$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f378c41b-61ae-349e-931a-eb66709cc8a9.roa File: f378c41b-61ae-349e-931a-eb66709cc8a9.roa (raw, json) Hash identifier: V2ZGUpbiJL8a2+rhw0JBNGNYG7/Um8X1bnZeFtC/zGQ= Subject key identifier: 1A:41:A7:00:B7:5D:D1:C8:AB:62:99:3C:43:AC:58:B7:DA:4E:29:BC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EF717A05E02CA19C866AF0100 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f378c41b-61ae-349e-931a-eb66709cc8a9.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 701 IP address blocks: 71.173.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:a0:5e:02:ca:19:c8:66:af:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=6d91701d-e93d-4ecc-8938-5262f4df6ab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:35:53:c6:00:d3:0d:42:52:e4:29:a0:73:78: 33:4c:a2:bd:a9:a8:47:59:5d:c7:3a:0f:b4:25:0f: 32:14:7b:f0:da:4c:02:5c:76:e3:8a:d0:10:63:af: 25:56:eb:76:8a:5d:ce:8c:48:b7:f1:b8:01:00:7a: 34:82:b8:b4:20:14:6e:bd:f1:f7:96:11:6c:03:1b: 3b:77:46:de:87:3c:2d:ce:3b:83:b5:08:87:c9:a0: 95:e9:18:76:9b:84:9f:5c:1d:14:21:9a:74:cf:31: 3e:58:f2:a2:fa:09:2e:05:2b:84:1c:83:71:d5:25: 1d:85:4c:b0:13:ad:04:d9:d8:b9:cd:74:ef:57:e8: d7:40:6a:d3:22:54:42:46:84:77:75:51:f0:ba:67: 6e:75:f1:94:b9:fe:98:c3:80:42:22:07:e0:84:20: 8a:ad:a5:f3:36:85:f1:38:88:25:4b:78:d6:ea:bd: 45:27:8e:a5:fa:da:0c:da:ce:88:e4:40:2c:0b:7d: 2f:de:7f:f7:b9:7f:20:39:49:99:5a:ef:2e:3d:c9: 53:3d:7b:cd:8a:ba:ff:53:42:ea:99:82:e3:74:01: e6:d7:6f:5c:01:c5:e3:98:3c:67:fb:09:5e:46:39: 71:b9:50:a3:aa:4f:c8:78:bf:a0:cd:ae:9b:e2:68: d5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:41:A7:00:B7:5D:D1:C8:AB:62:99:3C:43:AC:58:B7:DA:4E:29:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f378c41b-61ae-349e-931a-eb66709cc8a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.173.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:79:a7:96:15:aa:b2:56:12:ae:22:87:a5:73:7d:56:2b:0b: 68:1a:1e:24:90:77:6b:31:8f:ef:16:85:f9:8d:f5:44:8f:e1: 9b:21:b1:01:e0:3f:15:e4:14:64:13:40:c3:d0:be:3d:40:ee: 54:4e:fa:76:16:bd:77:5c:55:c6:9a:9e:5a:c6:d9:f6:6d:d1: 83:34:4c:15:a3:9c:a0:a4:e2:65:5c:3c:d4:22:4c:9c:66:e3: a1:49:a4:f6:4f:c0:e4:66:1c:84:9a:7c:07:9c:54:02:90:03: 7c:bf:07:e6:c6:84:c0:49:52:eb:34:60:38:3f:43:29:3b:e1: 35:6c:05:0a:32:e7:4b:f2:f4:78:bc:cd:26:0a:26:07:6f:b0: 2f:25:16:80:fc:af:08:0e:a6:1b:bb:32:df:f0:95:0b:36:bd: eb:e7:c2:5b:25:b7:80:93:88:7e:87:4a:c0:1e:28:9d:5f:8f: 45:af:a7:42:92:6a:60:5e:85:91:5d:1b:1e:fb:14:cf:94:80: 67:45:9a:d7:e4:49:63:dc:41:76:a2:f3:d6:35:b5:04:ba:cb: 42:d5:cb:2e:4b:be:eb:17:69:6b:1c:44:58:d0:52:83:6f:17: bf:12:84:c7:10:42:88:9b:92:b4:e2:6d:8b:d4:91:a0:a8:80: 50:1e:4b:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F6BeAsoZyGavAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk NmQ5MTcwMWQtZTkzZC00ZWNjLTg5MzgtNTI2MmY0ZGY2YWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDVTxgDTDUJS5Cmgc3gzTKK9qahHWV3HOg+0 JQ8yFHvw2kwCXHbjitAQY68lVut2il3OjEi38bgBAHo0gri0IBRuvfH3lhFsAxs7 d0behzwtzjuDtQiHyaCV6Rh2m4SfXB0UIZp0zzE+WPKi+gkuBSuEHINx1SUdhUyw E60E2di5zXTvV+jXQGrTIlRCRoR3dVHwumdudfGUuf6Yw4BCIgfghCCKraXzNoXx OIglS3jW6r1FJ46l+toM2s6I5EAsC30v3n/3uX8gOUmZWu8uPclTPXvNirr/U0Lq mYLjdAHm129cAcXjmDxn+wleRjlxuVCjqk/IeL+gza6b4mjV1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpBpwC3XdHIq2KZPEOsWLfaTim8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjM3OGM0MWItNjFhZS0z NDllLTkzMWEtZWI2NjcwOWNjOGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHR62AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI95p5YVqrJWEq4ih6VzfVYrC2gaHiSQd2sxj+8WhfmN9USP4ZshsQHg PxXkFGQTQMPQvj1A7lRO+nYWvXdcVcaanlrG2fZt0YM0TBWjnKCk4mVcPNQiTJxm 46FJpPZPwORmHISafAecVAKQA3y/B+bGhMBJUus0YDg/Qyk74TVsBQoy50vy9Hi8 zSYKJgdvsC8lFoD8rwgOphu7Mt/wlQs2vevnwlslt4CTiH6HSsAeKJ1fj0Wvp0KS amBehZFdGx77FM+UgGdFmtfkSWPcQXai89Y1tQS6y0LVyy5LvusXaWscRFjQUoNv F78ShMcQQoibkrTibYvUkaCogFAeS+w= -----END CERTIFICATE-----Generated at Sun Sep 13 15:49:52 2026 by rpki-client