$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c375b4a-1d77-353b-acd5-11245267be20.roa File: 1c375b4a-1d77-353b-acd5-11245267be20.roa (raw, json) Hash identifier: xZVG6AdZRk9TJ1lS7uzY8WIJzzVazL+LxVeYH3NPX7c= Subject key identifier: 9D:DD:50:5E:EE:A2:BB:3D:00:57:FA:96:47:00:72:BA:AA:EA:B9:13 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D6C0FCDC8419B32786BCE5880 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c375b4a-1d77-353b-acd5-11245267be20.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 701 IP address blocks: 71.247.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:cd:c8:41:9b:32:78:6b:ce:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=4a3f4213-fa22-426b-9d87-43ecb9411047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:af:ad:17:c5:07:41:3d:9e:f9:8a:d0:f3:1b: ec:63:9b:3c:ae:ce:f1:2d:44:25:88:22:4b:b3:18: 0f:5f:55:20:0e:f7:0e:1c:ba:d2:a2:fe:6a:b2:dc: 01:31:a8:29:89:45:d8:99:5c:c3:06:19:46:a8:2e: 69:0e:7a:7e:c1:47:64:50:b6:10:ba:5e:f2:33:b7: 60:a4:de:e3:df:ac:a6:46:35:65:04:6b:ec:07:6b: 88:03:25:98:88:63:cd:81:1b:1f:2f:d1:6f:b2:01: e1:6b:8a:11:63:43:22:b4:42:a8:65:ad:e7:6c:6e: 9a:c5:0d:c4:8c:10:f6:a4:2f:58:f6:8e:f2:df:7a: 3e:50:71:fe:a6:f7:86:97:82:c5:b9:19:18:13:ed: b4:f1:fc:3b:85:b4:b9:76:51:42:e3:f6:41:b4:f9: 9e:61:38:a3:9d:46:8e:c9:1f:97:3c:8c:13:12:97: 0a:03:66:5d:fe:6e:0a:9f:75:0d:03:b9:b4:56:82: 2f:37:8b:75:1b:d0:9a:f3:ff:00:a4:2a:52:07:3d: af:83:4a:cd:23:83:d9:7e:37:fd:e1:40:7b:3c:f1: 1f:c7:0d:d5:f3:33:52:ea:b4:25:a7:0c:40:6e:33: e3:61:fc:5c:22:06:5d:3b:36:c1:09:14:e2:92:55: f9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:DD:50:5E:EE:A2:BB:3D:00:57:FA:96:47:00:72:BA:AA:EA:B9:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1c375b4a-1d77-353b-acd5-11245267be20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.247.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:1a:6c:97:33:f9:27:58:0d:1e:a9:f7:ff:eb:e5:23:70:5e: 9d:69:2f:c7:83:10:b9:db:50:75:b4:08:17:ba:65:24:db:eb: ac:5b:1b:00:b4:97:6e:27:c9:01:18:df:3a:1e:a4:63:21:b0: 82:c6:8b:03:70:e9:a4:77:4f:31:9c:0f:74:0d:0f:20:fe:17: 17:9e:8b:e9:87:28:89:37:0e:03:ad:5b:b9:12:d0:b0:7b:63: 73:17:25:1c:d6:27:a9:d0:6a:03:55:a1:f6:65:1a:66:00:c2: f8:b5:36:61:16:15:52:29:a5:fb:14:6d:04:d9:e9:50:7e:82: 2a:fa:b1:51:00:50:47:2e:04:0a:36:8b:fb:5d:9b:12:4f:0b: 43:42:48:77:10:c1:dd:42:23:00:d1:61:82:44:48:a2:1a:dd: ef:9a:d6:b8:19:7c:01:e0:e8:a9:62:2a:3c:17:4a:ce:61:5d: a2:5e:77:55:b3:1d:89:20:46:d2:00:e2:36:09:fe:83:e8:da: f7:c8:89:2b:d0:23:c1:ed:5d:7b:55:a0:0e:18:f6:79:33:b2: d2:fa:23:cb:37:8d:fb:a2:86:5a:80:83:7a:be:32:f1:f1:29: c7:36:f3:fd:c5:71:0d:21:3f:e6:6f:fc:59:06:da:e6:be:5c: ac:b6:5e:e8 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1sD83IQZsyeGvOWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk NGEzZjQyMTMtZmEyMi00MjZiLTlkODctNDNlY2I5NDExMDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAka+tF8UHQT2e+YrQ8xvsY5s8rs7xLUQliCJL sxgPX1UgDvcOHLrSov5qstwBMagpiUXYmVzDBhlGqC5pDnp+wUdkULYQul7yM7dg pN7j36ymRjVlBGvsB2uIAyWYiGPNgRsfL9FvsgHha4oRY0MitEKoZa3nbG6axQ3E jBD2pC9Y9o7y33o+UHH+pveGl4LFuRkYE+208fw7hbS5dlFC4/ZBtPmeYTijnUaO yR+XPIwTEpcKA2Zd/m4Kn3UNA7m0VoIvN4t1G9Ca8/8ApCpSBz2vg0rNI4PZfjf9 4UB7PPEfxw3V8zNS6rQlpwxAbjPjYfxcIgZdOzbBCRTiklX5VwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJ3dUF7uors9AFf6lkcAcrqq6rkTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWMzNzViNGEtMWQ3Ny0z NTNiLWFjZDUtMTEyNDUyNjdiZTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAR/cwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAAhpslzP5J1gNHqn3/+vlI3BenWkvx4MQudtQdbQIF7plJNvrrFsbALSX bifJARjfOh6kYyGwgsaLA3DppHdPMZwPdA0PIP4XF56L6YcoiTcOA61buRLQsHtj cxclHNYnqdBqA1Wh9mUaZgDC+LU2YRYVUiml+xRtBNnpUH6CKvqxUQBQRy4ECjaL +12bEk8LQ0JIdxDB3UIjANFhgkRIohrd75rWuBl8AeDoqWIqPBdKzmFdol53VbMd iSBG0gDiNgn+g+ja98iJK9Ajwe1de1WgDhj2eTOy0vojyzeN+6KGWoCDer4y8fEp xzbz/cVxDSE/5m/8WQba5r5crLZe6A== -----END CERTIFICATE-----Generated at Fri Apr 17 19:29:17 2026 by rpki-client