$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b098d0ca-34d6-3553-b5aa-6323f9bed58e.roa File: b098d0ca-34d6-3553-b5aa-6323f9bed58e.roa (raw, json) Hash identifier: u0S+1CDDc8ZJtyd54s1XHonvSS7ChFHzisdV1NkF0SA= Subject key identifier: 4B:C1:5B:23:6A:4D:86:34:5A:55:9E:79:E1:FA:5F:7D:21:CA:7E:74 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EE7BCC0C0BA8CE2EBCEB88A40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b098d0ca-34d6-3553-b5aa-6323f9bed58e.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 701 IP address blocks: 71.127.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:c0:c0:ba:8c:e2:eb:ce:b8:8a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=98c49594-5feb-4eb2-82c2-b7fd0a7b8ac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ec:75:3a:dd:d2:d3:05:3d:47:f6:6c:9f:6d: 36:31:59:f5:f0:99:c4:86:52:74:2e:77:0d:98:bf: 61:5e:aa:2e:da:87:95:51:f0:4f:f9:44:0d:31:27: 73:7c:02:3c:26:10:d2:7b:d0:a5:67:3d:f9:df:71: c8:ff:53:4d:40:c7:93:32:c6:3e:e4:7e:6a:6c:66: 7c:0b:c8:9e:4e:b5:7d:b9:19:1f:7d:10:d5:69:83: f6:a5:8a:c9:d0:c6:e1:d5:54:60:18:56:d2:24:d8: 68:54:e1:ec:b6:77:70:23:3a:93:41:08:a0:d1:e3: 93:d4:71:0d:ca:93:67:f6:c7:54:97:d3:6b:f1:50: b9:84:6c:ad:bf:68:e8:de:20:fc:78:c9:8b:51:b9: 65:15:61:97:d2:fb:cf:46:0f:37:25:e3:16:d2:09: e9:db:67:94:8c:bf:e1:88:07:52:82:de:fd:4f:3d: 9b:c2:f3:43:30:db:20:7f:e5:36:4f:a3:62:35:c4: 7a:fa:46:e6:2a:95:21:68:5f:ef:cd:ae:85:72:d3: d4:73:8a:8e:d6:43:0e:67:e4:4a:76:11:b3:61:89: bb:41:9b:b5:86:db:ec:47:14:71:b0:03:2c:71:f8: c0:34:44:23:ab:ef:c6:0a:c0:64:d1:bd:4d:63:2a: d8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C1:5B:23:6A:4D:86:34:5A:55:9E:79:E1:FA:5F:7D:21:CA:7E:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b098d0ca-34d6-3553-b5aa-6323f9bed58e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.127.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:19:a5:82:57:3b:e1:a5:b0:be:c8:81:8a:b7:28:92:1b:0a: f7:a0:b1:f7:a6:dc:55:a4:40:c8:c3:1d:b3:f8:84:c7:5d:29: 65:72:32:1a:75:b5:85:ed:e8:d5:9b:fb:74:98:cf:5f:97:97: 8a:a1:1c:4f:84:e3:f5:d1:0b:06:c1:61:00:22:38:86:33:b7: fb:35:82:c2:c8:48:59:7c:1a:6d:e5:75:34:35:b8:0f:d1:b3: 29:37:e6:36:54:af:95:8b:a8:2c:11:e3:57:59:ab:55:e5:2c: 07:0a:10:26:81:b7:bc:d7:4e:74:ef:86:8b:0c:38:8b:2c:29: fa:1a:a0:96:3c:d8:18:b8:3e:8b:7a:59:40:88:ee:52:b1:ee: c4:df:4f:03:0e:de:03:4e:1d:81:e3:33:9f:7e:64:dc:22:51: d8:d7:05:90:7e:39:f4:8e:8a:ba:ae:ff:64:0e:09:e7:a1:ad: 3a:bc:fc:84:9c:22:a7:b0:5d:bd:1b:73:ac:17:d9:6f:67:96: d6:16:4d:63:c3:e3:10:46:d9:2a:6b:49:bd:db:fc:11:be:db: ab:be:90:b1:27:7e:28:f1:cf:57:b8:d8:30:3a:20:7e:16:c7: 29:e5:8e:84:42:06:42:62:46:21:ee:2c:87:b0:25:15:c5:6a: d8:a9:3c:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvMDAuozi6864ikAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk OThjNDk1OTQtNWZlYi00ZWIyLTgyYzItYjdmZDBhN2I4YWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+x1Ot3S0wU9R/Zsn202MVn18JnEhlJ0LncN mL9hXqou2oeVUfBP+UQNMSdzfAI8JhDSe9ClZz3533HI/1NNQMeTMsY+5H5qbGZ8 C8ieTrV9uRkffRDVaYP2pYrJ0Mbh1VRgGFbSJNhoVOHstndwIzqTQQig0eOT1HEN ypNn9sdUl9Nr8VC5hGytv2jo3iD8eMmLUbllFWGX0vvPRg83JeMW0gnp22eUjL/h iAdSgt79Tz2bwvNDMNsgf+U2T6NiNcR6+kbmKpUhaF/vza6FctPUc4qO1kMOZ+RK dhGzYYm7QZu1htvsRxRxsAMscfjANEQjq+/GCsBk0b1NYyrYAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvBWyNqTYY0WlWeeeH6X30hyn50MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjA5OGQwY2EtMzRkNi0z NTUzLWI1YWEtNjMyM2Y5YmVkNThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER38AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMZpYJXO+GlsL7IgYq3KJIbCvegsfem3FWkQMjDHbP4hMddKWVyMhp1 tYXt6NWb+3SYz1+Xl4qhHE+E4/XRCwbBYQAiOIYzt/s1gsLISFl8Gm3ldTQ1uA/R syk35jZUr5WLqCwR41dZq1XlLAcKECaBt7zXTnTvhosMOIssKfoaoJY82Bi4Pot6 WUCI7lKx7sTfTwMO3gNOHYHjM59+ZNwiUdjXBZB+OfSOirqu/2QOCeehrTq8/ISc IqewXb0bc6wX2W9nltYWTWPD4xBG2SprSb3b/BG+26u+kLEnfijxz1e42DA6IH4W xynljoRCBkJiRiHuLIewJRXFatipPIY= -----END CERTIFICATE-----Generated at Sun Sep 13 16:39:20 2026 by rpki-client