$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f4ec30ea-26cb-38d9-9131-0e5a9efce7ce.roa File: f4ec30ea-26cb-38d9-9131-0e5a9efce7ce.roa (raw, json) Hash identifier: +tD0LeUJkeyy+CaIu+5hocPIaBmJwGuRHXnsIYalV98= Subject key identifier: C4:46:B1:A5:FE:51:D0:41:A9:0B:CE:9F:BE:43:06:C2:5A:89:C8:1A Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F9A688526CE9AC8039C662100 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f4ec30ea-26cb-38d9-9131-0e5a9efce7ce.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 701 IP address blocks: 71.168.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:85:26:ce:9a:c8:03:9c:66:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=47369f9b-41b5-40d1-b8bd-30f43fad1d45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fa:bf:bc:91:e0:24:ec:fb:da:da:5c:0e:a5: d4:dd:4b:dc:ef:94:cc:f2:15:9c:77:34:5b:81:0c: bd:f9:92:92:5c:8f:7c:31:a0:d8:0c:61:71:a7:83: 4f:9f:b5:b0:10:6d:aa:0f:48:67:44:b7:ba:27:40: e8:67:8f:67:07:09:9d:68:38:11:f4:38:dc:5c:2d: a8:9d:70:2a:1c:f1:c2:bb:ae:4e:6d:1b:8f:9b:c6: 97:e8:83:37:a4:97:01:75:81:d0:10:a3:31:fe:0a: 5c:32:92:d2:e1:4d:d1:00:ff:68:a4:a7:a7:3c:50: f8:87:49:26:26:0c:de:66:d9:e9:3f:e5:08:6a:71: 19:9c:02:22:61:4a:36:c6:a4:a7:5f:c9:02:79:23: c2:69:74:0c:90:b2:12:94:bc:84:c7:7c:cc:da:2c: a0:be:fd:28:13:d4:a7:c1:05:fb:94:f7:f6:fb:e0: 18:38:27:fb:89:c8:e6:17:52:c7:ac:e8:21:ea:31: 8b:2d:39:ea:cd:42:9a:a7:3f:28:56:32:af:c3:e1: ce:31:79:be:4b:0b:ea:fa:51:55:a5:48:10:8a:72: 15:9f:01:85:7d:88:f2:d1:40:e9:ae:da:26:61:4a: 22:9e:48:7c:18:83:b1:99:a8:8b:b2:46:f3:0d:07: a4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:46:B1:A5:FE:51:D0:41:A9:0B:CE:9F:BE:43:06:C2:5A:89:C8:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f4ec30ea-26cb-38d9-9131-0e5a9efce7ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.168.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:4f:46:aa:51:fb:6c:eb:bf:9a:a1:7d:d9:7f:6a:5c:80:f9: 33:c5:b6:31:b8:07:a6:eb:cd:64:c1:de:00:46:93:a9:49:d0: d2:c4:bf:78:ba:92:16:2e:1c:cd:40:5c:3e:ad:16:3b:e5:2a: a5:b4:a9:f7:01:39:dc:c6:a6:cd:13:57:80:5e:c2:63:4e:35: 92:cc:c8:07:a3:59:01:43:30:c8:f6:9e:26:c4:30:ec:00:5f: a6:16:31:96:f7:e7:12:7f:b5:db:f7:27:db:b1:e5:ec:45:ab: 31:73:eb:6e:64:44:3a:ab:02:7f:e2:cc:e4:6f:86:35:1d:3c: 2c:b5:5f:69:67:73:fa:91:9d:66:ed:3d:2a:b4:7a:94:be:13: 5d:55:9c:44:e1:6f:d8:32:6d:4c:53:40:cf:60:73:92:4c:b7: a0:d9:aa:6e:1b:91:19:f8:66:44:d7:e8:1b:ef:6b:a0:61:3e: 54:33:fb:f2:cd:6b:82:cc:75:29:84:34:ba:27:ef:0c:41:78: f5:4f:e4:00:3e:9a:cf:55:d6:43:94:59:7d:84:23:81:3b:48: 1b:b0:e6:e7:2a:01:62:4d:6f:3c:75:51:07:77:05:53:71:6d: 30:10:f4:a9:69:d8:df:4b:a1:78:c8:aa:8f:e1:25:ac:2f:99: 60:6e:87:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaIUmzprIA5xmIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk NDczNjlmOWItNDFiNS00MGQxLWI4YmQtMzBmNDNmYWQxZDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/q/vJHgJOz72tpcDqXU3Uvc75TM8hWcdzRb gQy9+ZKSXI98MaDYDGFxp4NPn7WwEG2qD0hnRLe6J0DoZ49nBwmdaDgR9DjcXC2o nXAqHPHCu65ObRuPm8aX6IM3pJcBdYHQEKMx/gpcMpLS4U3RAP9opKenPFD4h0km JgzeZtnpP+UIanEZnAIiYUo2xqSnX8kCeSPCaXQMkLISlLyEx3zM2iygvv0oE9Sn wQX7lPf2++AYOCf7icjmF1LHrOgh6jGLLTnqzUKapz8oVjKvw+HOMXm+Swvq+lFV pUgQinIVnwGFfYjy0UDprtomYUoinkh8GIOxmaiLskbzDQek3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRGsaX+UdBBqQvOn75DBsJaicgaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjRlYzMwZWEtMjZjYi0z OGQ5LTkxMzEtMGU1YTllZmNlN2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHR6iAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBPRqpR+2zrv5qhfdl/alyA+TPFtjG4B6brzWTB3gBGk6lJ0NLEv3i6 khYuHM1AXD6tFjvlKqW0qfcBOdzGps0TV4BewmNONZLMyAejWQFDMMj2nibEMOwA X6YWMZb35xJ/tdv3J9ux5exFqzFz625kRDqrAn/izORvhjUdPCy1X2lnc/qRnWbt PSq0epS+E11VnEThb9gybUxTQM9gc5JMt6DZqm4bkRn4ZkTX6Bvva6BhPlQz+/LN a4LMdSmENLon7wxBePVP5AA+ms9V1kOUWX2EI4E7SBuw5ucqAWJNbzx1UQd3BVNx bTAQ9Klp2N9LoXjIqo/hJawvmWBuh6Q= -----END CERTIFICATE-----Generated at Mon Nov 2 21:56:25 2026 by rpki-client