$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1b0f8aab-07a8-3e05-9b2f-c6600b871936.roa File: 1b0f8aab-07a8-3e05-9b2f-c6600b871936.roa (raw, json) Hash identifier: VMYlEfzq0ncbFpjE9Zd0KDsMzSken1W23bZijnFI3lE= Subject key identifier: 42:30:EE:D0:D6:B6:3A:81:D5:05:AC:48:0E:77:7B:7C:92:10:C1:BC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D746FE4FDD05488852CDACB80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1b0f8aab-07a8-3e05-9b2f-c6600b871936.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 701 IP address blocks: 173.64.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:e4:fd:d0:54:88:85:2c:da:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=dd194a98-bac8-49d1-b625-a44132631e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d1:bc:cf:06:6b:c1:48:12:a9:d0:00:85:83: c0:3a:dc:43:dd:60:6b:e3:17:f0:48:50:7c:4c:9f: b7:3b:c4:c0:ff:c1:34:00:a0:5e:e9:c1:b4:81:b7: 68:bd:d0:a7:98:a0:f8:74:ac:46:ac:09:ab:a7:cb: 6b:c5:e8:f6:df:4a:78:26:2d:b6:31:7d:f9:45:02: 93:22:55:b7:28:38:b8:97:69:a1:31:f5:fd:08:a5: ee:70:a8:ff:e3:e9:3e:73:ca:71:7c:2c:00:02:18: df:e8:3a:1d:5e:4c:37:93:60:05:44:e3:8b:61:00: 12:04:a5:2f:5a:21:f7:ee:ca:2a:e2:98:81:55:a7: ce:df:5c:40:a6:e5:a5:5d:07:f2:bb:4f:c1:73:15: af:65:f9:51:30:63:ed:dc:11:9b:9a:0d:07:14:bf: ec:f9:04:e3:f3:94:85:e2:c5:6e:56:2a:08:d4:91: 4b:d2:26:9c:21:97:2d:46:85:e5:60:4e:1e:7d:55: 9a:a0:b3:e7:61:e0:61:ca:c9:21:90:82:d5:95:c8: ff:dd:eb:ae:52:81:c4:e6:0d:64:89:35:1d:73:df: be:48:32:f4:f8:58:a0:dc:f4:e0:da:02:d9:eb:a8: 2a:e6:ae:d5:47:71:8c:ed:cd:e2:c2:b8:cc:17:f5: 3b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:30:EE:D0:D6:B6:3A:81:D5:05:AC:48:0E:77:7B:7C:92:10:C1:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1b0f8aab-07a8-3e05-9b2f-c6600b871936.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 173.64.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:c7:cc:44:3a:38:5e:d0:5f:28:b1:cc:cf:04:6b:4d:9c:86: 4f:03:f7:ac:60:66:59:22:c4:e3:87:87:f7:cf:5a:9c:ab:12: 35:e8:61:15:a1:8b:bb:d5:03:80:5b:15:9b:5b:e7:f8:ab:ec: c1:a0:24:e6:15:5a:af:91:60:f9:5b:b8:5d:83:31:90:e3:8a: 8a:be:3d:6a:7b:5e:9a:0f:40:bb:eb:40:87:90:f2:46:61:2a: 42:99:bc:ee:32:58:13:b8:53:e5:56:9c:fc:34:68:3d:79:89: e5:f8:33:ca:1f:76:51:fe:cf:2c:a6:8c:58:1e:34:ac:3b:7d: 7e:78:69:f2:e1:27:24:ad:c2:75:c6:21:6c:d8:80:68:67:3e: a8:70:4e:d2:62:6d:3f:81:9d:5e:b4:ea:88:52:3d:de:c6:79: 66:5a:15:02:b2:32:e9:b7:1d:9b:3d:33:e0:51:2f:32:e0:d2: e8:a2:4c:ac:ec:0d:04:f3:de:a1:f6:ae:00:86:44:44:61:e1: d1:7f:f5:b7:e3:c4:50:84:67:56:e6:fc:d0:c8:b8:da:3c:7e: 83:53:6a:af:e6:99:1c:fc:bb:78:36:1a:f2:72:29:48:cd:3c: d6:bb:3a:2b:0b:7c:3f:0f:f3:23:fb:3c:a4:9f:63:f4:59:e3: 5d:c0:e3:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b+T90FSIhSzay4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk ZGQxOTRhOTgtYmFjOC00OWQxLWI2MjUtYTQ0MTMyNjMxZTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztG8zwZrwUgSqdAAhYPAOtxD3WBr4xfwSFB8 TJ+3O8TA/8E0AKBe6cG0gbdovdCnmKD4dKxGrAmrp8trxej230p4Ji22MX35RQKT IlW3KDi4l2mhMfX9CKXucKj/4+k+c8pxfCwAAhjf6DodXkw3k2AFROOLYQASBKUv WiH37soq4piBVafO31xApuWlXQfyu0/BcxWvZflRMGPt3BGbmg0HFL/s+QTj85SF 4sVuVioI1JFL0iacIZctRoXlYE4efVWaoLPnYeBhyskhkILVlcj/3euuUoHE5g1k iTUdc9++SDL0+Fig3PTg2gLZ66gq5q7VR3GM7c3iwrjMF/U7HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIw7tDWtjqB1QWsSA53e3ySEMG8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWIwZjhhYWItMDdhOC0z ZTA1LTliMmYtYzY2MDBiODcxOTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrUAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPHzEQ6OF7QXyixzM8Ea02chk8D96xgZlkixOOHh/fPWpyrEjXoYRWh i7vVA4BbFZtb5/ir7MGgJOYVWq+RYPlbuF2DMZDjioq+PWp7XpoPQLvrQIeQ8kZh KkKZvO4yWBO4U+VWnPw0aD15ieX4M8ofdlH+zyymjFgeNKw7fX54afLhJyStwnXG IWzYgGhnPqhwTtJibT+BnV606ohSPd7GeWZaFQKyMum3HZs9M+BRLzLg0uiiTKzs DQTz3qH2rgCGRERh4dF/9bfjxFCEZ1bm/NDIuNo8foNTaq/mmRz8u3g2GvJyKUjN PNa7OisLfD8P8yP7PKSfY/RZ413A4yw= -----END CERTIFICATE-----Generated at Fri Apr 17 14:44:02 2026 by rpki-client