$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/def61996-eb4a-3c89-954b-6902e2e3c57e.roa File: def61996-eb4a-3c89-954b-6902e2e3c57e.roa (raw, json) Hash identifier: 3rHLq8eo4xbWkP+cSYqDFppdPGKEQEoDGAGsFwDVp/0= Subject key identifier: B3:EA:70:3E:35:4E:DA:21:D2:F1:76:EE:D9:74:9D:B2:E8:95:DB:85 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584FA85E0672BCD75C086B959790 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/def61996-eb4a-3c89-954b-6902e2e3c57e.roa Signing time: Thu 29 Oct 2026 01:00:12 +0000 ROA not before: Thu 29 Oct 2026 01:00:12 +0000 ROA not after: Wed 27 Jan 2027 02:00:12 +0000 asID: 6167 IP address blocks: 97.133.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a8:5e:06:72:bc:d7:5c:08:6b:95:97:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 29 01:00:12 2026 GMT Not After : Jan 27 02:00:12 2027 GMT Subject: CN=71732434-777f-4590-8afa-f55a6056593a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ec:e1:77:1b:75:81:25:1a:bd:27:54:49:2e: 72:1d:5d:1b:95:bf:d7:a9:c9:f9:44:c6:07:d0:4d: 38:c0:e6:35:b3:54:32:08:8b:99:70:e9:06:fd:c2: 4e:35:9a:50:c7:3b:03:d8:e0:40:75:02:f8:e9:f0: 7d:1a:6d:79:4e:bf:40:b3:1e:f4:17:58:9c:46:a9: b5:42:8d:9c:54:94:31:6e:88:12:98:52:50:66:f2: 9c:63:c2:a6:ae:73:0d:c9:44:33:f9:a8:7c:33:1f: 59:9a:1d:f4:0b:09:b5:44:35:41:07:e7:5a:79:28: d9:4a:e3:64:34:56:a2:c1:ae:89:22:d9:55:2e:9b: 74:ae:1b:99:a6:4d:9a:57:23:87:30:8e:c7:83:f0: 9b:a0:56:ec:18:ec:9f:0f:de:90:cd:70:9c:33:49: b1:f7:63:a1:cb:9f:6b:5b:71:de:ff:3e:79:dd:46: 44:02:57:99:d4:29:fc:45:0d:18:8a:74:78:54:14: df:67:1d:75:08:e4:f9:65:08:48:bb:b7:9f:c6:7c: 8c:18:08:85:f8:b7:e3:d6:2c:94:f8:6f:40:04:83: af:d8:0b:37:36:4c:e9:73:18:11:e1:92:c9:9b:55: c4:7b:e6:ac:ae:c6:bf:dd:d3:fb:9e:97:a7:7b:b6: 72:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:EA:70:3E:35:4E:DA:21:D2:F1:76:EE:D9:74:9D:B2:E8:95:DB:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/def61996-eb4a-3c89-954b-6902e2e3c57e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 97.133.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:5d:db:16:b3:5c:34:72:52:8e:60:55:02:ce:e2:14:f9:a0: 1f:82:34:c6:49:07:31:3a:30:ff:53:2c:84:79:1e:f1:b0:32: 95:a1:f7:de:f3:41:f3:32:42:b9:0b:64:3f:77:aa:d4:95:65: d6:fd:a2:a2:d2:d4:d6:db:ba:40:bc:ee:a0:88:07:4a:a5:d2: 6d:70:52:86:9a:92:bf:f5:cb:11:b0:ac:8d:c6:00:dc:a0:ca: 2b:20:b1:48:52:c7:a9:12:df:8d:54:0c:db:01:50:47:5d:62: 7a:39:2f:d8:90:aa:50:c2:d9:7e:42:57:70:aa:af:09:f8:d4: 14:a8:b2:95:8f:29:41:fe:a7:fa:5e:16:af:50:b9:da:28:eb: 09:f2:cd:63:a6:67:4f:1f:37:bb:76:bd:a0:bf:a5:17:aa:b3: 0e:da:2a:ef:73:9a:f7:56:94:8e:f4:4f:be:a8:f4:5e:d5:50: 3a:76:61:d1:92:41:e0:69:73:15:56:16:63:e3:33:86:e3:80: 90:af:0e:74:95:a7:db:b7:98:4a:19:57:97:e1:97:f3:73:67: 13:c4:0f:03:d2:6a:dd:61:d6:f7:05:ac:33:c4:ab:a7:de:97: ff:d7:97:0c:06:6b:d9:fe:eb:91:00:5f:db:d3:99:27:c0:8b: 85:2d:a0:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+oXgZyvNdcCGuVl5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAyOTAxMDAxMloXDTI3MDEyNzAyMDAxMlowLzEtMCsGA1UEAxMk NzE3MzI0MzQtNzc3Zi00NTkwLThhZmEtZjU1YTYwNTY1OTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsezhdxt1gSUavSdUSS5yHV0blb/Xqcn5RMYH 0E04wOY1s1QyCIuZcOkG/cJONZpQxzsD2OBAdQL46fB9Gm15Tr9Asx70F1icRqm1 Qo2cVJQxbogSmFJQZvKcY8KmrnMNyUQz+ah8Mx9Zmh30Cwm1RDVBB+daeSjZSuNk NFaiwa6JItlVLpt0rhuZpk2aVyOHMI7Hg/CboFbsGOyfD96QzXCcM0mx92Ohy59r W3He/z553UZEAleZ1Cn8RQ0YinR4VBTfZx11COT5ZQhIu7efxnyMGAiF+Lfj1iyU +G9ABIOv2As3NkzpcxgR4ZLJm1XEe+asrsa/3dP7npene7ZylwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPqcD41Ttoh0vF27tl0nbLolduFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGVmNjE5OTYtZWI0YS0z Yzg5LTk1NGItNjkwMmUyZTNjNTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGYYWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVd2xazXDRyUo5gVQLO4hT5oB+CNMZJBzE6MP9TLIR5HvGwMpWh997z QfMyQrkLZD93qtSVZdb9oqLS1NbbukC87qCIB0ql0m1wUoaakr/1yxGwrI3GANyg yisgsUhSx6kS341UDNsBUEddYno5L9iQqlDC2X5CV3Cqrwn41BSospWPKUH+p/pe Fq9Qudoo6wnyzWOmZ08fN7t2vaC/pReqsw7aKu9zmvdWlI70T76o9F7VUDp2YdGS QeBpcxVWFmPjM4bjgJCvDnSVp9u3mEoZV5fhl/NzZxPEDwPSat1h1vcFrDPEq6fe l//XlwwGa9n+65EAX9vTmSfAi4UtoPk= -----END CERTIFICATE-----Generated at Thu Nov 5 08:34:17 2026 by rpki-client