$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b098d0ca-34d6-3553-b5aa-6323f9bed58e.roa File: b098d0ca-34d6-3553-b5aa-6323f9bed58e.roa (raw, json) Hash identifier: t9EQd3JlSnxYKe3T/9kcDEyfoQ2eyV0/Gk0lr7reH7Q= Subject key identifier: E8:D5:99:CB:D0:D4:FC:BA:77:A1:34:AF:21:89:DC:05:CD:B3:40:CC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F89A87F72A422B222373B4A80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b098d0ca-34d6-3553-b5aa-6323f9bed58e.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 701 IP address blocks: 71.127.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:7f:72:a4:22:b2:22:37:3b:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=9166a937-44e5-4428-a429-9ff9b14d8f19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:23:e6:6f:fe:09:20:c2:74:99:3e:c1:60:69: ba:1d:c9:d5:d9:d4:7c:2f:92:29:98:c0:12:d7:35: 62:36:a5:74:5e:27:9d:bf:e4:7f:ad:c7:9c:07:3e: 3f:ca:f8:00:10:d0:4e:2a:0c:ae:cb:65:29:59:b0: f9:72:c3:49:0e:90:e7:99:08:b6:d6:d2:55:07:7d: 15:67:20:3e:20:f8:28:c7:bd:e7:8e:93:6f:b7:42: 4d:a5:90:57:c3:6d:d7:47:66:4d:a9:5c:25:c0:6a: 18:22:2b:03:c1:f0:35:85:df:a2:83:4a:fc:91:e6: 4b:4e:16:b2:36:1f:99:0d:05:7f:30:f9:f3:78:6b: 1c:c5:e5:3b:e7:84:26:89:86:0a:ce:b2:42:16:48: 1a:06:31:56:90:e6:87:cc:b3:d0:cf:21:09:0b:a1: e2:7b:a0:b8:b9:a3:4b:dd:93:78:09:b7:96:e2:5e: 18:ac:8a:21:db:ff:bc:b3:cf:57:b9:5c:3d:72:2f: 61:af:74:64:03:dc:9f:97:84:d9:c4:42:28:7a:a4: cf:a6:86:f2:ff:6d:84:de:02:52:e8:b2:78:33:1d: 09:98:60:c8:67:13:0b:3a:02:2b:ad:82:9e:a3:d3: 68:c1:2a:bd:e9:f8:91:44:1e:d0:18:63:d8:4f:68: 98:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D5:99:CB:D0:D4:FC:BA:77:A1:34:AF:21:89:DC:05:CD:B3:40:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b098d0ca-34d6-3553-b5aa-6323f9bed58e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.127.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:20:3f:9c:0f:22:39:c0:48:8b:a9:8a:4c:0f:df:a8:f4:ff: e2:84:9b:bd:78:3f:11:85:00:d9:91:2e:14:95:4b:1c:69:6a: 94:c6:65:17:bf:8a:f8:b0:87:24:0e:d3:2d:50:e5:7e:ca:c1: bd:ce:98:96:8e:1c:36:0e:37:aa:2b:d1:f0:66:49:47:3c:f8: 40:c2:92:54:41:64:c7:d9:0a:0b:d5:fe:c6:12:97:9e:c3:e8: 64:7e:c6:16:14:12:51:42:79:7d:13:ed:c5:8a:9f:7d:a8:40: 05:e9:dc:70:03:16:1f:34:f3:e4:22:47:ba:bc:9c:26:11:0c: e2:30:3f:ae:96:cb:50:d6:2f:8e:cd:37:98:d2:0a:0e:1d:82: 21:32:40:a7:7d:7d:a1:35:fc:de:14:29:aa:cb:00:7b:63:59: 36:27:64:1f:8a:37:50:d8:57:e4:c8:e0:f5:c9:f1:62:b6:b3: a8:2d:3d:35:d4:ab:2c:d2:20:62:18:27:a1:81:f5:8c:6d:07: 2e:8a:2b:76:af:7d:43:d3:99:e4:70:f7:5a:b7:d5:10:ed:49: 26:5a:67:49:fc:bc:79:cb:14:b0:78:1a:ec:b7:68:5d:2a:8c: c4:a5:83:a8:3a:9c:06:a4:89:4e:27:48:f0:bb:f6:d5:71:c0: 5a:c3:8a:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqH9ypCKyIjc7SoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk OTE2NmE5MzctNDRlNS00NDI4LWE0MjktOWZmOWIxNGQ4ZjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiPmb/4JIMJ0mT7BYGm6HcnV2dR8L5IpmMAS 1zViNqV0Xiedv+R/rcecBz4/yvgAENBOKgyuy2UpWbD5csNJDpDnmQi21tJVB30V ZyA+IPgox73njpNvt0JNpZBXw23XR2ZNqVwlwGoYIisDwfA1hd+ig0r8keZLThay Nh+ZDQV/MPnzeGscxeU754QmiYYKzrJCFkgaBjFWkOaHzLPQzyEJC6Hie6C4uaNL 3ZN4CbeW4l4YrIoh2/+8s89XuVw9ci9hr3RkA9yfl4TZxEIoeqTPpoby/22E3gJS 6LJ4Mx0JmGDIZxMLOgIrrYKeo9NowSq96fiRRB7QGGPYT2iYfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjVmcvQ1Py6d6E0ryGJ3AXNs0DMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjA5OGQwY2EtMzRkNi0z NTUzLWI1YWEtNjMyM2Y5YmVkNThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER38AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALEgP5wPIjnASIupikwP36j0/+KEm714PxGFANmRLhSVSxxpapTGZRe/ iviwhyQO0y1Q5X7Kwb3OmJaOHDYON6or0fBmSUc8+EDCklRBZMfZCgvV/sYSl57D 6GR+xhYUElFCeX0T7cWKn32oQAXp3HADFh808+QiR7q8nCYRDOIwP66Wy1DWL47N N5jSCg4dgiEyQKd9faE1/N4UKarLAHtjWTYnZB+KN1DYV+TI4PXJ8WK2s6gtPTXU qyzSIGIYJ6GB9YxtBy6KK3avfUPTmeRw91q31RDtSSZaZ0n8vHnLFLB4Guy3aF0q jMSlg6g6nAakiU4nSPC79tVxwFrDiss= -----END CERTIFICATE-----Generated at Sun Nov 1 14:40:14 2026 by rpki-client