$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f4ec30ea-26cb-38d9-9131-0e5a9efce7ce.roa File: f4ec30ea-26cb-38d9-9131-0e5a9efce7ce.roa (raw, json) Hash identifier: bVUO9WJZg6StSxcRsT39Ngc3/YRVVqbYRAloEI3pX6M= Subject key identifier: 9D:A0:44:EA:A1:84:42:2D:50:4E:5B:59:F0:28:C1:E3:53:97:74:7C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EF7177FF6C0352BE4E6188424 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f4ec30ea-26cb-38d9-9131-0e5a9efce7ce.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 701 IP address blocks: 71.168.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:7f:f6:c0:35:2b:e4:e6:18:84:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=a1685601-959d-48bd-8204-9fc677f4a374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4c:88:a5:d3:51:2e:21:91:93:1d:b3:08:c9: b4:db:82:f3:e6:ad:d6:f0:fe:a6:27:28:7a:25:bb: 09:83:a0:b1:97:2f:a3:5e:e8:b6:16:bd:c3:fc:c7: 0a:51:eb:3b:60:dd:6c:4c:18:af:59:9e:bf:86:62: 76:7b:2d:3b:de:9e:22:91:4e:16:02:bd:3f:6f:62: 42:99:e0:4a:78:88:0c:af:5e:1d:c3:52:a7:b7:01: 82:66:c3:43:0d:c5:37:c9:4b:79:c9:3b:86:db:c4: 27:dd:ab:77:ed:26:c8:83:e3:e7:da:d7:e0:b1:68: c6:4c:55:29:cb:ee:ca:e6:95:13:67:ab:cd:f8:f8: 1b:b6:c9:7c:9c:a6:8b:31:f4:a8:99:d8:e2:fa:fb: cc:91:e5:f2:b5:fd:94:3d:75:89:95:4d:2f:64:07: 7b:e9:dd:de:56:f1:ca:4c:8b:d5:28:55:53:4c:e8: b6:e1:bc:4f:4b:c9:b7:75:db:e7:4a:ad:65:37:ca: a4:7d:b4:50:67:45:40:01:9c:23:70:53:6c:a2:20: 73:02:28:a5:36:3c:e2:21:e0:a0:5a:2a:63:60:1d: cf:34:ca:1a:32:e6:dc:c8:34:37:45:19:83:2d:1a: 18:14:88:c0:d2:84:79:d8:a5:b4:08:8f:fc:fe:66: 0a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A0:44:EA:A1:84:42:2D:50:4E:5B:59:F0:28:C1:E3:53:97:74:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f4ec30ea-26cb-38d9-9131-0e5a9efce7ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.168.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:b5:b5:e0:bb:82:16:ff:a6:16:43:e3:56:99:aa:f9:b2:1f: f9:22:fa:bc:ad:ad:3a:f3:cc:75:ea:8d:69:eb:11:c5:d9:04: e6:c2:4c:d2:74:26:5b:59:51:a5:86:e4:16:ee:15:b2:23:82: ef:06:6b:79:b6:3d:78:e6:67:d9:b1:3f:8b:75:76:6f:15:67: 13:58:19:a1:5f:98:68:19:66:a0:42:b8:68:2f:6b:df:19:5b: 43:ad:26:44:66:65:49:c4:c0:6e:29:4a:f1:03:b0:6b:89:ac: 67:cb:af:69:76:89:7d:1d:87:26:b1:ad:2b:7d:02:54:9d:af: e3:79:8b:d9:95:00:31:62:b4:1e:d2:6e:cd:c4:c0:59:2d:f8: 26:5f:b0:b6:61:22:8f:66:f6:84:a2:b8:59:23:28:27:33:e5: 43:29:e5:06:da:2f:31:a2:8c:6c:4f:26:45:49:74:25:11:90: af:2d:e1:7a:7a:b1:85:66:a9:40:ff:c9:63:9b:d2:66:f9:2d: 67:d7:39:10:e3:af:6b:6f:1c:b3:9e:8c:cd:71:38:90:b3:c4: 37:9b:1a:9b:0a:fb:e8:17:3f:6e:e5:c6:50:9d:3e:3d:e3:5e: ed:06:9a:77:bd:9c:51:9b:5d:e0:1e:31:1b:6c:f0:20:e0:88: 8f:10:83:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F3/2wDUr5OYYhCQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk YTE2ODU2MDEtOTU5ZC00OGJkLTgyMDQtOWZjNjc3ZjRhMzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEyIpdNRLiGRkx2zCMm024Lz5q3W8P6mJyh6 JbsJg6Cxly+jXui2Fr3D/McKUes7YN1sTBivWZ6/hmJ2ey073p4ikU4WAr0/b2JC meBKeIgMr14dw1KntwGCZsNDDcU3yUt5yTuG28Qn3at37SbIg+Pn2tfgsWjGTFUp y+7K5pUTZ6vN+Pgbtsl8nKaLMfSomdji+vvMkeXytf2UPXWJlU0vZAd76d3eVvHK TIvVKFVTTOi24bxPS8m3ddvnSq1lN8qkfbRQZ0VAAZwjcFNsoiBzAiilNjziIeCg WipjYB3PNMoaMubcyDQ3RRmDLRoYFIjA0oR52KW0CI/8/mYKbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2gROqhhEItUE5bWfAoweNTl3R8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjRlYzMwZWEtMjZjYi0z OGQ5LTkxMzEtMGU1YTllZmNlN2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHR6iAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJS1teC7ghb/phZD41aZqvmyH/ki+rytrTrzzHXqjWnrEcXZBObCTNJ0 JltZUaWG5BbuFbIjgu8Ga3m2PXjmZ9mxP4t1dm8VZxNYGaFfmGgZZqBCuGgva98Z W0OtJkRmZUnEwG4pSvEDsGuJrGfLr2l2iX0dhyaxrSt9AlSdr+N5i9mVADFitB7S bs3EwFkt+CZfsLZhIo9m9oSiuFkjKCcz5UMp5QbaLzGijGxPJkVJdCURkK8t4Xp6 sYVmqUD/yWOb0mb5LWfXORDjr2tvHLOejM1xOJCzxDebGpsK++gXP27lxlCdPj3j Xu0Gmne9nFGbXeAeMRts8CDgiI8QgxI= -----END CERTIFICATE-----Generated at Sun Sep 13 17:25:45 2026 by rpki-client