$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/73e02eef-4e68-3944-bb90-6e68cf549411.roa File: 73e02eef-4e68-3944-bb90-6e68cf549411.roa (raw, json) Hash identifier: tTKSGq6mzjykWAGMpxQG4HaI5DKrhwul3cScStqlcn8= Subject key identifier: 0A:40:7D:AB:C4:9F:07:75:50:E2:5C:2D:18:66:B4:18:40:D0:E5:8D Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584FD25C098AB7B1E6BCE12B7080 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/73e02eef-4e68-3944-bb90-6e68cf549411.roa Signing time: Fri 13 Nov 2026 02:00:14 +0000 ROA not before: Fri 13 Nov 2026 02:00:14 +0000 ROA not after: Thu 11 Feb 2027 02:00:14 +0000 asID: 21817 IP address blocks: 198.161.144.0/22 maxlen: 29 198.180.225.0/24 maxlen: 29 199.7.192.0/21 maxlen: 29 199.48.56.0/22 maxlen: 29 199.200.112.0/22 maxlen: 29 2606:8100::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d2:5c:09:8a:b7:b1:e6:bc:e1:2b:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Nov 13 02:00:14 2026 GMT Not After : Feb 11 02:00:14 2027 GMT Subject: CN=2075d140-7218-488a-8826-ab49c4569699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c9:af:89:fa:b7:a6:4a:da:9f:97:58:3b:8e: af:7d:d8:da:4c:c8:39:f3:c1:4f:ec:70:d9:9b:68: e8:77:4b:4e:b2:97:c5:b4:b2:66:4d:98:b4:35:1f: d3:df:eb:74:0c:dc:21:b5:21:77:37:67:bc:e8:b8: 4f:ee:49:01:cc:b0:78:77:c0:44:07:0a:d1:6d:2e: cb:bd:bb:ac:1e:4c:28:3a:f3:66:7e:22:a9:8a:43: b8:79:32:82:d6:a3:d3:e1:a8:c7:a5:4e:f1:6d:42: c2:75:02:29:5e:bd:93:ae:e5:fb:59:8c:41:2f:8d: dd:0f:28:31:05:09:86:89:f3:1c:f3:1f:3d:f7:54: 1d:59:79:0a:86:cf:ae:98:39:a7:c0:46:c1:05:f5: c8:ed:f7:62:5f:fb:51:73:2d:45:a3:90:3c:46:34: e2:5f:1a:3e:d3:c6:45:44:38:99:be:22:d7:ae:0d: 89:3a:67:db:92:df:b3:c1:55:c1:be:c4:db:c6:39: b5:6a:38:28:82:49:6a:e5:eb:af:45:cf:cc:aa:10: 7d:15:22:64:b8:57:5a:c9:c2:2b:b5:5a:f6:4c:b9: e2:dd:cd:d8:90:5e:16:f5:a4:57:29:d5:1a:4e:ad: 86:1d:47:98:92:93:2e:aa:7b:aa:65:b5:f9:91:d5: a6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:40:7D:AB:C4:9F:07:75:50:E2:5C:2D:18:66:B4:18:40:D0:E5:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/73e02eef-4e68-3944-bb90-6e68cf549411.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 198.161.144.0/22 198.180.225.0/24 199.7.192.0/21 199.48.56.0/22 199.200.112.0/22 IPv6: 2606:8100::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:63:98:ad:63:81:8d:93:b9:8c:0d:08:b0:ea:70:bc:77:ee: ad:ec:7a:47:c8:8e:db:e0:fe:f9:3a:00:4c:bd:ad:e8:c1:ec: fe:e4:c2:b5:ce:1e:19:83:4c:93:1c:41:fe:da:9d:76:57:be: dc:81:1d:5f:5e:9f:0d:d9:85:09:73:50:2e:76:a2:15:04:e5: 6a:ab:07:9a:5b:29:06:a2:d1:5b:3b:8b:9a:75:18:95:48:03: c2:bd:f7:13:d1:0d:7d:83:26:38:c4:5a:51:d4:68:93:45:dc: 02:1a:db:ca:e6:bf:23:86:64:3c:47:57:a5:e4:e4:aa:fc:a0: 13:c7:32:aa:4f:c5:78:51:d8:d1:f8:58:72:76:8e:f5:30:92: 59:da:4e:21:a7:e9:9d:10:8e:03:43:2a:92:0d:23:93:d3:be: 1c:d8:b2:d5:1d:67:1c:92:7d:8b:69:18:52:33:49:4f:da:be: 25:80:9f:7a:5b:71:79:0d:49:5a:5c:65:80:19:f3:14:4a:0a: 5a:df:a3:d2:e6:c2:95:ad:fb:f0:42:a9:6a:9d:04:c9:15:7a: 41:56:c0:86:0c:67:01:38:3b:21:ca:5f:63:6b:33:a8:66:20: a9:a2:2b:a4:9b:8d:c8:9e:ec:a9:22:97:b7:75:cc:97:4e:9c: 55:34:b7:52 -----BEGIN CERTIFICATE----- MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWE/SXAmKt7HmvOErcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MTExMzAyMDAxNFoXDTI3MDIxMTAyMDAxNFowLzEtMCsGA1UEAxMk MjA3NWQxNDAtNzIxOC00ODhhLTg4MjYtYWI0OWM0NTY5Njk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7cmvifq3pkran5dYO46vfdjaTMg588FP7HDZ m2jod0tOspfFtLJmTZi0NR/T3+t0DNwhtSF3N2e86LhP7kkBzLB4d8BEBwrRbS7L vbusHkwoOvNmfiKpikO4eTKC1qPT4ajHpU7xbULCdQIpXr2TruX7WYxBL43dDygx BQmGifMc8x8991QdWXkKhs+umDmnwEbBBfXI7fdiX/tRcy1Fo5A8RjTiXxo+08ZF RDiZviLXrg2JOmfbkt+zwVXBvsTbxjm1ajgogklq5euvRc/MqhB9FSJkuFdaycIr tVr2TLni3c3YkF4W9aRXKdUaTq2GHUeYkpMuqnuqZbX5kdWmpwIDAQABo4IDfDCC A3gwHQYDVR0OBBYEFApAfavEnwd1UOJcLRhmtBhA0OWNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNzNlMDJlZWYtNGU2OC0z OTQ0LWJiOTAtNmU2OGNmNTQ5NDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCxqGQAwQA xrThAwQDxwfAAwQCxzA4AwQCx8hwMA0EAgACMAcDBQAmBoEAMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABdj mK1jgY2TuYwNCLDqcLx37q3sekfIjtvg/vk6AEy9rejB7P7kwrXOHhmDTJMcQf7a nXZXvtyBHV9enw3ZhQlzUC52ohUE5WqrB5pbKQai0Vs7i5p1GJVIA8K99xPRDX2D JjjEWlHUaJNF3AIa28rmvyOGZDxHV6Xk5Kr8oBPHMqpPxXhR2NH4WHJ2jvUwklna TiGn6Z0QjgNDKpINI5PTvhzYstUdZxySfYtpGFIzSU/aviWAn3pbcXkNSVpcZYAZ 8xRKClrfo9LmwpWt+/BCqWqdBMkVekFWwIYMZwE4OyHKX2NrM6hmIKmiK6Sbjcie 7Kkil7d1zJdOnFU0t1I= -----END CERTIFICATE-----Generated at Sun Nov 15 16:04:27 2026 by rpki-client