$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5726073b-00d1-37a6-8d96-29d62635c31e.roa File: 5726073b-00d1-37a6-8d96-29d62635c31e.roa (raw, json) Hash identifier: HOt0GyXyBQZEM3L39ufWBWWqaH3hWd3Z4XUKTbX+2Uc= Subject key identifier: 18:86:B2:EF:B5:80:03:AA:41:80:94:17:66:63:F8:11:DF:BE:25:D1 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F3FAD6D732A25D76DA221AA00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5726073b-00d1-37a6-8d96-29d62635c31e.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 701 IP address blocks: 68.238.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:6d:73:2a:25:d7:6d:a2:21:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=a705e445-8a51-4b28-a873-dbbfaec87de8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:90:11:f0:d3:c7:51:fc:a1:65:3c:f3:dd:b1: ba:81:13:67:0c:f5:0f:cf:e3:80:ad:0d:e9:2e:2b: 01:67:b8:e8:01:22:7b:c7:6c:3f:b2:d2:9c:1a:3b: 42:86:3a:ae:dd:0b:d4:eb:cd:66:30:b3:25:22:3a: 65:22:cd:b1:3a:f3:32:a0:32:84:ca:eb:5b:33:32: f6:e4:51:13:3a:61:6d:b4:c2:3e:ea:1b:13:2d:13: 58:f3:0a:fc:49:7d:8b:b4:6c:d2:1f:82:f8:3f:a0: c2:ca:f7:51:1d:f9:a8:3c:5f:a4:50:0c:f6:3a:49: 44:1e:09:0e:20:ff:c8:8d:4d:16:e8:fa:0c:8c:3b: 71:ed:d7:32:15:8f:e1:e7:c6:8f:d2:77:a2:fc:13: e3:5c:6b:0b:3e:af:82:82:78:50:e9:f4:4c:e4:d1: 19:eb:57:7a:f4:33:f9:99:fa:f7:05:34:9b:f3:c7: 62:e7:a4:eb:58:bc:2b:9a:98:f3:15:27:34:21:bb: 42:a1:98:84:67:3b:0f:0a:fc:0e:95:e8:0e:00:25: 78:97:23:b4:96:ff:cd:6c:54:50:c7:66:e4:70:52: 17:98:d7:d3:57:53:13:9c:2d:a3:ea:c7:8b:f2:63: 5e:6b:0c:2a:a9:2c:78:80:91:89:a4:e6:71:75:79: a9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:86:B2:EF:B5:80:03:AA:41:80:94:17:66:63:F8:11:DF:BE:25:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5726073b-00d1-37a6-8d96-29d62635c31e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 68.238.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:82:06:29:38:8e:b3:1c:ba:a1:c6:fe:f5:43:18:f4:bf:ca: ee:17:f3:fc:28:99:60:45:03:37:11:b6:dd:d6:82:34:0b:ad: 54:0f:09:ba:96:ac:ed:08:82:9c:5d:61:c4:44:d6:9b:f4:fa: 43:61:66:16:c9:b2:e1:a8:70:60:76:f4:00:47:01:6c:51:f9: d4:43:b3:d5:66:09:01:a2:9b:38:8e:63:90:2b:e5:e2:48:ea: e0:cb:fd:96:73:4a:1d:ba:90:a2:c3:67:b8:f7:b6:29:ba:c7: 5f:41:25:78:b5:0c:9b:dd:de:53:ad:f3:20:8b:7f:55:da:6d: 9e:75:73:66:3f:01:36:0d:9e:2e:92:86:29:d4:de:45:dc:fa: f9:a7:77:2e:be:5f:65:9a:88:03:56:5e:c3:b0:41:5d:f6:e9: 8e:bc:b0:fc:7b:37:95:95:db:2f:01:40:b8:b6:3b:1d:29:76: 71:3a:66:00:b6:d6:7a:ac:7f:c1:97:b8:e7:e1:1b:51:41:6c: ab:bc:2a:9f:fa:4f:ec:c4:ac:26:10:42:5b:91:a4:be:8c:98: f5:58:d9:d8:e0:86:72:51:f9:2e:dc:66:73:c2:4f:d7:60:56: 6f:6c:d8:87:d0:0c:b0:a0:9c:74:88:e5:17:9b:34:ed:75:91: 86:7a:00:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rW1zKiXXbaIhqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk YTcwNWU0NDUtOGE1MS00YjI4LWE4NzMtZGJiZmFlYzg3ZGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05AR8NPHUfyhZTzz3bG6gRNnDPUPz+OArQ3p LisBZ7joASJ7x2w/stKcGjtChjqu3QvU681mMLMlIjplIs2xOvMyoDKEyutbMzL2 5FETOmFttMI+6hsTLRNY8wr8SX2LtGzSH4L4P6DCyvdRHfmoPF+kUAz2OklEHgkO IP/IjU0W6PoMjDtx7dcyFY/h58aP0nei/BPjXGsLPq+CgnhQ6fRM5NEZ61d69DP5 mfr3BTSb88di56TrWLwrmpjzFSc0IbtCoZiEZzsPCvwOlegOACV4lyO0lv/NbFRQ x2bkcFIXmNfTV1MTnC2j6seL8mNeawwqqSx4gJGJpOZxdXmpYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBiGsu+1gAOqQYCUF2Zj+BHfviXRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTcyNjA3M2ItMDBkMS0z N2E2LThkOTYtMjlkNjI2MzVjMzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERO5gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2CBik4jrMcuqHG/vVDGPS/yu4X8/womWBFAzcRtt3WgjQLrVQPCbqW rO0IgpxdYcRE1pv0+kNhZhbJsuGocGB29ABHAWxR+dRDs9VmCQGimziOY5Ar5eJI 6uDL/ZZzSh26kKLDZ7j3tim6x19BJXi1DJvd3lOt8yCLf1XabZ51c2Y/ATYNni6S hinU3kXc+vmndy6+X2WaiANWXsOwQV326Y68sPx7N5WV2y8BQLi2Ox0pdnE6ZgC2 1nqsf8GXuOfhG1FBbKu8Kp/6T+zErCYQQluRpL6MmPVY2djghnJR+S7cZnPCT9dg Vm9s2IfQDLCgnHSI5RebNO11kYZ6AIE= -----END CERTIFICATE-----Generated at Mon Oct 5 17:18:12 2026 by rpki-client