$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5d5873-043c-3b99-9095-ad60a8b913af.roa File: db5d5873-043c-3b99-9095-ad60a8b913af.roa (raw, json) Hash identifier: L8RlbG/MU/PM6eqbCBGbpqG6e+S4/8HH0A2XMFKQuT8= Subject key identifier: 34:2B:53:B6:66:E4:93:1A:A1:38:A1:E4:C9:62:DC:0D:EB:41:B6:7E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584FA85E16984E207F53F800AA00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5d5873-043c-3b99-9095-ad60a8b913af.roa Signing time: Thu 29 Oct 2026 01:00:12 +0000 ROA not before: Thu 29 Oct 2026 01:00:12 +0000 ROA not after: Wed 27 Jan 2027 02:00:12 +0000 asID: 6167 IP address blocks: 97.191.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a8:5e:16:98:4e:20:7f:53:f8:00:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 29 01:00:12 2026 GMT Not After : Jan 27 02:00:12 2027 GMT Subject: CN=b910af03-8a7f-408a-8c2d-0c893394be37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fc:85:83:ed:31:ba:a5:c9:83:8e:58:47:b7: 82:3c:00:ae:c5:35:8c:ce:9b:ff:d3:7a:c7:82:b8: 62:69:6b:71:da:0b:a8:ca:df:7e:2e:50:da:b2:ce: c8:76:e7:e1:56:44:08:86:27:27:09:8b:1e:91:2c: 7c:6b:9e:34:2d:ef:0b:eb:a8:c0:4a:94:32:55:aa: 79:90:08:61:a6:f2:a1:5e:91:cd:f3:92:f6:64:49: fd:96:0f:66:2d:4d:08:8d:52:af:1a:4f:7b:ec:9e: 47:a6:08:ec:0b:34:c5:ab:55:c1:9a:2f:d4:2d:c5: 5a:1f:b3:c6:1e:29:2b:8b:87:4c:4f:3b:50:02:2b: f0:26:c5:6c:41:2f:0f:81:b7:a1:55:8d:70:ee:5c: 6f:65:7b:89:70:b1:ae:c2:ae:40:5c:c0:c2:f5:cf: df:0b:ab:87:0c:84:4f:35:06:a1:3d:0f:61:7b:a9: 5e:ce:59:33:0e:3e:e7:12:ee:f3:74:35:ac:27:7e: 20:db:c1:e5:2c:8d:32:92:cc:95:bb:fc:3c:43:0e: 1c:30:f9:f7:5b:bc:3f:30:50:b5:74:93:23:64:8a: 3e:92:bc:c7:4f:2c:23:db:73:38:3e:9e:b0:5b:0e: d9:84:ac:5e:01:eb:47:ff:b0:88:96:fe:43:3a:16: 2a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2B:53:B6:66:E4:93:1A:A1:38:A1:E4:C9:62:DC:0D:EB:41:B6:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5d5873-043c-3b99-9095-ad60a8b913af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 97.191.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:0e:c1:5a:98:12:00:10:98:14:a8:cb:61:0f:4b:57:d3:8c: 06:a4:ab:ed:6d:c2:cb:57:17:2b:4a:16:70:b0:e1:8a:d7:56: 99:0b:f7:b6:4d:02:0b:ed:37:72:7b:21:f4:16:81:43:2a:c8: 54:b0:46:8b:0c:06:66:7b:7d:b7:66:24:ed:1b:64:da:b5:02: af:7d:41:95:93:2b:d5:0e:74:82:c2:27:73:22:1b:fb:68:84: 41:77:2a:8e:85:c0:21:da:de:73:4e:ae:52:94:86:77:eb:78: e9:42:29:b9:c0:f7:ee:b8:c5:63:9e:3b:1f:45:8c:0d:63:65: 3e:5a:ef:a1:73:57:5f:7c:a2:2c:c1:f1:ac:c9:27:92:6d:50: 06:70:82:ab:ff:8f:52:2b:60:14:0d:62:51:b3:49:94:aa:c3: 91:ea:89:a9:43:10:58:d1:fc:0b:6d:d3:8b:5f:1b:94:3c:af: 09:00:ab:31:74:27:b6:1e:11:f4:fb:93:f9:ab:74:5b:8d:5e: e3:a1:8e:64:a3:bf:ec:33:0e:f8:63:48:72:d2:0e:51:62:3a: 9b:f8:98:d2:7a:2f:19:12:aa:dc:10:ba:1e:51:6d:76:63:11: 1e:bb:0b:e8:80:b3:de:a8:27:1b:31:ab:a5:a4:8a:33:f7:6a: 76:d4:09:15 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE+oXhaYTiB/U/gAqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAyOTAxMDAxMloXDTI3MDEyNzAyMDAxMlowLzEtMCsGA1UEAxMk YjkxMGFmMDMtOGE3Zi00MDhhLThjMmQtMGM4OTMzOTRiZTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofyFg+0xuqXJg45YR7eCPACuxTWMzpv/03rH grhiaWtx2guoyt9+LlDass7IdufhVkQIhicnCYsekSx8a540Le8L66jASpQyVap5 kAhhpvKhXpHN85L2ZEn9lg9mLU0IjVKvGk977J5HpgjsCzTFq1XBmi/ULcVaH7PG Hikri4dMTztQAivwJsVsQS8PgbehVY1w7lxvZXuJcLGuwq5AXMDC9c/fC6uHDIRP NQahPQ9he6lezlkzDj7nEu7zdDWsJ34g28HlLI0yksyVu/w8Qw4cMPn3W7w/MFC1 dJMjZIo+krzHTywj23M4Pp6wWw7ZhKxeAetH/7CIlv5DOhYqxwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDQrU7Zm5JMaoTih5Mli3A3rQbZ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGI1ZDU4NzMtMDQzYy0z Yjk5LTkwOTUtYWQ2MGE4YjkxM2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYb8wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAmw7BWpgSABCYFKjLYQ9LV9OMBqSr7W3Cy1cXK0oWcLDhitdWmQv3tk0C C+03cnsh9BaBQyrIVLBGiwwGZnt9t2Yk7Rtk2rUCr31BlZMr1Q50gsIncyIb+2iE QXcqjoXAIdrec06uUpSGd+t46UIpucD37rjFY547H0WMDWNlPlrvoXNXX3yiLMHx rMknkm1QBnCCq/+PUitgFA1iUbNJlKrDkeqJqUMQWNH8C23Ti18blDyvCQCrMXQn th4R9PuT+at0W41e46GOZKO/7DMO+GNIctIOUWI6m/iY0novGRKq3BC6HlFtdmMR HrsL6ICz3qgnGzGrpaSKM/dqdtQJFQ== -----END CERTIFICATE-----Generated at Thu Nov 5 12:10:13 2026 by rpki-client