$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1682d008-6870-34ba-a083-65fc3b370d8f.roa File: 1682d008-6870-34ba-a083-65fc3b370d8f.roa (raw, json) Hash identifier: xnsXrnXOTs23fyh2+Rv/OIMtY23m/mrLi81r8HMi8mo= Subject key identifier: A6:FE:DF:5E:01:18:E8:06:AA:49:D3:38:57:3E:C8:0B:44:DC:92:73 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F5A32B44DE7841B1752A9C1C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1682d008-6870-34ba-a083-65fc3b370d8f.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 3593 IP address blocks: 216.108.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:b4:4d:e7:84:1b:17:52:a9:c1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=ab24f8a4-43eb-4ad3-a413-232136a728b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:4b:75:0f:46:e7:97:5e:5b:c4:aa:f6:2e:38: d0:3d:75:c7:f4:ef:f8:c1:db:67:e5:17:01:3a:a4: 39:58:87:08:4f:0b:b4:11:64:65:69:46:c0:49:a3: 73:84:32:a8:cd:c6:b9:1b:c3:3c:0a:77:3b:ac:da: cd:a5:01:c1:ee:58:28:12:62:a8:16:1f:ad:bc:3f: f3:0a:44:a7:0c:bb:18:84:df:00:08:9c:cc:8f:c4: 68:84:df:57:d6:88:29:57:e4:94:e7:49:c1:12:a6: fe:04:b0:1d:fb:c7:55:b7:a0:6e:fa:54:5a:ec:32: 01:23:fc:6b:3a:40:b0:95:32:ea:69:fe:75:41:3f: 30:eb:6f:1d:20:f5:51:9b:1e:38:22:65:c4:d3:fd: fd:8f:fb:e5:e0:ff:3a:8c:ca:74:01:6b:02:c5:56: 10:a8:35:b0:2b:1a:8a:a7:3f:70:23:4e:70:60:7a: 2d:da:0d:62:a2:21:9c:bb:0e:a6:f8:c0:82:59:64: 33:49:34:ad:9c:9b:06:3f:93:0b:5d:8a:13:b6:c3: b2:59:ca:43:27:70:f6:01:c4:64:de:65:0a:da:f8: 2f:37:95:c1:80:19:b7:db:06:56:8e:9d:85:20:35: 98:e5:4d:09:36:b1:ab:b2:8d:d5:dd:d1:f4:98:1a: 91:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:FE:DF:5E:01:18:E8:06:AA:49:D3:38:57:3E:C8:0B:44:DC:92:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1682d008-6870-34ba-a083-65fc3b370d8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 216.108.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:dd:14:e2:da:cd:a2:16:11:36:2f:39:6d:d5:ce:d9:83:ab: f6:e0:f7:29:9c:39:38:c0:ce:2a:ad:1a:d3:7d:d6:ca:79:30: 99:60:62:06:1c:c3:4f:2e:75:79:03:ab:34:bc:c5:f8:5a:1a: 69:1b:f7:65:84:54:f5:73:30:a2:35:27:78:75:43:2a:cb:c6: cf:4e:55:47:4c:c6:e8:09:fa:32:f6:b6:c5:20:ef:ad:26:f4: 54:51:23:f3:b3:3c:43:12:14:06:1c:06:55:36:a6:7b:aa:a2: a8:73:36:0d:cf:d1:6e:6b:26:6d:91:21:31:22:e6:92:a9:25: 3f:58:25:94:37:43:c0:b9:15:10:39:52:c9:2b:d1:77:80:56: 07:b0:43:12:97:9b:ec:e7:e0:40:a1:6b:93:75:d2:ba:83:5e: bd:2d:71:08:d0:b8:ef:ef:c8:1f:da:eb:0a:e6:83:78:ef:e0: 9f:2d:28:3e:58:c2:cc:04:f9:f4:a7:5d:20:d4:2f:73:05:97: 4a:41:85:1a:96:4b:0f:73:06:0d:8e:a0:b3:45:6c:d9:18:e3: 5d:ba:78:9c:c9:1c:a8:ad:21:23:b2:8a:e5:32:8f:ab:5e:58: e0:a5:6a:02:0f:7c:c2:e8:c5:29:9e:81:98:f9:96:1b:d2:59: 84:0f:ff:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMrRN54QbF1KpwcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk YWIyNGY4YTQtNDNlYi00YWQzLWE0MTMtMjMyMTM2YTcyOGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/0t1D0bnl15bxKr2LjjQPXXH9O/4wdtn5RcB OqQ5WIcITwu0EWRlaUbASaNzhDKozca5G8M8Cnc7rNrNpQHB7lgoEmKoFh+tvD/z CkSnDLsYhN8ACJzMj8RohN9X1ogpV+SU50nBEqb+BLAd+8dVt6Bu+lRa7DIBI/xr OkCwlTLqaf51QT8w628dIPVRmx44ImXE0/39j/vl4P86jMp0AWsCxVYQqDWwKxqK pz9wI05wYHot2g1ioiGcuw6m+MCCWWQzSTStnJsGP5MLXYoTtsOyWcpDJ3D2AcRk 3mUK2vgvN5XBgBm32wZWjp2FIDWY5U0JNrGrso3V3dH0mBqRlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKb+314BGOgGqknTOFc+yAtE3JJzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTY4MmQwMDgtNjg3MC0z NGJhLWEwODMtNjVmYzNiMzcwZDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2GzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALdFOLazaIWETYvOW3VztmDq/bg9ymcOTjAziqtGtN91sp5MJlgYgYc w08udXkDqzS8xfhaGmkb92WEVPVzMKI1J3h1QyrLxs9OVUdMxugJ+jL2tsUg760m 9FRRI/OzPEMSFAYcBlU2pnuqoqhzNg3P0W5rJm2RITEi5pKpJT9YJZQ3Q8C5FRA5 Uskr0XeAVgewQxKXm+zn4ECha5N10rqDXr0tcQjQuO/vyB/a6wrmg3jv4J8tKD5Y wswE+fSnXSDUL3MFl0pBhRqWSw9zBg2OoLNFbNkY4126eJzJHKitISOyiuUyj6te WOClagIPfMLoxSmegZj5lhvSWYQP/7g= -----END CERTIFICATE-----Generated at Sun Oct 11 01:04:11 2026 by rpki-client