$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a633d2d-a5a9-3bae-bb76-c188a9eb9e45.roa File: 7a633d2d-a5a9-3bae-bb76-c188a9eb9e45.roa (raw, json) Hash identifier: /YBdxyY7Nq+dvjXF+eNt9oI5JauIMd8d0lDmm0+zNwQ= Subject key identifier: 02:38:7B:E8:C8:27:CB:1D:FE:F2:97:C5:68:A9:2B:98:D7:34:8D:BF Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584E3E5F33103E04E8D482A35950 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a633d2d-a5a9-3bae-bb76-c188a9eb9e45.roa Signing time: Sun 21 Jun 2026 09:00:12 +0000 ROA not before: Sun 21 Jun 2026 09:00:12 +0000 ROA not after: Sat 19 Sep 2026 09:00:12 +0000 asID: 6167 IP address blocks: 166.147.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3e:5f:33:10:3e:04:e8:d4:82:a3:59:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 21 09:00:12 2026 GMT Not After : Sep 19 09:00:12 2026 GMT Subject: CN=8d1244bb-e588-4dd5-8603-bffdfe873278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7b:82:91:b7:2d:90:60:60:b6:29:49:3c:2d: d4:a9:7e:7b:44:0a:26:a1:f0:d3:70:44:2c:cf:7f: 4a:c0:1b:71:38:21:8e:4c:a9:9a:26:3d:19:8f:54: a2:09:3d:2a:21:4b:3e:cb:5b:5c:5c:d5:70:85:1b: 5e:57:26:a0:49:4d:de:91:b0:ea:a3:92:d3:40:31: 6a:6d:cc:a1:a9:81:1c:1c:0c:5b:dc:35:4d:aa:cf: 38:29:69:d4:79:b9:90:6f:92:5b:be:38:1b:7b:d9: 5a:ba:a8:70:e9:ae:62:3f:f0:63:de:1c:db:68:d7: 69:b0:f4:13:12:fe:53:c5:39:c7:a0:6a:50:68:7b: 4c:7c:95:e3:74:4a:4c:06:c0:aa:ee:7e:2e:f2:47: 52:8c:ee:3c:8c:d1:4d:91:8a:6d:d4:7d:e1:f1:8b: 14:eb:66:e7:fd:0f:a2:c5:58:a0:5e:59:89:39:e3: 5b:7c:11:2e:6e:e2:68:f3:f4:ec:7c:48:6e:b4:0e: e2:df:b1:98:6c:8e:c2:ed:80:e5:81:32:15:9d:20: e7:59:06:47:83:29:6b:ed:c9:76:39:35:5f:1a:47: 5f:a0:07:53:ce:86:06:84:63:fe:63:61:27:22:a6: 14:be:6d:ef:69:18:9a:65:96:8f:03:80:b9:45:6a: f7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:38:7B:E8:C8:27:CB:1D:FE:F2:97:C5:68:A9:2B:98:D7:34:8D:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a633d2d-a5a9-3bae-bb76-c188a9eb9e45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 166.147.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:dc:d1:48:a9:ec:ec:6e:9e:e8:8a:be:6b:5f:36:6b:60:5a: 3e:24:44:83:e4:f1:b0:f4:b7:1d:28:41:a1:9a:9f:be:20:f1: 6c:12:03:bf:a1:49:6d:b9:c9:7c:39:55:b6:81:cd:9a:ef:36: 80:90:15:64:2f:00:d7:93:91:a4:46:86:49:24:f8:f6:1b:25: 81:0c:60:bb:a4:33:8e:d8:3f:d6:7d:cd:92:79:9c:f0:22:a2: 5b:21:0a:08:46:6a:c6:3e:61:7d:62:9e:b7:47:7e:cb:6c:e0: 3a:8c:fb:86:f6:0c:4d:72:47:5e:7e:5f:29:eb:a2:50:34:a2: cd:b7:97:99:22:d8:d0:a3:9d:7d:c3:e0:32:24:1e:27:11:b2: 13:64:c0:30:1c:64:c0:b8:f4:e6:02:b9:3a:c1:6e:ec:9d:3b: e7:5e:79:88:6c:46:f4:6a:2e:7d:29:5a:cf:86:d3:22:04:c4: 3d:18:1c:67:6c:53:1a:dd:7e:48:53:6f:98:f9:43:25:8c:23: da:cf:02:1c:00:3e:6a:08:16:95:b2:e2:2f:93:21:ab:1f:41: 58:73:09:db:4a:a5:5a:34:e1:a3:f1:f0:98:09:56:43:b9:e5: ac:5c:b4:7a:03:4e:4d:c4:9d:46:5d:b8:aa:3c:34:00:39:b4: 55:19:fd:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4+XzMQPgTo1IKjWVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk OGQxMjQ0YmItZTU4OC00ZGQ1LTg2MDMtYmZmZGZlODczMjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHuCkbctkGBgtilJPC3UqX57RAomofDTcEQs z39KwBtxOCGOTKmaJj0Zj1SiCT0qIUs+y1tcXNVwhRteVyagSU3ekbDqo5LTQDFq bcyhqYEcHAxb3DVNqs84KWnUebmQb5Jbvjgbe9lauqhw6a5iP/Bj3hzbaNdpsPQT Ev5TxTnHoGpQaHtMfJXjdEpMBsCq7n4u8kdSjO48jNFNkYpt1H3h8YsU62bn/Q+i xVigXlmJOeNbfBEubuJo8/TsfEhutA7i37GYbI7C7YDlgTIVnSDnWQZHgylr7cl2 OTVfGkdfoAdTzoYGhGP+Y2EnIqYUvm3vaRiaZZaPA4C5RWr3lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAI4e+jIJ8sd/vKXxWipK5jXNI2/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvN2E2MzNkMmQtYTVhOS0z YmFlLWJiNzYtYzE4OGE5ZWI5ZTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGppOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3c0Uip7OxunuiKvmtfNmtgWj4kRIPk8bD0tx0oQaGan74g8WwSA7+h SW25yXw5VbaBzZrvNoCQFWQvANeTkaRGhkkk+PYbJYEMYLukM47YP9Z9zZJ5nPAi olshCghGasY+YX1inrdHfsts4DqM+4b2DE1yR15+XynrolA0os23l5ki2NCjnX3D 4DIkHicRshNkwDAcZMC49OYCuTrBbuydO+deeYhsRvRqLn0pWs+G0yIExD0YHGds UxrdfkhTb5j5QyWMI9rPAhwAPmoIFpWy4i+TIasfQVhzCdtKpVo04aPx8JgJVkO5 5axctHoDTk3EnUZduKo8NAA5tFUZ/ZE= -----END CERTIFICATE-----Generated at Mon Jul 13 11:40:20 2026 by rpki-client