$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd309c0d-f9f9-3585-8097-d2ee8ea8bc04.roa File: bd309c0d-f9f9-3585-8097-d2ee8ea8bc04.roa (raw, json) Hash identifier: Ff/0eW8RfV6Pl2GNhQ9K5UwHaW5Dd1xMmgPxmbjk4LE= Subject key identifier: 5B:9A:7B:2D:58:06:21:4E:0D:EE:56:3A:E4:C2:FE:75:F5:1A:9D:5C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F19FCF4D2D2E7FB9E1461F100 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd309c0d-f9f9-3585-8097-d2ee8ea8bc04.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 6167 IP address blocks: 97.168.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:f4:d2:d2:e7:fb:9e:14:61:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=a5e29bb4-72ba-430f-ac75-f130002a4238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:db:74:73:ad:11:61:fe:cc:ba:cd:fb:e3:7a: a0:cd:96:0b:7c:6f:26:0e:e4:2c:84:4b:76:7d:8b: 1d:e2:d3:07:a3:d1:ce:99:80:67:9a:25:63:0d:24: 84:a6:1b:31:32:44:af:66:01:c8:cc:73:ed:be:50: 80:bb:4e:b4:12:b2:9a:81:72:bf:40:f9:6d:be:96: 4f:c1:87:20:f0:0f:8c:47:b5:6f:99:ef:6f:2c:5f: 39:94:09:cc:dc:28:89:f2:f0:0f:15:f1:14:81:db: 90:ee:8f:9a:ed:0b:8b:7c:e4:fe:9d:8f:c6:8e:20: 06:16:a1:e4:a4:85:4e:c3:79:dd:05:66:8d:51:fb: f7:58:b3:a8:69:70:17:d7:86:49:bf:48:79:28:a3: da:f6:a0:30:1d:da:ee:95:66:38:0f:7a:16:4a:dc: 7a:b4:fb:36:f2:b2:f1:4b:21:7f:18:12:80:89:d6: 1c:8b:3d:a6:71:07:fd:6b:a7:f5:26:39:05:d3:a1: 19:21:bc:cd:80:5f:08:b2:0e:f9:2a:e0:9e:e8:18: 6e:88:08:01:a6:e7:e5:83:e2:72:59:c8:a5:6c:24: 5d:1e:19:49:92:17:a4:78:cb:b3:f4:6c:6d:bc:14: 1d:e0:4f:5c:70:67:c4:3b:a6:6f:16:3d:6a:ce:6b: 0b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9A:7B:2D:58:06:21:4E:0D:EE:56:3A:E4:C2:FE:75:F5:1A:9D:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd309c0d-f9f9-3585-8097-d2ee8ea8bc04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 97.168.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:38:1c:95:a5:fb:91:2a:23:ee:6e:bd:88:da:18:80:04:12: 7f:50:20:9f:22:22:16:3b:06:4a:d0:93:ec:68:0a:71:07:8c: 84:75:f7:70:d2:77:64:62:ea:8c:3d:a5:13:9e:97:f8:e4:4b: 8a:4a:85:ee:6c:13:65:7a:33:e3:99:be:ae:39:0c:5e:47:78: 2a:0f:b8:ec:42:82:31:67:71:cc:9e:97:f2:e2:da:a4:43:39: c6:ec:90:97:ca:6c:64:5f:3c:83:a8:21:b2:61:ac:52:63:f7: 72:d4:48:8c:50:aa:31:1b:45:cc:f7:ce:72:da:93:35:1c:19: 1d:57:b9:34:13:94:36:a3:bd:ca:09:b7:ed:47:68:53:4a:6f: eb:53:11:b5:d3:50:dd:fb:b4:7d:35:d6:51:5e:78:d9:94:dc: fb:46:26:62:86:b8:57:50:5c:38:49:36:c4:18:97:0f:e4:8a: d7:58:63:2a:a0:6c:f6:ca:ab:ea:cc:c6:dc:97:62:40:dd:52: 98:8b:a7:bc:b3:1b:c0:c8:4c:db:8c:0d:74:9c:4e:5e:71:86: e3:7f:78:0b:2e:77:23:e9:ba:9c:6a:e8:16:0f:22:44:59:64: 36:a0:66:65:68:94:19:c5:10:f3:d9:fc:10:93:df:9c:da:53: c8:f5:9f:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z/PTS0uf7nhRh8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk YTVlMjliYjQtNzJiYS00MzBmLWFjNzUtZjEzMDAwMmE0MjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztt0c60RYf7Mus3743qgzZYLfG8mDuQshEt2 fYsd4tMHo9HOmYBnmiVjDSSEphsxMkSvZgHIzHPtvlCAu060ErKagXK/QPltvpZP wYcg8A+MR7Vvme9vLF85lAnM3CiJ8vAPFfEUgduQ7o+a7QuLfOT+nY/GjiAGFqHk pIVOw3ndBWaNUfv3WLOoaXAX14ZJv0h5KKPa9qAwHdrulWY4D3oWStx6tPs28rLx SyF/GBKAidYciz2mcQf9a6f1JjkF06EZIbzNgF8Isg75KuCe6BhuiAgBpuflg+Jy WcilbCRdHhlJkhekeMuz9GxtvBQd4E9ccGfEO6ZvFj1qzmsLGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuaey1YBiFODe5WOuTC/nX1Gp1cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmQzMDljMGQtZjlmOS0z NTg1LTgwOTctZDJlZThlYThiYzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHYagAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABo4HJWl+5EqI+5uvYjaGIAEEn9QIJ8iIhY7BkrQk+xoCnEHjIR193DS d2Ri6ow9pROel/jkS4pKhe5sE2V6M+OZvq45DF5HeCoPuOxCgjFnccyel/Li2qRD OcbskJfKbGRfPIOoIbJhrFJj93LUSIxQqjEbRcz3znLakzUcGR1XuTQTlDajvcoJ t+1HaFNKb+tTEbXTUN37tH011lFeeNmU3PtGJmKGuFdQXDhJNsQYlw/kitdYYyqg bPbKq+rMxtyXYkDdUpiLp7yzG8DITNuMDXScTl5xhuN/eAsudyPpupxq6BYPIkRZ ZDagZmVolBnFEPPZ/BCT35zaU8j1nxs= -----END CERTIFICATE-----Generated at Sat Sep 26 09:32:37 2026 by rpki-client