$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bae32b99-7133-377f-b0fa-238b6ddaa808.roa File: bae32b99-7133-377f-b0fa-238b6ddaa808.roa (raw, json) Hash identifier: L+yIZ/V30C90KMX9LERtxOQT9X8UvEcx6k+kQcjhZrw= Subject key identifier: 16:6A:AE:F7:3C:18:9B:D6:47:A5:0B:4B:6F:0E:E1:0A:0E:06:D9:94 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F89A8802129B696927F4E5C40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bae32b99-7133-377f-b0fa-238b6ddaa808.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 701 IP address blocks: 216.112.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:80:21:29:b6:96:92:7f:4e:5c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=8003f517-7c03-4117-a16e-e28bc0ab977c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:32:3b:b9:38:d1:e4:56:3b:39:63:70:fc:c3: f6:5d:e3:a5:f1:95:89:69:3b:c2:4b:d2:21:d5:a1: 6b:fa:43:86:fc:0c:ba:88:d6:5f:7e:19:3f:ee:5f: 9e:8e:38:59:4e:f3:91:1b:a0:21:98:69:bc:b2:7c: 05:46:44:47:fb:2d:ad:b7:b6:62:78:d8:67:f0:95: fc:70:d8:72:ff:8a:31:1a:2d:86:a5:db:6f:c7:b3: 4b:b7:0b:d0:9b:db:a6:92:33:f5:d7:7d:80:ce:50: 88:0c:45:81:32:6f:b3:69:65:7e:0e:8c:af:ad:76: 2a:c5:b2:c8:4e:70:4d:d7:59:88:bf:16:74:c4:2a: 8b:e4:76:f0:ed:c1:aa:f1:f3:b0:cd:56:25:72:f7: a7:a6:8e:10:23:30:80:22:4b:77:2d:58:df:a0:8a: 90:af:6c:a1:3d:df:e0:a5:7c:63:3c:93:9a:71:bd: 30:48:38:8c:af:f6:2a:44:e4:f5:7e:a3:71:31:3e: 72:89:96:0a:fe:99:d1:86:86:c1:11:0b:0b:d9:f7: be:f6:31:70:9c:30:f1:57:8d:de:84:35:49:89:2d: a4:c1:32:26:f6:e2:3c:7e:c4:74:11:6f:2c:bf:dc: 59:ef:e4:93:9e:74:5d:67:78:46:4a:97:5d:fd:d4: f0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:6A:AE:F7:3C:18:9B:D6:47:A5:0B:4B:6F:0E:E1:0A:0E:06:D9:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bae32b99-7133-377f-b0fa-238b6ddaa808.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 216.112.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:a2:ff:19:ab:cc:f5:39:46:b4:71:18:5b:9d:85:8f:cf:8f: 30:fc:a2:8b:de:00:cf:10:33:4c:ec:d1:58:58:be:cb:02:8c: c9:05:9f:2c:2a:49:c9:b3:1b:2a:8e:0c:60:50:45:1c:0f:1f: 66:b3:35:b7:fd:20:48:11:0f:01:08:9e:33:e1:bd:7f:df:b1: 64:36:f8:e8:41:b7:53:82:d0:be:1c:a1:5b:db:ea:e2:ac:e3: e2:38:83:ea:4c:4b:e7:d8:4f:cc:94:ae:7b:a7:76:54:64:a8: 75:fb:58:b8:8d:d6:42:e2:86:67:d3:da:94:b6:04:19:3b:22: f0:7e:9b:45:15:81:22:7c:9f:c8:46:3b:23:c1:04:b4:dd:5b: cd:cd:20:9c:02:98:a2:1c:8a:30:3b:6c:88:df:71:1a:f4:e2: 2f:cc:ca:74:fc:c8:48:5f:71:2f:d1:95:6d:69:f8:8a:4c:eb: 92:f2:2d:5d:4c:1f:e2:8d:7b:b5:6d:4e:eb:67:22:8f:25:de: 4d:10:18:38:7a:b4:3f:20:ff:1d:31:f5:dd:16:23:6d:6c:2a: 7e:99:84:dc:ac:0f:65:80:88:65:0a:4a:04:31:16:e5:3f:42: 3d:f3:3a:b6:f5:f6:0f:c4:b9:da:6f:f7:68:23:de:49:c3:e5: 84:87:c8:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqIAhKbaWkn9OXEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk ODAwM2Y1MTctN2MwMy00MTE3LWExNmUtZTI4YmMwYWI5NzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTI7uTjR5FY7OWNw/MP2XeOl8ZWJaTvCS9Ih 1aFr+kOG/Ay6iNZffhk/7l+ejjhZTvORG6AhmGm8snwFRkRH+y2tt7ZieNhn8JX8 cNhy/4oxGi2Gpdtvx7NLtwvQm9umkjP1132AzlCIDEWBMm+zaWV+DoyvrXYqxbLI TnBN11mIvxZ0xCqL5Hbw7cGq8fOwzVYlcvenpo4QIzCAIkt3LVjfoIqQr2yhPd/g pXxjPJOacb0wSDiMr/YqROT1fqNxMT5yiZYK/pnRhobBEQsL2fe+9jFwnDDxV43e hDVJiS2kwTIm9uI8fsR0EW8sv9xZ7+STnnRdZ3hGSpdd/dTwlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZqrvc8GJvWR6ULS28O4QoOBtmUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmFlMzJiOTktNzEzMy0z NzdmLWIwZmEtMjM4YjZkZGFhODA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HB+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKi/xmrzPU5RrRxGFudhY/PjzD8ooveAM8QM0zs0VhYvssCjMkFnywq ScmzGyqODGBQRRwPH2azNbf9IEgRDwEInjPhvX/fsWQ2+OhBt1OC0L4coVvb6uKs 4+I4g+pMS+fYT8yUrnundlRkqHX7WLiN1kLihmfT2pS2BBk7IvB+m0UVgSJ8n8hG OyPBBLTdW83NIJwCmKIcijA7bIjfcRr04i/MynT8yEhfcS/RlW1p+IpM65LyLV1M H+KNe7VtTutnIo8l3k0QGDh6tD8g/x0x9d0WI21sKn6ZhNysD2WAiGUKSgQxFuU/ Qj3zOrb19g/Eudpv92gj3knD5YSHyCA= -----END CERTIFICATE-----Generated at Mon Nov 2 06:59:55 2026 by rpki-client