$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6c9b89d5-4756-3e12-8acc-1f6a901d97d7.roa File: 6c9b89d5-4756-3e12-8acc-1f6a901d97d7.roa (raw, json) Hash identifier: EVpAurg9/JdoJR40oD5zDFqJpeSh07GMcNrlXSkf29o= Subject key identifier: 02:71:4A:D9:9B:FD:DA:22:C6:50:23:51:AF:AF:B9:4E:D1:62:1D:AC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D6C0FCC3457AD0E24A20530F0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6c9b89d5-4756-3e12-8acc-1f6a901d97d7.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 701 IP address blocks: 71.248.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:cc:34:57:ad:0e:24:a2:05:30:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=aff83100-7f48-457a-8e60-17b2b79dd833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:32:5d:41:41:f6:20:3f:f7:c7:78:7a:96:b8: 4a:9c:dc:17:8b:82:20:2b:a0:52:f5:75:76:47:ae: 5d:bb:fe:af:74:88:7c:bd:f2:ff:12:d0:6f:1d:4b: fe:7a:73:92:dc:49:7d:dc:6d:b5:32:30:65:c6:e9: 0a:7e:a8:e7:7d:d1:75:3c:23:56:95:c1:8c:bf:d6: bc:7f:a5:24:d2:6c:47:27:d1:c2:40:c7:7a:55:86: bc:58:ea:24:35:6b:d1:d0:a6:66:aa:d2:70:87:52: a7:b6:55:7d:68:2c:4a:29:48:61:c7:3c:87:02:de: 46:b2:6c:2b:53:67:da:50:ff:60:b0:ba:00:d5:72: cb:62:42:c4:4d:2d:27:00:59:f9:9a:30:e4:5b:f5: 42:db:eb:73:d8:df:d2:b8:5f:e0:10:6b:3a:12:37: 5c:d2:34:5a:19:6d:c1:ed:66:d7:bf:88:dc:4e:3c: 56:ce:0d:4b:0d:af:a0:c2:f9:75:e3:2f:6a:74:51: 04:6c:47:c9:37:26:00:db:b4:06:31:65:5c:a0:e8: 6d:d0:3a:86:39:1c:33:b1:2e:33:a0:e0:49:ba:bf: 79:18:fd:7f:92:03:d7:75:1a:d2:84:98:46:03:96: b3:e2:e9:06:07:44:3a:2b:7d:78:50:a8:5a:60:df: 18:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:71:4A:D9:9B:FD:DA:22:C6:50:23:51:AF:AF:B9:4E:D1:62:1D:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6c9b89d5-4756-3e12-8acc-1f6a901d97d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.248.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:1e:49:95:d5:11:89:57:8c:eb:d7:85:88:20:d4:61:a9:e1: 57:42:f5:5c:7a:db:31:1d:f1:d7:b1:01:fe:06:8c:2b:10:ca: 95:70:af:62:c9:a2:bc:76:34:a3:c4:dd:d8:b4:5a:74:85:a4: e0:18:f4:b0:f9:fb:6c:46:09:1d:19:51:a3:af:4c:f4:bc:d9: dc:fd:a1:e1:10:c9:69:9d:1e:19:04:0c:ac:12:1d:82:89:24: f4:2c:de:3e:fe:0b:94:b8:cb:92:9a:5c:1e:22:52:38:0c:8b: b8:02:cb:35:68:30:ee:85:75:f0:b0:8e:ce:12:11:63:28:99: 4e:3f:fe:34:d9:d7:dc:44:a0:59:e4:75:75:bc:75:f0:57:af: 4f:41:d5:aa:18:5b:ce:e0:5f:95:8a:2d:31:25:58:5f:e0:b3: 90:0f:80:52:3e:70:0e:2c:f4:c6:44:6c:d0:99:bf:bf:71:26: 52:73:dc:44:94:bb:80:d3:c0:12:46:b4:ce:4a:a4:a1:7f:69: 9e:30:d7:8f:bb:11:27:5a:f6:8a:0d:92:31:58:3c:fe:fa:1b: 59:04:13:99:2e:c0:6b:ea:de:db:d5:cf:4b:13:f6:d2:6c:4d: 11:08:55:22:9c:3e:6f:bf:a4:61:a4:9f:09:20:b3:cf:46:3c: 00:a6:90:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD8w0V60OJKIFMPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk YWZmODMxMDAtN2Y0OC00NTdhLThlNjAtMTdiMmI3OWRkODMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jJdQUH2ID/3x3h6lrhKnNwXi4IgK6BS9XV2 R65du/6vdIh8vfL/EtBvHUv+enOS3El93G21MjBlxukKfqjnfdF1PCNWlcGMv9a8 f6Uk0mxHJ9HCQMd6VYa8WOokNWvR0KZmqtJwh1KntlV9aCxKKUhhxzyHAt5Gsmwr U2faUP9gsLoA1XLLYkLETS0nAFn5mjDkW/VC2+tz2N/SuF/gEGs6Ejdc0jRaGW3B 7WbXv4jcTjxWzg1LDa+gwvl14y9qdFEEbEfJNyYA27QGMWVcoOht0DqGORwzsS4z oOBJur95GP1/kgPXdRrShJhGA5az4ukGB0Q6K314UKhaYN8YhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJxStmb/doixlAjUa+vuU7RYh2sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNmM5Yjg5ZDUtNDc1Ni0z ZTEyLThhY2MtMWY2YTkwMWQ5N2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHR/gAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK0eSZXVEYlXjOvXhYgg1GGp4VdC9Vx62zEd8dexAf4GjCsQypVwr2LJ orx2NKPE3di0WnSFpOAY9LD5+2xGCR0ZUaOvTPS82dz9oeEQyWmdHhkEDKwSHYKJ JPQs3j7+C5S4y5KaXB4iUjgMi7gCyzVoMO6FdfCwjs4SEWMomU4//jTZ19xEoFnk dXW8dfBXr09B1aoYW87gX5WKLTElWF/gs5APgFI+cA4s9MZEbNCZv79xJlJz3ESU u4DTwBJGtM5KpKF/aZ4w14+7ESda9ooNkjFYPP76G1kEE5kuwGvq3tvVz0sT9tJs TREIVSKcPm+/pGGknwkgs89GPACmkI0= -----END CERTIFICATE-----Generated at Fri Apr 17 18:33:18 2026 by rpki-client