$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cd212487-dc20-3599-9aac-9dcd55d705d8.roa File: cd212487-dc20-3599-9aac-9dcd55d705d8.roa (raw, json) Hash identifier: gFqgYM3ULgvvWK8AWYeELA+9JmRJuwykzBOdo/XNjoE= Subject key identifier: C3:DF:06:77:79:8C:6F:2B:70:0F:EB:75:1E:76:E0:A4:44:7D:B2:F9 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F9A68A0B644A56446012C5A80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cd212487-dc20-3599-9aac-9dcd55d705d8.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 701 IP address blocks: 68.238.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:a0:b6:44:a5:64:46:01:2c:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=bd94fb14-f737-4c06-abdb-26fb98fbe798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2d:5c:09:8d:a6:30:a5:8f:bf:ca:23:2c:05: 7d:b1:9e:45:63:30:7b:27:0d:56:c2:ea:7e:6f:51: c5:b3:7d:93:5c:b6:65:dc:55:03:f3:ab:e9:6e:5e: 5d:76:59:e3:5a:a7:14:c7:b2:31:ea:e8:4d:2c:11: 7e:5d:c1:02:fd:4b:1b:89:a9:bd:ca:58:8b:0f:ce: 6a:91:cd:fb:d3:0b:96:16:26:0c:ec:22:5b:08:b3: 97:30:3b:28:94:2a:2e:b8:82:bb:5b:3c:01:b2:d4: fd:b9:ba:f8:bd:6c:9e:06:2d:24:6f:44:7e:da:0f: f2:ba:a4:ab:e9:28:01:a9:35:ed:69:68:f3:e5:b8: 3b:17:42:3b:0b:30:ec:4d:9b:cb:02:2b:ff:1d:41: 87:41:52:98:88:98:c4:61:ac:0f:4f:c7:e6:6a:07: e8:31:a9:4f:02:a3:78:d6:9b:6a:85:d2:b0:87:3a: 62:fc:40:4e:a8:d2:b0:87:39:6c:1e:10:c3:be:68: 68:57:c7:31:06:92:a8:4d:bc:a1:06:16:9b:a6:cd: bc:2c:8f:97:5a:46:c4:0c:02:89:59:59:be:40:e5: e8:e9:06:aa:0e:ba:60:9a:85:46:dc:6c:23:de:66: 24:d7:81:cc:0e:0f:e9:39:8e:ca:b9:13:5a:36:97: 83:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DF:06:77:79:8C:6F:2B:70:0F:EB:75:1E:76:E0:A4:44:7D:B2:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cd212487-dc20-3599-9aac-9dcd55d705d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.238.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:76:cd:24:c5:6f:e2:88:2f:a6:b3:66:35:70:7c:98:87:bd: 6c:10:d2:ff:4a:23:fd:76:cb:66:56:e8:b4:ce:7d:fc:9a:e9: 54:26:c4:97:9a:75:cd:d6:21:18:aa:c4:78:80:12:cb:9b:c2: de:6c:01:d0:a3:20:16:8f:54:ce:2e:4d:f1:f1:59:3f:93:0f: 54:58:23:ca:02:38:f1:47:1d:af:d3:d8:9f:e2:f9:6a:be:06: 8a:dd:3b:61:07:06:fc:8b:d1:48:a3:53:92:54:1c:ab:1b:39: 9e:e5:73:13:56:19:23:2f:43:d9:4c:cd:ce:78:61:8b:30:41: c7:1c:40:70:28:61:22:ca:50:1f:3d:45:cf:ae:15:32:dd:0d: 63:ac:0e:9c:1a:6a:8a:53:49:f2:65:00:a4:19:67:19:2b:31: 51:96:85:9f:dc:ac:db:5a:36:97:b6:cd:04:a6:d1:64:92:d6: 4b:09:47:3f:5f:95:72:c6:e1:2f:ef:8b:9f:7b:fe:aa:2e:d4: 43:86:20:9a:cd:d6:56:7b:e2:27:10:0d:2e:43:3b:d1:a9:da: be:92:6a:18:64:ad:ae:19:8b:78:10:87:6d:46:bd:00:3d:a4: 70:66:bb:cf:92:ac:03:e6:26:d9:81:ba:c4:5a:89:cf:f7:af: 44:3b:5a:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaKC2RKVkRgEsWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk YmQ5NGZiMTQtZjczNy00YzA2LWFiZGItMjZmYjk4ZmJlNzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy1cCY2mMKWPv8ojLAV9sZ5FYzB7Jw1Wwup+ b1HFs32TXLZl3FUD86vpbl5ddlnjWqcUx7Ix6uhNLBF+XcEC/Usbiam9yliLD85q kc370wuWFiYM7CJbCLOXMDsolCouuIK7WzwBstT9ubr4vWyeBi0kb0R+2g/yuqSr 6SgBqTXtaWjz5bg7F0I7CzDsTZvLAiv/HUGHQVKYiJjEYawPT8fmagfoMalPAqN4 1ptqhdKwhzpi/EBOqNKwhzlsHhDDvmhoV8cxBpKoTbyhBhabps28LI+XWkbEDAKJ WVm+QOXo6QaqDrpgmoVG3Gwj3mYk14HMDg/pOY7KuRNaNpeDZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPfBnd5jG8rcA/rdR524KREfbL5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2QyMTI0ODctZGMyMC0z NTk5LTlhYWMtOWRjZDU1ZDcwNWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRO6gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAx2zSTFb+KIL6azZjVwfJiHvWwQ0v9KI/12y2ZW6LTOffya6VQmxJea dc3WIRiqxHiAEsubwt5sAdCjIBaPVM4uTfHxWT+TD1RYI8oCOPFHHa/T2J/i+Wq+ BordO2EHBvyL0UijU5JUHKsbOZ7lcxNWGSMvQ9lMzc54YYswQcccQHAoYSLKUB89 Rc+uFTLdDWOsDpwaaopTSfJlAKQZZxkrMVGWhZ/crNtaNpe2zQSm0WSS1ksJRz9f lXLG4S/vi597/qou1EOGIJrN1lZ74icQDS5DO9Gp2r6Sahhkra4Zi3gQh21GvQA9 pHBmu8+SrAPmJtmBusRaic/3r0Q7WoU= -----END CERTIFICATE-----Generated at Mon Nov 2 21:14:05 2026 by rpki-client