MjA2LThiODEtMzc3Njc5Zjg4N2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZywpFt8g4DZGY31vK0yYxxddxEkgzfHHoLi 4vt5wlVFg7O14a8ll18f4dYgjbRYRDl4u7dfXUoODRssTFZMhbnEExX1oM7XfeGF 8K3EOOdzalMo9ig6i5NCSQe41n4O6GKnAYpjPQxtX3Wy4aKV1CcxUSmhjAHi4wkO A4E0on7XwItjx97uw2F0FWB0G/7noKUXiP3k/te0Vi7seXWp7R9C/C9DPgidIRSu 2OxwD+udXmBgNHe7FHI4dy4xxfHVbBt5ahlJbcfKwpoWGjlZOaUOJXreMxQqUweD Xc5/qLcFcHuHVLOgnwZ/IzZM5PX+Kgy5ygZM0qGHab5BLy5pawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxr+qCmj+iLpv1emszSbZyNLVf7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzQ1NzFiYTgtOWJkZC0z YTY5LTkxMDktODI4MWRkZmU1YWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFYO6gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9dzMOa/lzKuXhyVG7cMzgy50iHIdhfdDr6+9DYm/qwKkqHrlZfRtLt 1zCjzuGYOBtiVQZML5KNWJSRO0yFtR+JM0xjytCKKXz2GzWbPXaOfPSKdFhIyrJs KmK0qXoX3GiyQjI39+LiT7O9b+4v9QbwTl5l+cG8Zpo5eze/RaeLD9DRveKheO/c YeIxyADkTV48KgA6htEVTxqa87tDGw7aRZ82SAK1zUCeWHTiPx3zMBdXkN821VN6 1QaXHnBaM488v+2G9TWJ8cIU3ibgF5hhDT5gVIHUfAcW1Do9UCD6hihfWG1jHtSY T+qwIkn3J89dpFM/z5DGQ+ACSOYtpec= -----END CERTIFICATE-----Generated at Mon Nov 2 07:28:20 2026 by rpki-client