$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d44f5743-b6e7-3df4-b6cf-5f6b7948fadb.roa File: d44f5743-b6e7-3df4-b6cf-5f6b7948fadb.roa (raw, json) Hash identifier: WorKExFX5fyO7jQNlYuG0124p+1ainNu08pQ15ow6DY= Subject key identifier: A0:31:F1:1F:27:52:D6:9B:60:77:CD:D8:BF:12:58:79:3E:BB:80:D1 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D5E1A5A244B198FC83525A280 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d44f5743-b6e7-3df4-b6cf-5f6b7948fadb.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 6167 IP address blocks: 166.239.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:5a:24:4b:19:8f:c8:35:25:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=f71debe9-f557-4ad4-9428-fdb1cea7a10e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9d:15:8f:c2:a2:cf:62:31:b3:8c:13:39:2f: b5:5b:76:7e:79:a7:7a:0a:df:d1:56:23:2c:21:2a: d2:2e:2d:ba:57:a5:32:67:1a:23:8e:c4:52:eb:97: a5:e7:3b:a3:53:27:db:16:5f:5d:10:81:2b:aa:87: 4e:92:31:aa:01:b1:bb:5a:4c:6d:64:6b:f4:34:62: 65:be:43:3b:a9:5b:1c:e4:4a:90:87:32:5a:a8:33: aa:ef:4d:6d:86:30:00:9b:4a:df:63:8a:ec:a0:eb: 9c:ef:7d:8d:cb:79:59:12:22:15:a7:d8:cb:e9:bc: ac:a4:3c:98:ca:02:80:b6:f5:d6:62:27:32:d9:b6: 1e:d9:e0:d2:a2:5e:70:99:0b:65:5c:cd:b5:a1:2f: 24:ba:56:67:c2:c3:e3:ec:33:00:fd:7f:cd:78:07: 99:58:83:c0:23:db:23:6a:45:6b:b8:fa:02:ab:b7: fc:31:fb:4b:2d:31:8a:56:16:05:a0:a5:f1:c3:3e: 79:f9:cf:8f:6c:20:92:1c:70:ea:96:19:99:7b:8c: 75:e3:67:e9:0b:61:32:41:cf:b4:c5:1e:c0:2e:6e: 13:77:09:e2:1e:0a:50:22:fb:aa:86:d2:13:bf:a4: b2:9f:09:43:9f:21:89:76:3e:20:80:90:72:1f:fe: b5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:31:F1:1F:27:52:D6:9B:60:77:CD:D8:BF:12:58:79:3E:BB:80:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d44f5743-b6e7-3df4-b6cf-5f6b7948fadb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 166.239.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:cb:2c:bc:93:05:32:6e:e1:9c:a0:93:6e:2b:48:89:60:02: 31:1a:4f:e4:c4:ca:81:c3:10:7c:99:a6:99:78:29:88:2c:90: 8d:0c:a0:66:f6:69:b9:11:88:59:0a:8c:92:70:16:2a:c1:82: c6:7a:43:d5:a3:e7:24:bc:0b:b7:47:4a:fa:88:0e:f1:47:4c: 93:e1:57:31:c8:75:a1:27:68:b5:0f:49:eb:21:e2:3d:ab:b0: 91:02:bd:13:fa:14:dc:f9:cd:80:de:fa:e3:5e:4e:21:cc:0b: 12:46:d5:7f:c1:43:40:72:84:52:1a:df:c1:5c:57:9e:7c:22: a8:74:20:57:6a:36:fc:94:78:af:12:dd:73:d3:f8:bc:24:51: a0:06:d4:31:36:05:6f:2c:aa:31:8f:54:10:ec:8d:1a:7b:44: ea:fb:38:b8:14:07:2e:34:72:a9:1f:8a:1c:32:49:31:67:17: 28:d5:90:2e:08:2b:90:88:90:35:0a:03:c1:dc:6b:57:b2:cd: 44:77:be:01:fa:9b:dc:bb:bd:ca:7b:a3:42:4b:97:d2:2f:33: 92:f0:df:af:4a:56:d6:af:01:09:72:70:b3:a7:d8:bc:64:1f: 13:66:5a:b2:95:5d:d4:3d:c8:41:b2:fe:1b:53:f7:e4:f1:0b: 4f:ab:fd:33 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1eGlokSxmPyDUlooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk ZjcxZGViZTktZjU1Ny00YWQ0LTk0MjgtZmRiMWNlYTdhMTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZ0Vj8Kiz2Ixs4wTOS+1W3Z+ead6Ct/RViMs ISrSLi26V6UyZxojjsRS65el5zujUyfbFl9dEIErqodOkjGqAbG7WkxtZGv0NGJl vkM7qVsc5EqQhzJaqDOq701thjAAm0rfY4rsoOuc732Ny3lZEiIVp9jL6byspDyY ygKAtvXWYicy2bYe2eDSol5wmQtlXM21oS8kulZnwsPj7DMA/X/NeAeZWIPAI9sj akVruPoCq7f8MftLLTGKVhYFoKXxwz55+c+PbCCSHHDqlhmZe4x142fpC2EyQc+0 xR7ALm4TdwniHgpQIvuqhtITv6SynwlDnyGJdj4ggJByH/61UwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKAx8R8nUtabYHfN2L8SWHk+u4DRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDQ0ZjU3NDMtYjZlNy0z ZGY0LWI2Y2YtNWY2Yjc5NDhmYWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApu8wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAqMssvJMFMm7hnKCTbitIiWACMRpP5MTKgcMQfJmmmXgpiCyQjQygZvZp uRGIWQqMknAWKsGCxnpD1aPnJLwLt0dK+ogO8UdMk+FXMch1oSdotQ9J6yHiPauw kQK9E/oU3PnNgN76415OIcwLEkbVf8FDQHKEUhrfwVxXnnwiqHQgV2o2/JR4rxLd c9P4vCRRoAbUMTYFbyyqMY9UEOyNGntE6vs4uBQHLjRyqR+KHDJJMWcXKNWQLggr kIiQNQoDwdxrV7LNRHe+Afqb3Lu9ynujQkuX0i8zkvDfr0pW1q8BCXJws6fYvGQf E2ZaspVd1D3IQbL+G1P35PELT6v9Mw== -----END CERTIFICATE-----Generated at Mon Apr 13 17:17:57 2026 by rpki-client