$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa956ca3-7c6d-3cf0-b213-8b12e12ab0b1.roa File: fa956ca3-7c6d-3cf0-b213-8b12e12ab0b1.roa (raw, json) Hash identifier: kvJvGixCS3xPFNLUdcMbwTzymgsb3u5NMpuwZiEo4GY= Subject key identifier: 64:B9:D2:C7:B4:19:8B:2C:26:36:2E:C5:F5:4E:11:25:21:8D:C2:4F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F89A8848C8A89CA0D8EA2AE80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa956ca3-7c6d-3cf0-b213-8b12e12ab0b1.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 701 IP address blocks: 71.127.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:84:8c:8a:89:ca:0d:8e:a2:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=35965cdb-d29d-4c84-a44e-7e56780eba66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f6:a5:62:69:2b:f7:f3:52:20:dd:cf:b0:31: ec:c3:3a:1e:2a:08:cf:a1:4a:05:ba:ed:95:a0:62: 86:a4:17:74:19:f0:e5:d0:5c:79:38:8f:7f:a8:cd: 65:d2:7d:ef:7c:59:f4:d2:54:57:a1:61:d7:40:20: 07:3a:38:5b:b0:a7:e1:41:42:27:b9:3d:6d:34:11: e7:fe:45:21:62:73:38:47:44:60:33:18:15:69:86: c5:4e:25:16:49:bb:80:c8:f5:b5:2b:aa:c4:2d:b5: 18:13:3b:cb:75:d9:df:e7:0c:f1:0a:db:b9:72:03: 17:51:5b:75:8f:a9:ce:31:6b:e5:78:8b:90:eb:48: 78:35:f8:25:a1:01:dd:2f:81:77:61:0a:74:97:14: 42:3b:85:40:45:3c:9c:a2:87:fb:a1:d0:63:5b:e6: 6c:12:30:c0:46:cf:bb:51:b0:48:9a:0e:37:dd:9a: 84:0d:61:d0:1b:76:ba:28:8b:47:bb:75:05:cf:ed: 67:bc:0a:6a:65:0f:78:db:c0:d8:27:d7:63:f6:e6: dd:60:d9:a2:f6:48:e7:d1:6a:43:5a:c6:4f:80:1f: c7:35:4b:26:d0:72:22:e9:48:ab:94:c6:bc:34:84: ae:03:f6:0a:27:eb:88:b6:5b:5b:56:df:eb:81:2a: bb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B9:D2:C7:B4:19:8B:2C:26:36:2E:C5:F5:4E:11:25:21:8D:C2:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa956ca3-7c6d-3cf0-b213-8b12e12ab0b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.127.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:26:3f:de:f6:10:9c:67:e7:5f:b7:a0:b7:ba:7e:f3:b8:46: e3:30:fb:b8:91:57:bc:e6:42:c6:86:75:ad:1d:00:6e:e4:74: bc:98:4f:80:95:72:93:67:1f:d6:27:63:c6:7e:59:ac:b3:15: 90:9b:97:f8:e8:7d:d8:17:53:a8:56:dd:d3:ea:ac:77:60:e8: b0:1f:02:e2:9a:73:56:26:71:ea:db:1e:fe:a8:57:64:aa:ed: 22:01:25:93:f6:8b:a7:09:ed:fe:18:43:a4:ac:bb:4e:d8:70: fa:5b:be:8a:f4:0f:5a:eb:52:28:2c:36:66:1d:9a:c8:90:59: d3:7f:dc:6d:a3:c5:4e:13:9b:a5:ab:f5:06:6b:5a:04:f2:10: 8f:1a:a0:e0:90:b6:15:3d:5e:f7:47:e4:c1:5c:9c:9e:8b:45: 1e:ce:95:78:de:4e:5e:67:40:74:0c:fb:85:e4:32:10:67:d6: e9:c5:a7:94:e1:62:1d:ae:32:0f:18:52:cc:d1:be:37:94:2f: 3a:e1:26:1d:0e:9a:00:1b:fb:2f:12:6b:8e:6f:7f:b4:88:e6: 4a:2e:69:d6:c7:85:89:91:23:f9:f4:fb:af:1c:ea:39:27:77: 75:0b:1c:63:e2:f0:49:a4:4e:25:99:4e:36:29:32:f5:ad:8e: e2:53:6a:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqISMionKDY6iroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk MzU5NjVjZGItZDI5ZC00Yzg0LWE0NGUtN2U1Njc4MGViYTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvalYmkr9/NSIN3PsDHswzoeKgjPoUoFuu2V oGKGpBd0GfDl0Fx5OI9/qM1l0n3vfFn00lRXoWHXQCAHOjhbsKfhQUInuT1tNBHn /kUhYnM4R0RgMxgVaYbFTiUWSbuAyPW1K6rELbUYEzvLddnf5wzxCtu5cgMXUVt1 j6nOMWvleIuQ60h4NfgloQHdL4F3YQp0lxRCO4VARTycoof7odBjW+ZsEjDARs+7 UbBImg433ZqEDWHQG3a6KItHu3UFz+1nvApqZQ9428DYJ9dj9ubdYNmi9kjn0WpD WsZPgB/HNUsm0HIi6UirlMa8NISuA/YKJ+uItltbVt/rgSq7xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGS50se0GYssJjYuxfVOESUhjcJPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmE5NTZjYTMtN2M2ZC0z Y2YwLWIyMTMtOGIxMmUxMmFiMGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER3+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAmP972EJxn51+3oLe6fvO4RuMw+7iRV7zmQsaGda0dAG7kdLyYT4CV cpNnH9YnY8Z+WayzFZCbl/jofdgXU6hW3dPqrHdg6LAfAuKac1YmcerbHv6oV2Sq 7SIBJZP2i6cJ7f4YQ6Ssu07YcPpbvor0D1rrUigsNmYdmsiQWdN/3G2jxU4Tm6Wr 9QZrWgTyEI8aoOCQthU9XvdH5MFcnJ6LRR7OlXjeTl5nQHQM+4XkMhBn1unFp5Th Yh2uMg8YUszRvjeULzrhJh0OmgAb+y8Sa45vf7SI5kouadbHhYmRI/n0+68c6jkn d3ULHGPi8EmkTiWZTjYpMvWtjuJTajs= -----END CERTIFICATE-----Generated at Mon Nov 2 06:59:20 2026 by rpki-client