$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b7ca07ae-0f82-38b1-8da6-4e33df9b034f.roa File: b7ca07ae-0f82-38b1-8da6-4e33df9b034f.roa (raw, json) Hash identifier: LDt3GgDK4IgyRH+9XtnDxyDciTASB6GAUiUZKrauE7Y= Subject key identifier: 23:E8:5F:D7:36:2C:A4:67:02:0A:53:46:2A:10:05:2C:05:16:2F:20 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D52438C141368043816DD7F80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b7ca07ae-0f82-38b1-8da6-4e33df9b034f.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 398116 IP address blocks: 65.217.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:8c:14:13:68:04:38:16:dd:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=b88aba23-f47a-4b20-b037-5f53e15dd4a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e4:0b:12:0f:e9:0a:11:c2:83:a6:54:9f:8f: 57:e8:35:70:21:bf:8e:a0:a4:5f:ec:34:8d:8a:02: 23:6d:86:04:d5:37:99:b1:30:5d:d3:50:d8:e4:f6: de:f4:e0:7c:b7:6c:18:4a:48:64:c5:b7:e5:6c:07: 8e:75:d8:6a:c2:44:d8:a7:da:e8:05:24:b3:31:49: 7c:8e:db:60:2a:96:3f:7a:6c:95:d5:b9:aa:59:ad: 3b:ab:f8:5a:dc:0f:a2:20:c6:ea:c8:bc:fc:da:f1: 38:22:f0:aa:01:ac:36:69:72:2c:0e:72:07:72:07: d6:fd:e0:2e:51:13:f0:57:28:1c:71:ed:67:f2:4c: ff:4f:9c:54:0c:cb:b1:0b:64:88:ca:25:b4:99:7c: c8:3f:e2:2c:13:56:0f:04:de:16:b9:26:bd:e9:0e: 2f:09:84:95:81:27:fa:49:1c:b9:2d:1b:de:07:37: 23:56:6e:ba:65:25:5f:8e:a1:d6:6f:a9:15:a4:cf: 6f:a4:69:08:3e:f3:57:98:a0:cf:74:c7:da:74:7e: 85:46:2c:21:63:30:94:a0:d2:35:80:fa:e2:3c:42: d8:70:0c:91:64:29:91:36:1e:5f:b9:93:34:c4:57: be:e4:49:46:01:12:d2:ba:2e:b3:c2:8b:de:43:2f: d1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E8:5F:D7:36:2C:A4:67:02:0A:53:46:2A:10:05:2C:05:16:2F:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b7ca07ae-0f82-38b1-8da6-4e33df9b034f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 65.217.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:15:f3:19:07:fa:6c:26:51:9e:93:94:01:d5:41:f7:3d:50: 46:c2:a7:2c:57:73:c9:0d:bf:ec:41:5b:87:a6:e3:63:60:20: 7e:01:b2:87:c0:33:09:46:71:39:41:3e:11:67:99:45:ec:f7: 4e:f6:8c:eb:ae:7d:a4:d2:20:f8:1c:b7:0b:cf:1b:94:21:70: 59:6e:09:eb:8c:e2:f2:b1:19:d7:5e:c0:ad:52:4b:c8:99:cf: c7:6b:f6:9a:38:d8:1b:f6:8c:2f:9c:83:b9:91:9e:9b:92:cb: ca:cf:30:39:6c:cb:64:69:0a:30:bb:34:ee:ea:39:f2:c6:53: 35:ec:47:86:c0:1c:79:38:a6:34:a0:b7:2b:41:3e:08:f9:ca: aa:cd:ae:8d:81:08:cf:bb:fd:d7:b8:62:5a:cd:fa:93:42:d1: 11:a2:aa:d8:c3:65:e4:f9:2a:1f:cf:4c:c7:d1:75:2a:b2:d1: fc:ee:98:d3:df:6e:ec:69:3f:cf:3d:5c:72:fe:49:ce:fa:0c: fa:d1:0d:3c:26:b1:31:1e:c9:6b:2c:ea:1f:7a:45:e0:8f:40: ef:31:ca:1c:44:8e:6e:34:f5:ad:bb:32:ad:53:cf:71:3f:20: 30:60:45:68:6c:01:b6:90:17:1c:d4:5e:e1:2c:31:78:75:92: da:c0:55:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ4wUE2gEOBbdf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk Yjg4YWJhMjMtZjQ3YS00YjIwLWIwMzctNWY1M2UxNWRkNGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+QLEg/pChHCg6ZUn49X6DVwIb+OoKRf7DSN igIjbYYE1TeZsTBd01DY5Pbe9OB8t2wYSkhkxbflbAeOddhqwkTYp9roBSSzMUl8 jttgKpY/emyV1bmqWa07q/ha3A+iIMbqyLz82vE4IvCqAaw2aXIsDnIHcgfW/eAu URPwVygcce1n8kz/T5xUDMuxC2SIyiW0mXzIP+IsE1YPBN4WuSa96Q4vCYSVgSf6 SRy5LRveBzcjVm66ZSVfjqHWb6kVpM9vpGkIPvNXmKDPdMfadH6FRiwhYzCUoNI1 gPriPELYcAyRZCmRNh5fuZM0xFe+5ElGARLSui6zwoveQy/RjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPoX9c2LKRnAgpTRioQBSwFFi8gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjdjYTA3YWUtMGY4Mi0z OGIxLThkYTYtNGUzM2RmOWIwMzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQdnZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcV8xkH+mwmUZ6TlAHVQfc9UEbCpyxXc8kNv+xBW4em42NgIH4BsofA MwlGcTlBPhFnmUXs9072jOuufaTSIPgctwvPG5QhcFluCeuM4vKxGddewK1SS8iZ z8dr9po42Bv2jC+cg7mRnpuSy8rPMDlsy2RpCjC7NO7qOfLGUzXsR4bAHHk4pjSg tytBPgj5yqrNro2BCM+7/de4YlrN+pNC0RGiqtjDZeT5Kh/PTMfRdSqy0fzumNPf buxpP889XHL+Sc76DPrRDTwmsTEeyWss6h96ReCPQO8xyhxEjm409a27Mq1Tz3E/ IDBgRWhsAbaQFxzUXuEsMXh1ktrAVRk= -----END CERTIFICATE-----Generated at Mon Apr 13 17:14:25 2026 by rpki-client