$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eff5f3cc-d054-3ac1-a62e-481bf8f9d7b3.roa File: eff5f3cc-d054-3ac1-a62e-481bf8f9d7b3.roa (raw, json) Hash identifier: l2OLKJaA/A+PhG6Q9tF6jvbf/cfZC0jkBrjaqGEUFnY= Subject key identifier: 44:33:64:8A:A0:83:3F:26:FE:08:62:FD:ED:0E:49:28:6F:D8:48:74 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EF7179FD8ABAE9D4E5C652C80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eff5f3cc-d054-3ac1-a62e-481bf8f9d7b3.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 701 IP address blocks: 70.21.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:9f:d8:ab:ae:9d:4e:5c:65:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=38982d5a-34bf-42ae-aab3-ecaefd2d4da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0c:f4:9d:04:26:c6:17:e1:84:fe:7b:97:0e: b8:5c:e7:fc:c7:f7:60:50:bb:95:d8:56:dd:40:14: 11:d5:1e:3d:58:1c:b3:f7:7c:d0:ea:ac:b9:16:63: 7e:26:bc:d2:19:fd:3c:4c:11:21:c0:68:4e:c0:87: 9f:0f:d2:ae:cb:23:e7:ef:72:82:ee:5e:35:ec:40: 89:1d:c9:13:5a:07:fd:f3:8c:54:42:68:1e:45:d5: 73:1a:8d:1a:ca:0c:f7:e3:1e:d1:bc:64:3e:c7:94: d3:d3:ea:56:99:83:bc:c1:87:76:1a:58:15:c4:cc: af:90:6b:61:25:99:90:14:26:28:5c:f0:a6:26:b0: ca:87:28:a1:e3:36:ad:25:d5:f0:91:f5:30:77:b8: d6:18:e7:c6:53:64:26:ba:05:a8:af:27:55:31:65: 16:d3:dc:2f:76:1c:b5:7c:c7:bd:2b:15:4d:96:e3: 9c:1c:c2:94:17:15:31:fb:a7:50:55:e3:2f:b0:77: 35:14:77:dc:0f:d5:6f:c4:5d:d5:f5:d7:92:60:78: c5:84:e7:92:e4:84:1e:96:f1:53:c1:05:f8:8d:80: c7:15:3b:4d:2b:a1:83:13:fc:c8:81:a3:c1:02:f1: 47:85:08:9b:e7:1d:75:1c:4c:c4:ef:17:0b:ca:62: 77:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:33:64:8A:A0:83:3F:26:FE:08:62:FD:ED:0E:49:28:6F:D8:48:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eff5f3cc-d054-3ac1-a62e-481bf8f9d7b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 70.21.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:6d:a3:f4:55:75:06:47:3d:fe:a7:59:32:a2:3c:69:e6:8c: 4c:71:d6:a8:86:4d:bd:92:14:88:f7:40:4b:76:65:dd:1d:d9: 74:38:cd:c3:a5:2d:27:56:e4:11:18:78:5c:2f:30:fc:23:d3: c8:e6:19:69:77:86:8f:22:18:e3:aa:56:2b:b0:0b:51:91:b0: 9a:93:e6:55:15:8a:c5:4a:86:df:bf:06:24:4d:cf:4f:27:79: da:f9:c3:27:66:f1:e9:80:85:8f:2d:ec:a5:1d:89:f3:b1:ed: 2c:64:bd:e1:85:ed:65:dd:de:0a:15:7a:c7:a8:6e:bf:ea:a8: 94:c5:3b:a5:40:11:b8:e6:e2:d7:14:82:49:68:a1:d9:1a:f8: 44:fa:7d:2d:d5:0a:1f:4e:0a:74:c2:de:49:19:22:0e:8c:cf: e9:38:b4:13:f5:13:79:ae:f6:7e:e1:4d:18:61:86:f1:d2:22: 74:33:68:19:7f:45:15:65:dc:48:4f:eb:fe:5c:73:07:f5:87: 41:58:55:a6:2c:f2:26:cf:4b:4b:0c:e9:b9:e0:ef:75:92:14: 56:58:9b:1d:25:c2:db:d9:1f:57:ab:63:dc:38:61:c5:21:6b: 52:bf:10:95:9b:1d:43:5a:6f:cb:28:d1:90:c2:6c:bf:50:f1: 9f:bb:0b:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F5/Yq66dTlxlLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk Mzg5ODJkNWEtMzRiZi00MmFlLWFhYjMtZWNhZWZkMmQ0ZGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQz0nQQmxhfhhP57lw64XOf8x/dgULuV2Fbd QBQR1R49WByz93zQ6qy5FmN+JrzSGf08TBEhwGhOwIefD9KuyyPn73KC7l417ECJ HckTWgf984xUQmgeRdVzGo0aygz34x7RvGQ+x5TT0+pWmYO8wYd2GlgVxMyvkGth JZmQFCYoXPCmJrDKhyih4zatJdXwkfUwd7jWGOfGU2QmugWorydVMWUW09wvdhy1 fMe9KxVNluOcHMKUFxUx+6dQVeMvsHc1FHfcD9VvxF3V9deSYHjFhOeS5IQelvFT wQX4jYDHFTtNK6GDE/zIgaPBAvFHhQib5x11HEzE7xcLymJ3/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQzZIqggz8m/ghi/e0OSShv2Eh0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZWZmNWYzY2MtZDA1NC0z YWMxLWE2MmUtNDgxYmY4ZjlkN2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRhWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpto/RVdQZHPf6nWTKiPGnmjExx1qiGTb2SFIj3QEt2Zd0d2XQ4zcOl LSdW5BEYeFwvMPwj08jmGWl3ho8iGOOqViuwC1GRsJqT5lUVisVKht+/BiRNz08n edr5wydm8emAhY8t7KUdifOx7SxkveGF7WXd3goVeseobr/qqJTFO6VAEbjm4tcU gkloodka+ET6fS3VCh9OCnTC3kkZIg6Mz+k4tBP1E3mu9n7hTRhhhvHSInQzaBl/ RRVl3EhP6/5ccwf1h0FYVaYs8ibPS0sM6bng73WSFFZYmx0lwtvZH1erY9w4YcUh a1K/EJWbHUNab8so0ZDCbL9Q8Z+7C+8= -----END CERTIFICATE-----Generated at Sun Sep 13 15:02:17 2026 by rpki-client