$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd537997-dbeb-3394-ab6a-ddc05852d6b7.roa File: dd537997-dbeb-3394-ab6a-ddc05852d6b7.roa (raw, json) Hash identifier: qWLIitcqK5KzNM8Q6GD0h3VSSdDmK1ftW0OaUx1VkzI= Subject key identifier: FD:29:A1:D8:18:27:43:46:E9:E8:67:10:70:C0:24:D8:37:11:DA:D7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F90A31A13B8FBD09AD14EFE40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd537997-dbeb-3394-ab6a-ddc05852d6b7.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 701 IP address blocks: 68.128.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a3:1a:13:b8:fb:d0:9a:d1:4e:fe:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=3fe5d62d-a58c-4e0c-96f9-5f8bc40ea74b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fa:ca:11:84:70:8e:56:da:a6:30:3f:d4:e2: 38:8c:fa:9f:e4:4d:1e:e8:60:b5:e8:4d:d7:66:19: 26:ab:bd:97:52:40:fa:27:11:fa:e6:18:85:e0:9b: 6b:9e:03:4d:f2:35:a1:cc:09:0e:57:e9:34:24:c1: d6:10:b0:e4:54:aa:e4:cd:b4:33:50:d0:60:d7:62: d1:82:06:b4:c4:b4:cb:90:f0:45:d2:48:c8:e5:a6: ea:a0:0b:54:df:16:3a:b0:10:f0:2a:2f:8f:97:03: c5:98:87:25:5b:d9:87:02:8d:2e:73:5b:c3:0d:ba: 1b:33:93:bc:f3:b5:a8:da:4b:a0:68:31:ba:2e:21: f1:86:1d:6a:75:c9:3e:89:19:23:a2:05:47:f2:e3: 8d:b0:55:a3:d4:42:30:09:11:ec:ad:5f:d0:c0:61: 50:f6:d5:39:0f:fb:7d:30:37:54:41:a9:aa:0c:53: 05:5d:fe:0a:ca:18:3e:4f:68:11:1c:d6:50:3d:3f: 02:7a:cc:55:85:8c:df:bc:fb:cc:e6:c7:62:13:65: ad:e4:fc:40:80:5f:07:ad:d7:35:d2:dd:d0:b4:84: 46:4d:11:07:64:9b:e0:c7:d4:66:15:e1:79:e4:16: 5b:05:89:92:d6:6a:4f:4b:80:2a:46:47:9e:d1:9d: 75:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:29:A1:D8:18:27:43:46:E9:E8:67:10:70:C0:24:D8:37:11:DA:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dd537997-dbeb-3394-ab6a-ddc05852d6b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.128.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:4f:e8:9e:bc:67:a1:14:77:76:d8:73:b9:dd:63:dd:da:1a: 76:08:21:9d:a9:a2:47:c1:56:50:36:e2:19:68:50:95:c2:d2: 0c:44:9b:56:5f:79:7e:28:f0:9f:d9:54:ac:54:2c:e7:ed:41: d6:4b:47:f1:d8:9b:84:a3:e5:f6:2a:01:8f:4f:18:e9:eb:72: 13:cf:db:dc:74:20:4f:b3:44:81:16:11:7b:ad:6d:7b:f2:29: a2:53:20:83:81:18:65:69:c6:45:7d:55:1a:49:f0:d8:c5:e9: dc:e6:e2:27:7d:1b:32:b8:ed:c5:36:6f:ac:09:19:db:88:72: ad:ee:24:40:bf:39:92:20:95:48:fe:0b:67:4e:28:55:be:ef: 5b:c5:dd:ee:1e:25:de:61:f6:b8:13:21:3c:9c:80:68:2e:26: af:5b:7a:46:20:f4:39:b4:f9:40:26:cf:21:98:b6:53:bd:bf: fb:6b:4a:c7:3a:12:f2:8b:08:1b:7d:d5:35:88:8f:76:bc:bb: 5c:2c:15:18:51:a2:24:7d:e3:e5:18:1c:05:40:f0:12:8c:18: 0b:2c:7a:55:2c:ce:d8:eb:97:48:55:ac:3f:bd:9e:27:80:15: 82:a4:fe:3f:20:cf:90:0a:04:3c:5f:99:07:48:d9:14:54:fe: 97:8e:c2:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+QoxoTuPvQmtFO/kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk M2ZlNWQ2MmQtYTU4Yy00ZTBjLTk2ZjktNWY4YmM0MGVhNzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/rKEYRwjlbapjA/1OI4jPqf5E0e6GC16E3X Zhkmq72XUkD6JxH65hiF4JtrngNN8jWhzAkOV+k0JMHWELDkVKrkzbQzUNBg12LR gga0xLTLkPBF0kjI5abqoAtU3xY6sBDwKi+PlwPFmIclW9mHAo0uc1vDDbobM5O8 87Wo2kugaDG6LiHxhh1qdck+iRkjogVH8uONsFWj1EIwCRHsrV/QwGFQ9tU5D/t9 MDdUQamqDFMFXf4Kyhg+T2gRHNZQPT8CesxVhYzfvPvM5sdiE2Wt5PxAgF8Hrdc1 0t3QtIRGTREHZJvgx9RmFeF55BZbBYmS1mpPS4AqRkee0Z11nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0podgYJ0NG6ehnEHDAJNg3EdrXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGQ1Mzc5OTctZGJlYi0z Mzk0LWFiNmEtZGRjMDU4NTJkNmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRIAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKhP6J68Z6EUd3bYc7ndY93aGnYIIZ2pokfBVlA24hloUJXC0gxEm1Zf eX4o8J/ZVKxULOftQdZLR/HYm4Sj5fYqAY9PGOnrchPP29x0IE+zRIEWEXutbXvy KaJTIIOBGGVpxkV9VRpJ8NjF6dzm4id9GzK47cU2b6wJGduIcq3uJEC/OZIglUj+ C2dOKFW+71vF3e4eJd5h9rgTITycgGguJq9bekYg9Dm0+UAmzyGYtlO9v/trSsc6 EvKLCBt91TWIj3a8u1wsFRhRoiR94+UYHAVA8BKMGAsselUsztjrl0hVrD+9nieA FYKk/j8gz5AKBDxfmQdI2RRU/peOwl8= -----END CERTIFICATE-----Generated at Sun Nov 1 23:22:48 2026 by rpki-client