$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/91efcbf0-205e-3556-9ce3-5b7b8dfe6f18.roa File: 91efcbf0-205e-3556-9ce3-5b7b8dfe6f18.roa (raw, json) Hash identifier: oHjBNnrfOFreXBzd773CIY3NVgSXbUOijg3EcYENPss= Subject key identifier: FE:2C:D1:1D:43:1E:6F:30:E9:86:B2:A2:E1:12:1F:BC:E8:78:6D:46 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F90A30E7F86672A802E232D00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/91efcbf0-205e-3556-9ce3-5b7b8dfe6f18.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 701 IP address blocks: 72.70.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a3:0e:7f:86:67:2a:80:2e:23:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=3e76824a-c51d-4023-ae3a-9136f41b520a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:be:bd:24:36:de:4b:6c:7a:81:bb:47:e3:0c: f5:3e:a6:b9:4d:18:7b:85:ea:64:fe:f3:3f:8e:03: ca:33:27:8c:cd:9e:ff:dc:0b:9e:2e:fb:9e:6b:73: 13:63:a2:74:e5:f2:12:94:4b:c5:be:72:ad:66:06: aa:fa:b9:bc:31:b3:27:f2:b7:f7:0b:e5:12:25:98: a1:da:d2:18:dd:58:12:96:a9:af:2d:25:ff:e5:e6: 9c:11:7f:23:f2:af:be:3a:ed:a2:e3:26:8a:77:af: 1e:63:ca:d8:eb:f5:ff:df:a4:2e:10:9e:72:fb:0e: 92:09:47:d9:f2:f5:ff:3b:39:27:7f:92:07:19:d7: 60:99:1e:18:b5:b1:d2:f7:f5:fb:4f:08:e6:34:69: b9:a5:a2:e3:37:eb:57:8e:09:97:f5:d8:eb:bc:3c: a0:58:21:3e:02:db:32:d5:bb:0f:58:29:22:22:01: da:25:09:6d:a3:4f:06:9b:24:15:41:53:f7:e4:12: f2:2f:b7:ad:ee:73:c3:9d:64:65:72:dd:35:d0:cb: 34:e5:5f:63:6b:d7:ea:2f:8b:ba:a5:13:1c:40:ce: 9b:e8:c1:ba:c1:8a:9f:7a:47:e9:20:68:6d:44:fe: 15:84:a0:87:03:91:e9:74:eb:26:ea:f1:62:2d:4a: e1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:2C:D1:1D:43:1E:6F:30:E9:86:B2:A2:E1:12:1F:BC:E8:78:6D:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/91efcbf0-205e-3556-9ce3-5b7b8dfe6f18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.70.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:ec:f1:2c:b7:64:83:78:ce:ce:17:fc:05:f8:29:87:94:44: 0c:73:f6:d3:49:5a:a4:eb:49:44:4a:24:19:60:01:35:88:d1: ea:45:38:ed:76:86:fc:04:d2:68:e0:3e:ae:71:ba:3b:7b:b1: 78:5c:30:d4:c6:b2:92:fe:0c:f7:87:16:7a:5b:96:8e:64:4e: da:54:cb:a9:66:fc:c1:32:b6:4e:6b:39:dc:78:8d:b8:ec:e2: 67:aa:61:bf:4d:64:bd:b1:1c:fd:d8:ba:58:46:51:78:1f:27: 60:de:59:47:0b:96:9b:52:67:e9:94:3d:ec:93:83:30:c2:86: 6b:ae:dd:c9:18:23:cc:cd:e5:61:84:d5:96:57:8b:5b:3e:59: b5:e5:ad:a0:09:91:c2:5b:57:2a:91:0f:b0:80:c4:0f:0a:ca: f4:ce:3a:8e:92:bb:80:05:30:e7:af:8a:54:89:3c:f8:e9:34: 0a:fe:e5:4a:ef:3b:45:25:6a:0f:0f:c7:53:f8:9d:6e:c6:10: cb:30:c7:c1:bd:47:d8:72:5a:78:d1:35:44:43:29:4f:74:6b: 2c:98:0f:3f:55:59:fa:01:23:81:2f:e0:aa:29:71:c9:2f:33: dc:41:bc:ae:51:9b:6c:8b:2c:ed:4f:1b:fb:89:36:6d:5c:8b: 04:4e:78:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+Qow5/hmcqgC4jLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk M2U3NjgyNGEtYzUxZC00MDIzLWFlM2EtOTEzNmY0MWI1MjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgL69JDbeS2x6gbtH4wz1Pqa5TRh7hepk/vM/ jgPKMyeMzZ7/3AueLvuea3MTY6J05fISlEvFvnKtZgaq+rm8MbMn8rf3C+USJZih 2tIY3VgSlqmvLSX/5eacEX8j8q++Ou2i4yaKd68eY8rY6/X/36QuEJ5y+w6SCUfZ 8vX/Ozknf5IHGddgmR4YtbHS9/X7TwjmNGm5paLjN+tXjgmX9djrvDygWCE+Atsy 1bsPWCkiIgHaJQlto08GmyQVQVP35BLyL7et7nPDnWRlct010Ms05V9ja9fqL4u6 pRMcQM6b6MG6wYqfekfpIGhtRP4VhKCHA5HpdOsm6vFiLUrh8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4s0R1DHm8w6YayouESH7zoeG1GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOTFlZmNiZjAtMjA1ZS0z NTU2LTljZTMtNWI3YjhkZmU2ZjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSEbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/s8Sy3ZIN4zs4X/AX4KYeURAxz9tNJWqTrSURKJBlgATWI0epFOO12 hvwE0mjgPq5xujt7sXhcMNTGspL+DPeHFnpblo5kTtpUy6lm/MEytk5rOdx4jbjs 4meqYb9NZL2xHP3YulhGUXgfJ2DeWUcLlptSZ+mUPeyTgzDChmuu3ckYI8zN5WGE 1ZZXi1s+WbXlraAJkcJbVyqRD7CAxA8KyvTOOo6Su4AFMOevilSJPPjpNAr+5Urv O0Ulag8Px1P4nW7GEMswx8G9R9hyWnjRNURDKU90ayyYDz9VWfoBI4Ev4Kopcckv M9xBvK5Rm2yLLO1PG/uJNm1ciwROeCQ= -----END CERTIFICATE-----Generated at Sun Nov 1 14:52:16 2026 by rpki-client