$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67af5530-a444-39ba-b2d5-efa0381fe50c.roa File: 67af5530-a444-39ba-b2d5-efa0381fe50c.roa (raw, json) Hash identifier: IwHXwYMPNVdUxYr8M9/ol0TvQdgoh0ZNBcrqtTJR0fE= Subject key identifier: 67:AB:4D:10:0B:59:9A:B7:73:DC:E5:15:9B:89:DD:A2:42:95:E6:8C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F06725641BAFE2F5787038600 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67af5530-a444-39ba-b2d5-efa0381fe50c.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 6167 IP address blocks: 97.138.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:56:41:ba:fe:2f:57:87:03:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=012b4bed-f90b-4fc2-8e1c-bb44977f3adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b3:9f:33:e1:89:41:85:1e:c7:13:83:44:e2: c9:63:e0:78:6a:6f:3d:01:90:19:af:dd:f4:51:25: a6:55:c1:82:dd:6a:ee:68:14:e0:c8:be:fc:33:a1: 73:b1:a9:71:28:57:08:eb:e7:eb:d7:84:3d:89:27: 33:43:9c:bf:d5:e0:d3:61:f4:5e:84:6f:34:d8:e1: fa:7f:24:bd:39:d5:01:89:4e:6e:58:c3:0a:73:2b: 8d:03:86:cf:68:db:19:a5:df:dc:f5:34:5b:0b:97: a0:7c:07:16:16:39:05:03:28:7a:0f:4c:dc:44:1f: c8:fe:d2:ee:c0:6f:e4:38:94:9a:d8:bc:6e:07:96: 30:43:7c:82:70:b2:60:95:87:1a:f0:11:5b:83:ec: e1:15:fb:d0:fd:f7:38:58:55:fa:e3:e0:90:b6:7a: c5:d8:8e:a4:33:36:fc:15:f6:7d:69:bd:cf:62:9f: 11:99:0c:1c:d1:1b:5c:a4:b1:ee:8e:1b:c9:31:27: df:da:af:7a:fc:fb:f5:c4:77:93:10:5d:1a:e7:21: 41:f6:74:2a:12:c0:e1:4d:4d:81:5d:38:37:12:80: 2a:09:dd:0a:ff:64:f6:ad:9f:4c:f1:9b:1a:92:88: aa:b4:0c:7c:29:08:6e:ca:f1:32:bc:ef:df:f9:86: aa:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:AB:4D:10:0B:59:9A:B7:73:DC:E5:15:9B:89:DD:A2:42:95:E6:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/67af5530-a444-39ba-b2d5-efa0381fe50c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 97.138.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:b6:f7:d9:ee:3d:f3:84:91:96:fc:b2:23:8b:14:ec:c1:f2: dd:65:8a:73:77:c2:d6:78:87:31:7e:55:86:68:62:53:97:cf: 8c:29:c5:f0:41:7a:d4:bf:4c:a5:41:17:c4:5b:b4:e0:32:84: 4c:c6:a4:62:51:85:84:12:91:02:30:65:2d:da:c1:44:20:03: d1:4d:ff:13:8f:4c:1b:e4:03:56:4d:da:fc:c0:aa:bc:09:a8: b5:d8:bb:05:d9:04:d3:1a:e9:18:77:61:56:65:2d:b3:5a:49: e6:08:7e:71:d7:38:0a:bc:af:43:98:58:59:6b:f2:16:13:fd: 78:fc:c6:bc:1e:15:c2:e2:5f:33:fa:d0:43:64:7c:44:ea:27: 93:7d:ba:1e:c6:c7:0b:40:6b:e3:ae:fd:56:31:fb:b9:a7:f0: 94:40:fa:e1:31:b9:e0:47:76:8b:57:2e:29:df:15:06:26:dc: 8f:68:ba:22:88:12:6f:56:04:ce:8c:22:c6:6d:ba:34:9c:80: 52:d8:e1:e9:2f:33:bc:96:e2:cc:9e:83:32:30:10:3a:4b:7c: c4:6a:53:fc:c1:fd:c3:20:d2:ae:1d:dd:7a:57:b5:9f:b5:b5: 51:99:bc:2c:10:c3:41:e7:62:80:42:f9:e1:65:96:7f:0a:e2: dd:9d:5b:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GclZBuv4vV4cDhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk MDEyYjRiZWQtZjkwYi00ZmMyLThlMWMtYmI0NDk3N2YzYWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbOfM+GJQYUexxODROLJY+B4am89AZAZr930 USWmVcGC3WruaBTgyL78M6FzsalxKFcI6+fr14Q9iSczQ5y/1eDTYfRehG802OH6 fyS9OdUBiU5uWMMKcyuNA4bPaNsZpd/c9TRbC5egfAcWFjkFAyh6D0zcRB/I/tLu wG/kOJSa2LxuB5YwQ3yCcLJglYca8BFbg+zhFfvQ/fc4WFX64+CQtnrF2I6kMzb8 FfZ9ab3PYp8RmQwc0RtcpLHujhvJMSff2q96/Pv1xHeTEF0a5yFB9nQqEsDhTU2B XTg3EoAqCd0K/2T2rZ9M8ZsakoiqtAx8KQhuyvEyvO/f+YaqwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGerTRALWZq3c9zlFZuJ3aJCleaMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjdhZjU1MzAtYTQ0NC0z OWJhLWIyZDUtZWZhMDM4MWZlNTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYYqgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJO299nuPfOEkZb8siOLFOzB8t1linN3wtZ4hzF+VYZoYlOXz4wpxfBB etS/TKVBF8RbtOAyhEzGpGJRhYQSkQIwZS3awUQgA9FN/xOPTBvkA1ZN2vzAqrwJ qLXYuwXZBNMa6Rh3YVZlLbNaSeYIfnHXOAq8r0OYWFlr8hYT/Xj8xrweFcLiXzP6 0ENkfETqJ5N9uh7GxwtAa+Ou/VYx+7mn8JRA+uExueBHdotXLinfFQYm3I9ouiKI Em9WBM6MIsZtujScgFLY4ekvM7yW4syegzIwEDpLfMRqU/zB/cMg0q4d3XpXtZ+1 tVGZvCwQw0HnYoBC+eFlln8K4t2dW50= -----END CERTIFICATE-----Generated at Mon Sep 28 21:59:32 2026 by rpki-client