$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/436b970c-6176-36fc-9f8c-5b27bf3732f5.roa File: 436b970c-6176-36fc-9f8c-5b27bf3732f5.roa (raw, json) Hash identifier: dsLPQ3dLah6N53419Z7mTdl6YDnm4ZydJ+naJPz0/xw= Subject key identifier: 23:B4:EE:B8:8D:D5:82:AA:24:83:FA:25:50:4E:BE:D1:E7:C8:AF:A0 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D746FDFB39E573B2AA22D4C00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/436b970c-6176-36fc-9f8c-5b27bf3732f5.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 701 IP address blocks: 71.245.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:df:b3:9e:57:3b:2a:a2:2d:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=4398e698-d2eb-482d-8c3d-52b58a5d971d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:57:42:96:6c:15:70:73:09:ad:74:8a:a6:a5: 40:3b:17:ed:9a:33:bd:02:ce:e5:12:5c:36:b9:b7: 1c:d7:07:97:fe:69:54:69:39:6f:2d:e0:f0:76:da: 53:47:a0:1f:b2:86:bb:71:46:23:3c:92:b4:7e:bb: 9f:93:be:fc:65:40:1e:bd:aa:fa:55:cf:ce:3c:86: b7:a3:04:cc:c1:08:ca:42:d4:bb:40:a8:68:c4:9b: b1:e9:cf:31:32:d3:38:84:34:19:bf:04:52:6a:9b: a6:fc:0b:47:3e:66:ae:e6:62:58:75:13:14:41:9a: c5:41:60:c4:db:6f:01:f5:ff:75:55:49:51:ee:c0: 25:9c:87:10:a4:35:c3:36:62:b9:fc:ec:80:83:89: 77:b0:5b:c1:ba:e0:6e:3d:3d:56:f4:52:ad:3a:d1: 7b:8e:4b:b3:8b:9f:41:c1:95:cc:b3:6c:a5:88:b1: 70:17:58:ef:8e:f0:4a:07:75:64:2e:5c:91:2d:30: aa:99:3d:62:f3:a9:7a:86:5d:5a:93:5f:c8:77:bd: 92:e9:b4:a4:a7:b1:b9:b6:af:bd:5f:41:da:65:81: ac:8c:16:5f:a1:ec:fd:46:63:ee:5a:e6:95:3f:6c: 51:9a:77:cf:64:da:00:bc:0c:77:45:a3:c9:ad:ff: 60:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B4:EE:B8:8D:D5:82:AA:24:83:FA:25:50:4E:BE:D1:E7:C8:AF:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/436b970c-6176-36fc-9f8c-5b27bf3732f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.245.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:07:f2:01:7a:2e:79:77:f0:b5:56:fe:0f:41:71:e5:28:e3: d1:85:27:5a:e9:33:c3:a9:61:d3:a4:d8:c4:09:6a:40:c5:c2: 21:b1:00:68:d7:1c:2d:2f:40:8f:09:1a:34:64:68:9d:21:4e: 38:ea:61:da:c9:3d:fd:ee:1d:0d:0f:31:2e:84:e0:11:4f:b9: ae:13:99:8c:3c:86:9c:ac:b8:90:5e:e7:c0:19:9e:71:7b:35: df:c1:5f:3f:2d:35:5a:48:e8:96:da:37:e6:4e:e4:d8:0d:38: 79:72:df:c0:1e:0e:88:81:00:a0:3a:09:42:04:82:ba:34:a1: 3d:60:33:c1:40:63:72:af:48:93:6f:85:6f:49:8b:a4:5d:2a: 5f:fe:53:89:b6:77:1d:c1:49:4d:16:4f:ab:68:15:f9:a0:b7: 3a:5d:48:ad:df:79:a7:55:b4:16:23:33:d4:90:9a:65:89:0c: 49:54:82:5f:28:ca:1c:8d:8f:3f:a0:5d:0b:51:d9:45:f2:4c: 08:e0:b6:72:2a:a0:42:46:c8:bf:d1:ef:27:9f:dd:d3:3a:8b: 03:20:03:cd:87:94:40:ba:b4:74:d3:cc:52:d7:b0:e6:bb:b6: bc:27:5f:cb:77:73:37:43:62:c6:5c:ff:56:e9:38:95:4e:8f: 9f:28:b0:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b9+znlc7KqItTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk NDM5OGU2OTgtZDJlYi00ODJkLThjM2QtNTJiNThhNWQ5NzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlldClmwVcHMJrXSKpqVAOxftmjO9As7lElw2 ubcc1weX/mlUaTlvLeDwdtpTR6Afsoa7cUYjPJK0frufk778ZUAevar6Vc/OPIa3 owTMwQjKQtS7QKhoxJux6c8xMtM4hDQZvwRSapum/AtHPmau5mJYdRMUQZrFQWDE 228B9f91VUlR7sAlnIcQpDXDNmK5/OyAg4l3sFvBuuBuPT1W9FKtOtF7jkuzi59B wZXMs2yliLFwF1jvjvBKB3VkLlyRLTCqmT1i86l6hl1ak1/Id72S6bSkp7G5tq+9 X0HaZYGsjBZfoez9RmPuWuaVP2xRmnfPZNoAvAx3RaPJrf9gxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCO07riN1YKqJIP6JVBOvtHnyK+gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDM2Yjk3MGMtNjE3Ni0z NmZjLTlmOGMtNWIyN2JmMzczMmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFR/WAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4H8gF6Lnl38LVW/g9BceUo49GFJ1rpM8OpYdOk2MQJakDFwiGxAGjX HC0vQI8JGjRkaJ0hTjjqYdrJPf3uHQ0PMS6E4BFPua4TmYw8hpysuJBe58AZnnF7 Nd/BXz8tNVpI6JbaN+ZO5NgNOHly38AeDoiBAKA6CUIEgro0oT1gM8FAY3KvSJNv hW9Ji6RdKl/+U4m2dx3BSU0WT6toFfmgtzpdSK3feadVtBYjM9SQmmWJDElUgl8o yhyNjz+gXQtR2UXyTAjgtnIqoEJGyL/R7yef3dM6iwMgA82HlEC6tHTTzFLXsOa7 trwnX8t3czdDYsZc/1bpOJVOj58osPk= -----END CERTIFICATE-----Generated at Fri Apr 17 17:25:36 2026 by rpki-client