$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c939490-8acc-372a-822a-aa2ec92ab56a.roa File: 3c939490-8acc-372a-822a-aa2ec92ab56a.roa (raw, json) Hash identifier: BNoSL6z4oDDud83JhBOSAGToo+TOHimQREI5D2C3vK4= Subject key identifier: 3A:78:22:0B:FC:04:9C:F2:05:02:99:DB:8C:52:19:4B:DF:38:F5:D1 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F48C0AB4895DF7D4B6D4DC700 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c939490-8acc-372a-822a-aa2ec92ab56a.roa Signing time: Thu 24 Sep 2026 19:01:51 +0000 ROA not before: Thu 24 Sep 2026 19:01:51 +0000 ROA not after: Wed 23 Dec 2026 20:01:51 +0000 asID: 5650 IP address blocks: 172.76.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:c0:ab:48:95:df:7d:4b:6d:4d:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 24 19:01:51 2026 GMT Not After : Dec 23 20:01:51 2026 GMT Subject: CN=c78b62eb-5c10-42d7-a78f-f10890235290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:10:8f:40:a1:3a:3f:ec:e1:65:7a:db:b9:9b: ea:05:56:37:da:3a:f0:28:d5:1e:74:5b:d8:f4:41: 1e:9b:22:5c:0f:3f:1b:14:63:24:a2:53:03:30:d4: bc:10:d9:70:b8:44:d0:51:da:ee:66:03:05:eb:0e: 65:05:51:4a:36:fe:6f:34:f0:4c:57:6d:ee:42:28: 43:e2:e6:33:93:48:85:2d:f7:4c:cf:18:67:a5:30: 0f:a2:5b:ba:27:c7:4b:90:3a:60:8a:4c:70:59:bb: 0a:8a:74:83:2c:21:03:24:27:9b:34:84:95:23:93: 4e:41:2a:c5:ea:af:7c:6e:27:ab:f6:d6:14:7e:5e: 2a:56:84:a4:aa:91:80:3a:ff:0a:0d:48:33:72:8c: b2:ed:97:05:fc:97:d0:c7:6e:39:1c:c7:2a:ab:24: 29:96:3e:74:80:0e:f8:3f:76:9c:46:19:9c:b5:0a: 31:45:9c:80:3d:66:53:0c:a4:49:8f:a7:8c:de:d8: 10:17:31:b3:ce:c4:ff:e9:e6:03:12:7f:20:f1:2a: 2b:b2:d7:9d:61:ea:9b:4c:ad:a5:5e:94:45:d9:24: ae:d5:06:dd:d8:37:32:1d:20:4a:9f:92:b9:4a:ca: 46:93:ff:a2:c5:4c:f7:f0:47:1c:87:09:06:08:0e: 13:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:78:22:0B:FC:04:9C:F2:05:02:99:DB:8C:52:19:4B:DF:38:F5:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c939490-8acc-372a-822a-aa2ec92ab56a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 172.76.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:3a:b3:f3:b8:a8:20:c8:4a:ae:19:cb:94:c2:de:60:17:7a: 9f:1c:f6:6f:18:da:39:b9:34:d3:2e:d6:36:4f:b5:99:9a:2c: 7b:13:3a:93:61:e7:aa:b8:8b:ad:4a:a3:2e:f3:6a:7a:a2:d8: c6:7e:d6:9e:0e:03:07:70:be:df:17:cb:c2:98:7b:2b:5c:a2: f0:9d:bd:38:75:88:53:47:e8:3f:4a:48:45:00:38:ff:9e:fa: aa:46:6a:2f:5c:09:f1:38:11:24:bc:5e:c5:9e:fd:3d:30:02: e4:57:17:6f:b8:e5:ec:79:60:f1:6d:26:a5:28:9a:29:b7:70: 39:6c:66:a1:2c:b2:60:71:19:83:99:ee:1a:01:a7:ec:40:c3: 41:6a:74:d0:06:93:de:72:24:44:41:cd:ee:ef:55:84:85:b4: b7:f3:93:04:ff:81:45:36:bb:e3:7d:73:a4:65:ea:9a:0b:c4: 37:e8:4d:12:66:00:ca:aa:57:e6:ff:49:0e:97:42:a1:1f:cc: 9c:7f:b6:74:c9:c1:0f:5a:c0:48:74:d5:47:78:ab:78:91:b2: dd:13:b1:e4:ef:4f:94:e0:80:8b:92:d8:ef:78:12:4c:c3:9a: 6f:81:e6:1f:cf:06:68:f2:c2:17:a6:b3:3e:c7:17:46:f6:75: 78:49:d5:bc -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9IwKtIld99S21NxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkyNDE5MDE1MVoXDTI2MTIyMzIwMDE1MVowLzEtMCsGA1UEAxMk Yzc4YjYyZWItNWMxMC00MmQ3LWE3OGYtZjEwODkwMjM1MjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRCPQKE6P+zhZXrbuZvqBVY32jrwKNUedFvY 9EEemyJcDz8bFGMkolMDMNS8ENlwuETQUdruZgMF6w5lBVFKNv5vNPBMV23uQihD 4uYzk0iFLfdMzxhnpTAPolu6J8dLkDpgikxwWbsKinSDLCEDJCebNISVI5NOQSrF 6q98bier9tYUfl4qVoSkqpGAOv8KDUgzcoyy7ZcF/JfQx245HMcqqyQplj50gA74 P3acRhmctQoxRZyAPWZTDKRJj6eM3tgQFzGzzsT/6eYDEn8g8SorstedYeqbTK2l XpRF2SSu1Qbd2DcyHSBKn5K5SspGk/+ixUz38EcchwkGCA4THwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDp4Igv8BJzyBQKZ24xSGUvfOPXRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2M5Mzk0OTAtOGFjYy0z NzJhLTgyMmEtYWEyZWM5MmFiNTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCrEwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAkDqz87ioIMhKrhnLlMLeYBd6nxz2bxjaObk00y7WNk+1mZosexM6k2Hn qriLrUqjLvNqeqLYxn7Wng4DB3C+3xfLwph7K1yi8J29OHWIU0foP0pIRQA4/576 qkZqL1wJ8TgRJLxexZ79PTAC5FcXb7jl7Hlg8W0mpSiaKbdwOWxmoSyyYHEZg5nu GgGn7EDDQWp00AaT3nIkREHN7u9VhIW0t/OTBP+BRTa7431zpGXqmgvEN+hNEmYA yqpX5v9JDpdCoR/MnH+2dMnBD1rASHTVR3ireJGy3ROx5O9PlOCAi5LY73gSTMOa b4HmH88GaPLCF6azPscXRvZ1eEnVvA== -----END CERTIFICATE-----Generated at Sat Oct 10 22:48:09 2026 by rpki-client