$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d881d009-cbf8-3a7d-aacb-3abbc815e32e.roa File: d881d009-cbf8-3a7d-aacb-3abbc815e32e.roa (raw, json) Hash identifier: Qeu52Yy+LcMuJXrksV21BtRgnYYMevRl5DdCMZteHHE= Subject key identifier: 6A:BD:61:97:38:69:45:F4:96:A9:85:D7:89:B7:9F:B9:62:5C:6B:8B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F90A31B4B6F60FDC2CAC5C000 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d881d009-cbf8-3a7d-aacb-3abbc815e32e.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 701 IP address blocks: 71.255.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a3:1b:4b:6f:60:fd:c2:ca:c5:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=87f55ec9-a7ee-4ca7-91b6-b0bf054178c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:34:be:4c:5f:80:b6:9e:a7:fb:bf:45:e9:0c: ed:45:c3:2e:4c:1c:12:48:2c:2d:eb:9f:e4:b5:54: e5:34:8e:28:6c:12:a1:e7:87:07:3b:62:c2:3f:ce: 91:dd:08:5f:a1:1b:54:5a:e8:62:8a:7d:a9:ec:e3: 88:1a:7e:18:8a:a4:26:0b:7c:ca:d0:9b:a9:c7:35: 0f:c0:a3:b9:45:7c:dc:b4:7a:08:9a:fa:f5:16:17: 18:05:8a:f3:7f:df:3f:ee:65:7b:96:4e:ef:40:62: ce:84:f0:90:0a:d2:b8:75:f2:35:f7:9c:fb:2f:0b: 84:b7:30:8f:96:13:bb:78:4d:3d:59:5f:df:2f:72: 20:61:b4:11:09:16:20:32:6d:d8:ec:48:91:be:c9: 19:47:59:47:3e:7b:3e:95:12:d2:dc:12:df:64:35: c5:a3:13:57:11:43:c2:e1:d0:fc:ef:d2:e0:41:2e: 97:b1:b1:af:a7:7d:47:af:4a:2e:fb:8a:21:9d:4b: 84:e7:eb:9a:7f:4d:c2:39:0d:8a:61:24:e1:a1:1e: f5:f8:07:9a:83:71:0f:c7:73:d9:cf:1f:c4:57:bb: a0:5a:c7:78:fe:c5:10:fc:5d:a2:34:d3:56:0f:b7: 40:d2:19:fb:3d:01:c1:50:71:9d:85:e8:39:7f:e5: cf:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:BD:61:97:38:69:45:F4:96:A9:85:D7:89:B7:9F:B9:62:5C:6B:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d881d009-cbf8-3a7d-aacb-3abbc815e32e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.255.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:2e:09:a3:05:68:32:25:89:c9:f3:39:59:35:8c:4e:32:e3: ca:7a:3b:4d:73:1d:32:82:68:e7:4b:61:bd:d3:ad:38:2c:02: 3d:bc:de:18:54:2f:c6:81:ca:80:32:0b:f3:bf:e1:b6:d4:51: 66:66:40:ad:9a:cb:09:b0:fa:50:1b:a2:eb:44:d8:f6:c4:f8: e3:bb:36:4c:5b:f3:11:16:41:3d:3f:ce:f1:78:ff:b6:f7:2e: 4f:59:96:f0:3e:9e:7f:99:eb:7e:d9:9d:8d:b4:27:e7:23:3b: b8:d3:9b:77:1c:6f:22:3b:ac:1b:5e:c4:6c:2c:06:09:55:7a: a4:5d:34:cc:39:ae:34:7c:71:db:4b:78:dd:05:97:7a:a3:77: 96:77:d1:09:ae:a3:65:ac:7b:79:ee:17:25:05:e8:08:1f:6a: 3b:09:54:51:8e:8e:4d:f5:80:bf:40:dc:fb:ca:2a:53:33:93: cd:49:82:8e:d0:ea:25:ed:df:d9:e5:10:5b:4c:ba:07:e6:e7: cd:c8:f5:97:e7:c3:64:f2:72:e5:32:d8:c2:30:15:20:96:bf: 48:28:fa:4b:5f:8e:48:bf:70:fc:74:f5:ac:50:80:ae:dc:7f: 2a:ca:41:a7:e0:ac:bd:0b:b9:dc:99:a5:ee:a5:f6:e6:52:36: d2:60:e1:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+QoxtLb2D9wsrFwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk ODdmNTVlYzktYTdlZS00Y2E3LTkxYjYtYjBiZjA1NDE3OGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jS+TF+Atp6n+79F6QztRcMuTBwSSCwt65/k tVTlNI4obBKh54cHO2LCP86R3QhfoRtUWuhiin2p7OOIGn4YiqQmC3zK0JupxzUP wKO5RXzctHoImvr1FhcYBYrzf98/7mV7lk7vQGLOhPCQCtK4dfI195z7LwuEtzCP lhO7eE09WV/fL3IgYbQRCRYgMm3Y7EiRvskZR1lHPns+lRLS3BLfZDXFoxNXEUPC 4dD879LgQS6XsbGvp31Hr0ou+4ohnUuE5+uaf03COQ2KYSThoR71+Aeag3EPx3PZ zx/EV7ugWsd4/sUQ/F2iNNNWD7dA0hn7PQHBUHGdheg5f+XPuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGq9YZc4aUX0lqmF14m3n7liXGuLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDg4MWQwMDktY2JmOC0z YTdkLWFhY2ItM2FiYmM4MTVlMzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER/8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwuCaMFaDIlicnzOVk1jE4y48p6O01zHTKCaOdLYb3TrTgsAj283hhU L8aByoAyC/O/4bbUUWZmQK2aywmw+lAboutE2PbE+OO7Nkxb8xEWQT0/zvF4/7b3 Lk9ZlvA+nn+Z637ZnY20J+cjO7jTm3ccbyI7rBtexGwsBglVeqRdNMw5rjR8cdtL eN0Fl3qjd5Z30Qmuo2Wse3nuFyUF6AgfajsJVFGOjk31gL9A3PvKKlMzk81Jgo7Q 6iXt39nlEFtMugfm583I9Zfnw2TycuUy2MIwFSCWv0go+ktfjki/cPx09axQgK7c fyrKQafgrL0LudyZpe6l9uZSNtJg4eE= -----END CERTIFICATE-----Generated at Sun Nov 1 05:18:05 2026 by rpki-client