$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70db925b-72c6-31de-bede-8dfe1846dad0.roa File: 70db925b-72c6-31de-bede-8dfe1846dad0.roa (raw, json) Hash identifier: +ic8N9xz/dVA7tBUlWPWYYwYx4aZzcWk7OV5/xG1RuA= Subject key identifier: F4:BD:C7:A5:9B:15:05:40:13:B0:0B:8E:1C:94:DD:FF:58:92:48:F8 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D747003B3EB55F7F128406380 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70db925b-72c6-31de-bede-8dfe1846dad0.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 701 IP address blocks: 100.4.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:70:03:b3:eb:55:f7:f1:28:40:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=2414999f-3b97-442a-a5ea-fe19d5a9069f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fb:51:f1:2d:f8:52:ae:f0:db:74:82:13:90: bf:ec:b0:ad:00:c5:50:51:ae:0c:82:0a:89:e9:a8: 92:f1:e8:7f:e1:ea:58:ad:f8:de:a5:c9:b2:6f:b1: a6:3c:68:66:23:3d:7d:95:19:cc:f9:1e:32:b0:87: 7e:9e:54:96:03:b1:09:61:9e:7b:e2:1a:87:4e:a8: 11:f0:d2:90:79:d5:fe:6d:13:62:1e:7a:2a:3e:d1: 81:07:09:1d:ad:c8:82:01:d5:64:35:30:43:c5:54: 9e:63:72:3d:d4:86:ff:56:9a:50:0f:91:0c:ce:02: 7b:8a:5c:78:cb:3f:f4:10:45:ec:36:b6:2b:99:5f: 1f:0a:5a:1b:cf:5d:f0:25:2a:5c:f2:55:f2:b0:49: 1a:b8:e4:4c:27:e9:6b:f7:f5:be:84:65:ee:9c:51: 34:f8:b7:48:bc:4b:4b:52:21:72:19:50:53:fc:80: 3f:2c:16:a6:b0:39:79:c5:37:18:71:eb:91:b0:91: e7:dd:1c:b7:2c:a2:ed:1f:4e:66:bc:45:79:54:39: e9:76:c4:b5:e2:43:3d:cf:d2:ae:b8:ae:d7:11:29: f2:d5:e7:1f:68:b6:44:37:23:8f:c8:1c:6f:8f:24: a3:d8:98:7d:b6:d2:65:ec:51:f1:39:a6:99:21:73: d3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BD:C7:A5:9B:15:05:40:13:B0:0B:8E:1C:94:DD:FF:58:92:48:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/70db925b-72c6-31de-bede-8dfe1846dad0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 100.4.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:a2:e2:00:83:37:48:5d:41:21:7a:b9:ba:9c:e7:1a:40:83: 53:27:60:b9:0f:3f:38:4b:b8:a9:20:d5:24:e1:48:0b:91:8c: aa:56:a5:26:27:79:d6:07:10:b0:d8:62:9b:28:d0:11:9b:11: c7:dd:2d:6c:b2:c7:60:f1:91:53:7e:32:8d:06:50:60:c3:e6: 36:63:20:62:54:f2:92:7a:a1:7b:f1:6c:eb:4f:74:77:48:95: a6:0e:84:2a:04:ad:51:42:0d:b8:24:e9:20:d0:e5:93:db:61: c4:c4:12:66:c2:7c:92:22:d5:d5:68:60:12:9b:b2:f5:49:08: 2e:a1:02:df:db:33:a0:bf:0c:9a:01:1c:73:00:fc:d9:fe:60: f9:6e:41:c1:05:28:be:38:df:59:ce:b6:9d:f4:79:3b:36:a1: 2a:98:4e:7f:e8:7c:9d:64:aa:28:52:84:c2:f0:f4:8f:03:96: 8b:e4:cb:2f:d8:d0:76:08:9f:2d:6f:3a:a5:0f:bf:3c:02:6d: 41:f9:4a:52:0d:13:4c:55:a8:37:b3:3c:77:d3:b0:b7:0a:a1: cb:b4:3a:bb:dd:d6:c8:36:65:57:05:98:b3:d3:53:53:b7:4c: e0:50:c3:41:12:17:59:c5:9e:34:30:6e:82:31:ae:52:5a:0b: 74:bf:36:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10cAOz61X38ShAY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk MjQxNDk5OWYtM2I5Ny00NDJhLWE1ZWEtZmUxOWQ1YTkwNjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/tR8S34Uq7w23SCE5C/7LCtAMVQUa4MggqJ 6aiS8eh/4epYrfjepcmyb7GmPGhmIz19lRnM+R4ysId+nlSWA7EJYZ574hqHTqgR 8NKQedX+bRNiHnoqPtGBBwkdrciCAdVkNTBDxVSeY3I91Ib/VppQD5EMzgJ7ilx4 yz/0EEXsNrYrmV8fClobz13wJSpc8lXysEkauORMJ+lr9/W+hGXunFE0+LdIvEtL UiFyGVBT/IA/LBamsDl5xTcYceuRsJHn3Ry3LKLtH05mvEV5VDnpdsS14kM9z9Ku uK7XESny1ecfaLZENyOPyBxvjySj2Jh9ttJl7FHxOaaZIXPTzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPS9x6WbFQVAE7ALjhyU3f9Ykkj4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzBkYjkyNWItNzJjNi0z MWRlLWJlZGUtOGRmZTE4NDZkYWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHZASAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFii4gCDN0hdQSF6ubqc5xpAg1MnYLkPPzhLuKkg1SThSAuRjKpWpSYn edYHELDYYpso0BGbEcfdLWyyx2DxkVN+Mo0GUGDD5jZjIGJU8pJ6oXvxbOtPdHdI laYOhCoErVFCDbgk6SDQ5ZPbYcTEEmbCfJIi1dVoYBKbsvVJCC6hAt/bM6C/DJoB HHMA/Nn+YPluQcEFKL4431nOtp30eTs2oSqYTn/ofJ1kqihShMLw9I8Dlovkyy/Y 0HYIny1vOqUPvzwCbUH5SlINE0xVqDezPHfTsLcKocu0Orvd1sg2ZVcFmLPTU1O3 TOBQw0ESF1nFnjQwboIxrlJaC3S/Nho= -----END CERTIFICATE-----Generated at Fri Apr 17 16:25:08 2026 by rpki-client