$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aaaf6ba2-fd76-3cd9-8542-b3caadd37801.roa File: aaaf6ba2-fd76-3cd9-8542-b3caadd37801.roa (raw, json) Hash identifier: 01hr3rP7ShxT99dot5a+0oR4tXlF+sYrH5ZafkhyK5w= Subject key identifier: 79:5C:95:1C:C6:A3:BD:C4:7F:F4:BA:23:D3:0F:83:1A:D5:E6:DF:11 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F90A31CDA6CE3A232A148A400 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aaaf6ba2-fd76-3cd9-8542-b3caadd37801.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 701 IP address blocks: 71.243.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a3:1c:da:6c:e3:a2:32:a1:48:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=bb8f53b1-c6e8-4bab-9bba-16609c22629f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2e:28:9f:0a:d0:31:83:df:e9:17:fa:32:ba: 7a:ad:9c:22:3b:89:d8:9d:c7:f8:a3:12:b6:20:35: 03:f1:e6:a7:25:e9:ac:cd:c1:3e:30:bb:e1:ac:f7: 6f:86:63:91:bc:84:b2:d2:47:95:a9:83:07:29:51: c3:88:67:7e:81:ba:35:79:68:ac:b7:28:b4:2d:27: f2:99:7f:01:a5:d2:d6:fb:e0:41:15:a4:bc:10:2d: de:70:b1:a6:40:7e:8d:e2:51:c5:bf:30:61:1f:8d: cb:4d:9f:46:08:ee:a2:5c:af:13:f5:05:48:17:0e: 49:42:e5:28:07:72:4b:e8:e0:a7:ed:42:7f:6c:a9: 9e:bb:ab:7a:5d:5e:21:ab:19:8b:d7:79:4e:52:da: 53:b0:4c:a8:e1:74:29:ce:c8:1e:ab:a6:f7:65:0d: af:2c:02:e3:ad:9e:45:a8:dd:ba:37:49:16:5b:5f: 90:92:e0:bc:06:2a:89:93:fb:38:78:6a:68:8a:7c: 05:94:a0:3a:0e:ac:72:c0:c0:71:5a:a6:49:90:a9: a6:c2:4c:d6:8c:ac:9c:36:47:f4:cb:45:e5:22:25: d3:bb:8c:5b:0d:a8:43:6d:03:fc:8b:df:20:cd:17: 56:c2:84:9c:69:32:64:0d:bb:12:b2:62:dc:a7:16: ab:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:5C:95:1C:C6:A3:BD:C4:7F:F4:BA:23:D3:0F:83:1A:D5:E6:DF:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aaaf6ba2-fd76-3cd9-8542-b3caadd37801.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.243.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:64:0c:da:a7:db:e1:ba:b2:54:15:73:d2:6b:a6:50:dc:a5: 7c:ed:ad:54:d3:35:9f:fd:0e:c4:10:67:13:c4:e4:94:2b:fa: 23:e7:50:f6:ad:45:4d:bf:5b:7c:df:a5:33:2c:10:1d:d5:88: 25:23:30:35:8c:fb:ef:aa:35:2a:d4:29:e8:36:6f:a3:da:4b: f0:d1:00:6b:86:9b:93:06:f6:32:50:2e:e7:38:46:1a:9d:20: 11:d2:0f:99:b7:c7:4d:f2:0d:ae:b5:07:36:c8:40:f5:2d:e0: 92:90:c8:4e:91:fa:65:2a:30:37:25:e6:a4:44:d7:f5:98:69: 56:d8:35:7e:86:ff:c0:73:cb:3a:4a:d5:d4:5d:5c:a1:51:99: 73:d2:e8:9c:c4:7a:cb:ba:f5:f2:fc:11:fd:ab:0c:60:fe:5b: 44:63:9c:9d:2d:3c:31:96:38:26:27:ed:9a:c8:73:a9:35:94: cd:26:85:32:0d:6e:a0:77:06:10:5b:97:32:09:be:bf:e5:1b: 10:7b:64:c1:b5:c0:7d:51:42:3c:62:8e:12:2c:17:fe:9c:df: ad:bc:ae:8f:d2:b9:cd:4d:3b:b1:95:cc:a0:a3:2d:13:f9:f2: 05:7b:a3:a0:bd:13:a1:d3:9e:fb:10:64:20:f2:d9:7a:66:43: 75:dd:1c:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+QoxzabOOiMqFIpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk YmI4ZjUzYjEtYzZlOC00YmFiLTliYmEtMTY2MDljMjI2MjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4C4onwrQMYPf6Rf6Mrp6rZwiO4nYncf4oxK2 IDUD8eanJemszcE+MLvhrPdvhmORvISy0keVqYMHKVHDiGd+gbo1eWistyi0LSfy mX8BpdLW++BBFaS8EC3ecLGmQH6N4lHFvzBhH43LTZ9GCO6iXK8T9QVIFw5JQuUo B3JL6OCn7UJ/bKmeu6t6XV4hqxmL13lOUtpTsEyo4XQpzsgeq6b3ZQ2vLALjrZ5F qN26N0kWW1+QkuC8BiqJk/s4eGpoinwFlKA6DqxywMBxWqZJkKmmwkzWjKycNkf0 y0XlIiXTu4xbDahDbQP8i98gzRdWwoScaTJkDbsSsmLcpxarMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlclRzGo73Ef/S6I9MPgxrV5t8RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWFhZjZiYTItZmQ3Ni0z Y2Q5LTg1NDItYjNjYWFkZDM3ODAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGR/OAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK9kDNqn2+G6slQVc9JrplDcpXztrVTTNZ/9DsQQZxPE5JQr+iPnUPat RU2/W3zfpTMsEB3ViCUjMDWM+++qNSrUKeg2b6PaS/DRAGuGm5MG9jJQLuc4Rhqd IBHSD5m3x03yDa61BzbIQPUt4JKQyE6R+mUqMDcl5qRE1/WYaVbYNX6G/8BzyzpK 1dRdXKFRmXPS6JzEesu69fL8Ef2rDGD+W0RjnJ0tPDGWOCYn7ZrIc6k1lM0mhTIN bqB3BhBblzIJvr/lGxB7ZMG1wH1RQjxijhIsF/6c3628ro/Suc1NO7GVzKCjLRP5 8gV7o6C9E6HTnvsQZCDy2XpmQ3XdHPs= -----END CERTIFICATE-----Generated at Sun Nov 1 07:43:59 2026 by rpki-client