$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b59c7721-d9dd-3fa3-b654-fb3ccf8e69a5.roa File: b59c7721-d9dd-3fa3-b654-fb3ccf8e69a5.roa (raw, json) Hash identifier: pZF5GDXqPnkvptBZOmA27KClAZePX4Pc4NmLkgB/fUg= Subject key identifier: 81:C7:80:2B:15:E3:24:34:E7:5D:A1:09:76:22:81:FC:AB:CE:0C:D7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F9A688A673CB441773540A480 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b59c7721-d9dd-3fa3-b654-fb3ccf8e69a5.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 701 IP address blocks: 173.66.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:8a:67:3c:b4:41:77:35:40:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=95d35592-9827-4fe0-b783-566a7c8e08ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d0:27:21:25:22:2b:9d:67:44:59:e5:d2:a9: 45:30:e0:35:b9:1d:06:09:9b:dd:8c:0c:37:04:4e: 97:dd:98:ed:31:5b:d6:62:29:ff:3d:e6:2f:aa:3c: 59:1e:b6:29:34:b2:e8:bd:81:2a:80:60:35:90:6f: 07:98:65:f4:00:09:41:7f:34:bc:8d:43:d5:71:ec: d7:e8:1f:ac:b7:12:47:08:40:83:17:18:a6:b6:d6: 91:2d:4c:75:e9:c9:80:1a:5d:77:00:41:3a:7d:c9: a6:74:a2:91:c0:99:f7:c9:c3:8b:e4:21:60:35:70: e8:dc:d8:9b:80:f0:e5:57:ea:7d:13:cc:a8:19:75: e6:9d:58:b0:be:04:98:26:f7:4f:eb:53:bb:67:16: 3f:8e:90:d1:1b:a0:3a:96:2a:b8:c6:7b:8d:a7:20: 61:26:d5:08:f1:a6:99:2c:08:de:e3:e2:5e:c2:8b: 7f:9e:4c:fe:c1:af:65:04:f3:29:d0:77:38:2b:e7: b3:1c:fa:cb:0b:79:ce:a6:29:31:7e:e9:f5:eb:54: e2:da:f0:5a:3b:02:8c:b9:a6:fc:2b:b9:1a:d5:60: 2e:f0:77:bd:66:f8:43:0d:96:32:95:41:cb:a7:40: 54:e4:f5:3d:53:fc:10:3b:6e:5e:69:11:8a:57:15: ff:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C7:80:2B:15:E3:24:34:E7:5D:A1:09:76:22:81:FC:AB:CE:0C:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b59c7721-d9dd-3fa3-b654-fb3ccf8e69a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 173.66.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:9a:64:52:4b:35:62:64:dc:3f:82:11:04:d3:a6:a9:bc:24: 13:0b:eb:a3:a6:ca:b8:b5:bb:70:19:ab:88:8d:86:8f:8b:62: e1:d9:5d:12:bf:c2:0d:af:09:79:2f:14:62:2b:65:8b:9c:7d: 07:19:e4:26:bc:c9:70:1d:ab:72:27:a9:2a:13:0f:9d:a9:ad: f5:e4:c7:00:1b:b2:7e:31:69:e7:b2:af:bc:ac:f2:12:0f:45: 43:44:e2:3e:17:46:e8:e5:2a:b1:ce:97:a8:55:bb:f1:38:fb: d8:f9:f2:8d:7f:f7:9d:d3:b7:54:db:a7:3a:d5:ab:52:17:00: 0f:fe:b7:f6:44:a8:a5:16:8f:7a:c0:bc:9b:e6:04:a5:a4:a3: 2e:63:0c:fc:64:10:44:8e:c4:fc:44:a5:a1:5e:17:78:09:ae: 6f:c8:92:1f:e1:8a:c2:8b:46:11:82:56:2b:d5:1b:c4:5a:eb: 98:43:cb:a8:ca:94:e6:d1:16:ed:ac:1d:12:19:d2:26:8f:ef: 9d:b6:9f:ad:32:aa:38:ed:d1:1b:6c:b3:4f:c9:e5:c6:09:59: 5b:15:d9:ca:6e:a0:6f:fd:2f:71:b2:1b:ef:bf:2a:9b:b6:68: 01:a4:69:fc:82:02:a3:aa:42:2b:f3:03:27:9f:2e:a0:62:a6: 21:10:f2:a8 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE+aaIpnPLRBdzVApIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk OTVkMzU1OTItOTgyNy00ZmUwLWI3ODMtNTY2YTdjOGUwOGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9AnISUiK51nRFnl0qlFMOA1uR0GCZvdjAw3 BE6X3ZjtMVvWYin/PeYvqjxZHrYpNLLovYEqgGA1kG8HmGX0AAlBfzS8jUPVcezX 6B+stxJHCECDFximttaRLUx16cmAGl13AEE6fcmmdKKRwJn3ycOL5CFgNXDo3Nib gPDlV+p9E8yoGXXmnViwvgSYJvdP61O7ZxY/jpDRG6A6liq4xnuNpyBhJtUI8aaZ LAje4+Jewot/nkz+wa9lBPMp0Hc4K+ezHPrLC3nOpikxfun161Ti2vBaOwKMuab8 K7ka1WAu8He9ZvhDDZYylUHLp0BU5PU9U/wQO25eaRGKVxX/MQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIHHgCsV4yQ0512hCXYigfyrzgzXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjU5Yzc3MjEtZDlkZC0z ZmEzLWI2NTQtZmIzY2NmOGU2OWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMArUIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAoppkUks1YmTcP4IRBNOmqbwkEwvro6bKuLW7cBmriI2Gj4ti4dldEr/C Da8JeS8UYitli5x9BxnkJrzJcB2rciepKhMPnamt9eTHABuyfjFp57KvvKzyEg9F Q0TiPhdG6OUqsc6XqFW78Tj72PnyjX/3ndO3VNunOtWrUhcAD/639kSopRaPesC8 m+YEpaSjLmMM/GQQRI7E/ESloV4XeAmub8iSH+GKwotGEYJWK9UbxFrrmEPLqMqU 5tEW7awdEhnSJo/vnbafrTKqOO3RG2yzT8nlxglZWxXZym6gb/0vcbIb778qm7Zo AaRp/IICo6pCK/MDJ58uoGKmIRDyqA== -----END CERTIFICATE-----Generated at Sun Nov 1 19:41:58 2026 by rpki-client