$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b4d0a29e-c9de-3370-85fa-9a014751ae68.roa File: b4d0a29e-c9de-3370-85fa-9a014751ae68.roa (raw, json) Hash identifier: qpUTPknXsf9X49UY2iQLfCEn5KKrffMXYLqeR4DZ6PM= Subject key identifier: 00:72:DE:B7:31:1F:35:A8:14:EF:94:5E:EA:11:BD:A7:8D:9B:76:96 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D6C0FD8AC478433B33D870100 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b4d0a29e-c9de-3370-85fa-9a014751ae68.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 6167 IP address blocks: 97.217.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:d8:ac:47:84:33:b3:3d:87:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=c5cf7d7c-48a6-40ee-99bd-511e99fcbad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:af:e0:dc:2e:de:67:2e:8d:99:32:ff:75:9e: 52:fb:25:ce:6e:41:e2:0d:21:5e:a0:09:41:3a:21: 77:3a:b1:82:be:28:e4:53:92:b5:06:15:c8:7d:9b: 46:63:c1:6a:b3:f5:0e:1e:e5:23:0c:b6:97:03:d1: d2:cd:10:96:96:bd:e4:2c:d7:8b:a2:5a:e3:0f:fb: 9f:73:f0:c6:7b:79:30:38:1f:3f:1a:11:f2:bd:f1: 55:57:ad:7c:f3:6e:7a:4b:2e:07:f0:d1:90:32:1d: db:4e:01:06:17:a0:fe:fd:ce:74:02:b9:c6:d3:2f: 7f:d5:f1:77:e7:1a:a3:2c:75:d8:b0:d5:a0:19:c5: 42:0f:8e:3c:54:b1:57:53:de:26:9d:86:1a:12:52: b7:9f:31:db:fb:9e:20:c9:61:93:14:b5:51:c4:3c: 34:91:f6:1b:06:79:5b:f2:dc:6b:d0:6e:46:25:5d: 51:86:6e:64:14:68:2f:6e:2a:63:f2:0f:3f:43:8d: 4a:4a:88:b1:93:00:8a:20:23:da:21:90:a9:e1:9e: 2b:28:54:6a:5e:aa:69:1b:47:8e:9c:50:84:4d:00: 0e:a5:55:dc:f4:fb:21:6f:c8:67:ce:88:21:9c:41: df:3e:99:c7:0e:d2:df:50:2b:48:79:48:aa:6a:55: 26:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:72:DE:B7:31:1F:35:A8:14:EF:94:5E:EA:11:BD:A7:8D:9B:76:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b4d0a29e-c9de-3370-85fa-9a014751ae68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 97.217.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:f6:15:b0:8f:4d:59:b7:9e:6c:58:2d:64:f1:c2:92:8f:d7: cc:08:df:a0:70:b9:7c:22:3b:6d:ca:58:ed:0f:10:1f:ff:27: f6:fb:15:53:c7:13:b3:e2:2b:0c:04:f2:66:34:f1:38:51:bd: f1:d1:e2:4c:7c:72:0a:a3:22:85:2d:de:16:69:bc:ec:42:b3: f9:22:92:28:4c:e4:9b:05:81:90:f7:52:19:5e:fa:13:3d:93: ef:f0:70:b3:0e:e2:0b:14:96:e3:3e:62:d5:79:91:4b:28:71: 42:38:79:99:5f:a7:2d:59:82:9d:4a:f0:4f:36:19:2b:77:ec: 8f:83:6e:14:06:13:5b:42:d4:88:4a:65:be:30:4b:bf:87:3d: e9:46:4e:41:83:b5:5a:4f:51:e6:a0:f5:d1:be:9e:75:26:87: e2:54:7d:8e:99:db:54:91:92:3d:06:7a:a5:fb:8c:bd:c7:f3: 48:eb:28:6c:14:50:1e:2b:89:55:9c:1f:da:93:1e:a4:d9:6d: 3e:d4:c9:f0:21:ca:f0:87:97:65:77:f7:91:19:8e:4c:96:6f: 5c:88:8c:c7:b2:9f:90:69:90:0c:bb:e7:58:cb:c6:03:e6:39: 96:13:3b:8d:8e:e5:6c:3b:50:47:5b:1c:3e:8b:73:8f:6e:e5: da:b5:b4:4a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1sD9isR4Qzsz2HAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk YzVjZjdkN2MtNDhhNi00MGVlLTk5YmQtNTExZTk5ZmNiYWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4a/g3C7eZy6NmTL/dZ5S+yXObkHiDSFeoAlB OiF3OrGCvijkU5K1BhXIfZtGY8Fqs/UOHuUjDLaXA9HSzRCWlr3kLNeLolrjD/uf c/DGe3kwOB8/GhHyvfFVV6188256Sy4H8NGQMh3bTgEGF6D+/c50ArnG0y9/1fF3 5xqjLHXYsNWgGcVCD448VLFXU94mnYYaElK3nzHb+54gyWGTFLVRxDw0kfYbBnlb 8txr0G5GJV1Rhm5kFGgvbipj8g8/Q41KSoixkwCKICPaIZCp4Z4rKFRqXqppG0eO nFCETQAOpVXc9Pshb8hnzoghnEHfPpnHDtLfUCtIeUiqalUmzQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFABy3rcxHzWoFO+UXuoRvaeNm3aWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjRkMGEyOWUtYzlkZS0z MzcwLTg1ZmEtOWEwMTQ3NTFhZTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYdkwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEADfYVsI9NWbeebFgtZPHCko/XzAjfoHC5fCI7bcpY7Q8QH/8n9vsVU8cT s+IrDATyZjTxOFG98dHiTHxyCqMihS3eFmm87EKz+SKSKEzkmwWBkPdSGV76Ez2T 7/Bwsw7iCxSW4z5i1XmRSyhxQjh5mV+nLVmCnUrwTzYZK3fsj4NuFAYTW0LUiEpl vjBLv4c96UZOQYO1Wk9R5qD10b6edSaH4lR9jpnbVJGSPQZ6pfuMvcfzSOsobBRQ HiuJVZwf2pMepNltPtTJ8CHK8IeXZXf3kRmOTJZvXIiMx7KfkGmQDLvnWMvGA+Y5 lhM7jY7lbDtQR1scPotzj27l2rW0Sg== -----END CERTIFICATE-----Generated at Mon Apr 13 17:16:28 2026 by rpki-client