$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/432f0e3d-ed51-3a43-b719-b40fa3217e97.roa File: 432f0e3d-ed51-3a43-b719-b40fa3217e97.roa (raw, json) Hash identifier: 6pomNikQ7gbagaauDYB6b5ZZXBrPxT5IwT2QFpl7U90= Subject key identifier: 61:45:55:34:EF:B4:9D:4D:EB:12:46:A1:8B:E4:CF:56:74:08:EF:18 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F067256D63E1A97F39FE4A020 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/432f0e3d-ed51-3a43-b719-b40fa3217e97.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 6167 IP address blocks: 97.146.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:56:d6:3e:1a:97:f3:9f:e4:a0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=1374328d-8bc4-4f20-95f7-903b1250ba47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:59:c9:f4:98:ec:c6:b0:aa:a7:31:b1:04:e6: fc:2a:cc:e9:e8:97:8d:d2:a9:28:85:67:28:f3:24: c4:45:f7:db:dd:8b:ec:b4:19:cb:02:5f:65:37:46: 2f:18:1f:b3:57:b2:e1:99:c1:49:08:95:21:e7:42: 24:b1:c1:67:03:7b:47:51:b3:57:45:8c:e2:5c:2d: 75:2f:e9:f2:ec:bf:78:f8:d6:9d:cb:8f:60:70:73: 63:4e:fa:32:b3:87:33:89:cd:23:ec:03:9a:89:c6: 7f:99:98:5e:86:5a:32:99:d4:0b:a1:91:19:89:21: a0:60:13:2a:4e:3a:6a:d1:14:1d:a9:b5:c9:a6:bc: ba:5a:6c:14:ff:fb:45:df:4b:0e:fb:4a:47:9f:1f: 66:74:d6:26:87:00:99:20:26:15:ab:1b:9b:1e:10: d7:a9:82:e1:c6:90:fa:24:18:5f:fe:bc:92:6c:23: 94:8c:09:a6:41:d4:df:6e:2e:f7:a8:49:54:9a:20: 32:e5:24:f6:80:e4:b0:0a:f5:db:03:00:71:44:1c: 1b:e4:d5:bb:32:9b:78:7a:47:db:d0:3f:79:a7:db: 83:81:e1:16:0d:71:17:75:99:79:64:88:2c:f3:0f: ac:97:44:63:64:8b:1d:1a:0d:3b:36:93:b8:39:c3: 93:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:45:55:34:EF:B4:9D:4D:EB:12:46:A1:8B:E4:CF:56:74:08:EF:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/432f0e3d-ed51-3a43-b719-b40fa3217e97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 97.146.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:7a:1a:d8:89:57:b3:58:05:fb:96:35:a6:82:15:30:29:dd: e9:a5:96:00:29:7c:f2:3e:12:0e:b2:91:99:42:7e:9f:d8:db: 49:0e:fd:ba:4f:a4:22:6d:a0:14:aa:58:57:dc:59:f9:0d:8a: fd:6e:4c:65:73:4c:c5:2e:ec:85:bc:d0:3e:54:57:e4:ff:c2: ef:2f:f6:63:9f:65:9c:49:fa:c7:44:03:89:02:52:80:63:b4: a3:8c:19:9c:ad:7e:53:3e:1b:da:fd:d3:a3:e5:8a:43:60:82: f2:39:1f:02:6c:e5:ed:9a:e7:07:92:af:57:17:4e:88:c6:1c: fa:a9:41:56:f2:7c:43:0d:ce:74:cf:77:71:52:09:65:2c:91: 27:6d:0a:95:4c:b8:85:d1:39:8b:ee:eb:d8:f4:aa:5a:08:69: 55:bf:c7:87:cd:a6:35:e0:c1:f1:35:8d:44:bb:ef:63:69:93: 06:af:f9:7c:4c:d0:c9:df:bc:2e:11:a5:fd:b0:54:67:38:1a: 18:f7:7c:59:80:c2:7a:a1:75:2d:a8:19:ba:a4:90:37:85:a6: 50:fb:81:c0:7a:d6:92:81:e0:c4:30:4c:7f:c8:59:e5:b1:61: ad:4c:d6:ce:21:9d:05:36:a7:32:e4:85:ad:d2:56:00:3c:86: cf:12:2b:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GclbWPhqX85/koCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk MTM3NDMyOGQtOGJjNC00ZjIwLTk1ZjctOTAzYjEyNTBiYTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1nJ9JjsxrCqpzGxBOb8Kszp6JeN0qkohWco 8yTERffb3YvstBnLAl9lN0YvGB+zV7LhmcFJCJUh50IkscFnA3tHUbNXRYziXC11 L+ny7L94+Nady49gcHNjTvoys4czic0j7AOaicZ/mZhehloymdQLoZEZiSGgYBMq Tjpq0RQdqbXJpry6WmwU//tF30sO+0pHnx9mdNYmhwCZICYVqxubHhDXqYLhxpD6 JBhf/rySbCOUjAmmQdTfbi73qElUmiAy5ST2gOSwCvXbAwBxRBwb5NW7Mpt4ekfb 0D95p9uDgeEWDXEXdZl5ZIgs8w+sl0RjZIsdGg07NpO4OcOTzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFFVTTvtJ1N6xJGoYvkz1Z0CO8YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDMyZjBlM2QtZWQ1MS0z YTQzLWI3MTktYjQwZmEzMjE3ZTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHYZKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACt6GtiJV7NYBfuWNaaCFTAp3emllgApfPI+Eg6ykZlCfp/Y20kO/bpP pCJtoBSqWFfcWfkNiv1uTGVzTMUu7IW80D5UV+T/wu8v9mOfZZxJ+sdEA4kCUoBj tKOMGZytflM+G9r906PlikNggvI5HwJs5e2a5weSr1cXTojGHPqpQVbyfEMNznTP d3FSCWUskSdtCpVMuIXROYvu69j0qloIaVW/x4fNpjXgwfE1jUS772Npkwav+XxM 0MnfvC4Rpf2wVGc4Ghj3fFmAwnqhdS2oGbqkkDeFplD7gcB61pKB4MQwTH/IWeWx Ya1M1s4hnQU2pzLkha3SVgA8hs8SK4Y= -----END CERTIFICATE-----Generated at Sun Sep 27 01:00:14 2026 by rpki-client