$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e9564947-b9f8-38f8-ab58-ab984abd0017.roa File: e9564947-b9f8-38f8-ab58-ab984abd0017.roa (raw, json) Hash identifier: aheE8d7uizoNOfScKMTwNV/IZuxNL+pNOry5Zv1TQFM= Subject key identifier: 41:62:3C:10:3C:F4:DD:FE:BC:9A:D7:6D:E7:07:AC:63:31:73:5C:B7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F90A31A8F50D063167E25D1C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e9564947-b9f8-38f8-ab58-ab984abd0017.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 701 IP address blocks: 68.160.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a3:1a:8f:50:d0:63:16:7e:25:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=7ca71a74-5bdd-4a9a-b39c-318d4280cdc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:92:e5:f9:06:71:cf:6b:e5:8b:50:9e:f6:4e: 0e:d8:b0:a3:2e:43:60:05:40:45:da:23:ef:c6:bc: 8f:92:3e:b5:ad:59:77:71:db:09:e0:5b:a6:ad:fb: 77:68:0d:64:9e:4c:4e:d9:a5:55:40:b7:d4:48:77: ee:38:19:38:38:2b:61:75:69:62:ed:65:ce:aa:f2: 56:2f:a4:87:53:6e:be:ed:16:c9:e7:23:32:03:33: 21:fc:37:63:ff:c4:da:17:2a:3f:e3:87:d8:dc:84: d2:1c:63:16:f5:b7:b5:81:6f:dd:90:8e:20:1f:44: 85:4f:ae:39:d2:d1:f7:2b:d7:fe:20:bc:10:ef:fd: 81:2d:c8:2a:7f:90:05:fa:3c:bd:9a:a4:5a:56:73: e2:01:7a:97:87:21:42:4b:5e:0b:32:c0:3e:1c:84: b4:a2:c7:3f:ce:b8:0a:5d:c7:de:91:a0:53:b9:e6: 4e:1b:eb:b4:30:de:c2:6b:05:21:0a:6b:f9:f1:bf: 99:2f:91:c5:14:96:17:f3:ef:e5:00:62:ff:e0:16: 5b:2a:03:da:7a:f4:5a:c7:8a:e6:6e:75:4c:b6:e1: d0:c6:15:5f:ee:5a:bb:76:f0:a7:7e:74:04:b1:fa: 16:3f:64:57:a9:89:3a:9b:b5:23:5a:a4:ba:32:53: b5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:62:3C:10:3C:F4:DD:FE:BC:9A:D7:6D:E7:07:AC:63:31:73:5C:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e9564947-b9f8-38f8-ab58-ab984abd0017.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.160.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:c7:06:42:38:83:5f:5b:1e:a6:c2:82:79:8e:a6:b1:20:12: 97:ec:45:b2:51:d2:58:37:c4:43:8b:43:06:9e:86:0a:fe:17: 41:4a:89:60:da:0a:ea:29:0e:f2:09:a0:bc:2c:01:59:90:74: 06:f9:e6:cc:70:fa:27:7e:d0:cf:10:fd:11:f3:38:57:71:4b: 8f:4e:b1:27:67:56:b4:95:3a:9b:e2:07:70:23:c3:98:32:79: 8b:d8:00:25:cf:dd:07:85:dc:ee:c1:2a:5d:82:b5:bb:55:b7: 52:88:87:33:5f:2a:a7:4b:15:13:c7:9f:a8:0c:7a:81:f1:15: 59:62:7d:e4:2f:67:e9:07:a9:09:7b:03:8e:66:3e:a7:c8:e8: ba:d9:a2:10:5e:a2:54:d0:fc:0c:fd:92:3f:da:e7:8f:f6:56: a9:c7:92:64:46:e8:3c:0d:b3:e6:ee:a6:e9:aa:0b:59:92:b8: 6e:3f:89:ba:dc:03:ad:4a:cb:9d:bc:fa:d5:65:82:04:57:c3: e8:db:db:4b:53:89:69:69:56:7d:50:d0:e1:e0:eb:07:f3:95: 25:07:15:1f:90:1f:1c:e1:f9:bf:21:8a:71:a9:a5:d5:b0:f8: da:04:72:12:5e:fe:98:d4:53:61:04:91:e8:5f:dd:0d:8b:b2: 3e:88:ad:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+QoxqPUNBjFn4l0cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk N2NhNzFhNzQtNWJkZC00YTlhLWIzOWMtMzE4ZDQyODBjZGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5Ll+QZxz2vli1Ce9k4O2LCjLkNgBUBF2iPv xryPkj61rVl3cdsJ4Fumrft3aA1knkxO2aVVQLfUSHfuOBk4OCthdWli7WXOqvJW L6SHU26+7RbJ5yMyAzMh/Ddj/8TaFyo/44fY3ITSHGMW9be1gW/dkI4gH0SFT645 0tH3K9f+ILwQ7/2BLcgqf5AF+jy9mqRaVnPiAXqXhyFCS14LMsA+HIS0osc/zrgK XcfekaBTueZOG+u0MN7CawUhCmv58b+ZL5HFFJYX8+/lAGL/4BZbKgPaevRax4rm bnVMtuHQxhVf7lq7dvCnfnQEsfoWP2RXqYk6m7UjWqS6MlO1ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFiPBA89N3+vJrXbecHrGMxc1y3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTk1NjQ5NDctYjlmOC0z OGY4LWFiNTgtYWI5ODRhYmQwMDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERKBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3HBkI4g19bHqbCgnmOprEgEpfsRbJR0lg3xEOLQwaehgr+F0FKiWDa CuopDvIJoLwsAVmQdAb55sxw+id+0M8Q/RHzOFdxS49OsSdnVrSVOpviB3Ajw5gy eYvYACXP3QeF3O7BKl2CtbtVt1KIhzNfKqdLFRPHn6gMeoHxFVlifeQvZ+kHqQl7 A45mPqfI6LrZohBeolTQ/Az9kj/a54/2VqnHkmRG6DwNs+bupumqC1mSuG4/ibrc A61Ky528+tVlggRXw+jb20tTiWlpVn1Q0OHg6wfzlSUHFR+QHxzh+b8hinGppdWw +NoEchJe/pjUU2EEkehf3Q2Lsj6Irb8= -----END CERTIFICATE-----Generated at Mon Nov 2 16:13:24 2026 by rpki-client