$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aaaf6ba2-fd76-3cd9-8542-b3caadd37801.roa File: aaaf6ba2-fd76-3cd9-8542-b3caadd37801.roa (raw, json) Hash identifier: xB0TS9HeQbIBeM6+IaSrhOWVaNiXSK0XDAKxe60xBgc= Subject key identifier: 25:1C:64:5C:7C:B4:6B:94:42:6A:78:05:44:B7:A7:5B:7C:2C:2C:BB Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D6C0FCB935B77105013E46FC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aaaf6ba2-fd76-3cd9-8542-b3caadd37801.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 701 IP address blocks: 71.243.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:cb:93:5b:77:10:50:13:e4:6f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=db44a954-6d65-488c-a59f-6d42437f801f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:17:60:2a:68:a1:0e:a8:f4:13:3f:40:ea:60: 44:3a:ae:b9:5c:fd:60:65:cb:eb:4c:32:fd:b0:6b: 65:71:3e:37:53:b2:13:28:c9:77:c2:d5:47:65:6e: e1:84:a4:9b:45:36:d9:fc:f9:6e:f9:58:8e:75:c1: 4e:f1:fe:2c:aa:90:bd:48:fa:71:63:d2:db:61:10: be:5f:a6:af:43:55:bb:b7:74:dc:7b:42:a4:f6:2c: fc:9a:37:40:ab:d1:48:7b:2c:20:23:96:1b:73:f8: 30:23:15:52:2c:80:20:ba:64:65:8e:27:54:82:36: 17:fd:c3:89:01:19:56:e8:00:ce:b9:0f:b2:92:06: 7f:cd:6d:59:b8:6a:7b:e9:1b:47:0c:50:5d:1a:75: 29:42:b8:bf:73:b8:c8:34:20:1e:21:28:5c:89:32: 3c:61:e8:a1:17:d5:76:0a:bf:f5:8d:a3:47:ed:9c: 06:79:d3:b4:97:4b:72:6a:68:02:99:91:12:f3:92: 65:df:3a:4d:00:91:c1:9d:5e:3d:2e:87:f2:92:b2: 20:d3:00:2e:51:f8:ca:dd:5a:04:f5:7d:79:8a:3c: 28:15:d7:2d:e2:30:cd:74:18:00:c4:fe:91:f8:63: 8d:01:1b:28:38:24:3d:e9:12:45:c7:86:df:71:d5: 19:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:1C:64:5C:7C:B4:6B:94:42:6A:78:05:44:B7:A7:5B:7C:2C:2C:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/aaaf6ba2-fd76-3cd9-8542-b3caadd37801.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.243.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:44:93:dd:b9:89:0b:65:58:6d:c9:a5:13:7e:0d:f8:b1:fb: 43:ac:d2:cd:fa:23:b9:e2:30:5a:a0:fc:42:d0:43:62:da:5a: 25:df:79:cc:d8:a1:63:22:bb:63:e5:39:22:13:99:d8:47:fc: f1:9d:43:42:93:a5:02:ee:f2:28:2f:9d:6d:0f:74:d1:d5:dc: f2:de:a0:13:0b:e7:8f:5a:ad:01:f9:15:c1:c9:54:51:f4:23: a9:95:01:5c:c2:fa:75:8e:fc:dc:e1:46:2b:7b:10:e0:5f:b6: b1:1d:b7:b4:1c:04:80:36:0a:42:d6:fd:f3:fd:61:61:74:0a: 18:f4:4d:e6:0e:4b:05:1f:9d:e8:8a:ee:ff:23:c0:c5:5e:2f: 7b:8d:12:74:81:2a:74:88:22:01:78:7b:5e:94:de:94:db:5d: 2e:aa:7a:52:ed:42:50:e5:04:7c:71:c0:6d:a2:0e:15:ba:44: ea:03:b7:62:06:ea:fa:b9:15:f2:93:60:e8:5f:dd:4a:28:b0: b8:76:b6:f7:fb:b2:21:1e:eb:01:d2:9a:e0:00:8b:18:27:a5: 76:c1:91:d1:63:66:ad:ae:3a:a8:85:96:4d:f9:48:db:7c:c5: 2d:0a:3c:54:42:39:a9:e1:fb:31:2f:28:0b:40:fb:cd:87:53: 10:5b:e6:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD8uTW3cQUBPkb8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk ZGI0NGE5NTQtNmQ2NS00ODhjLWE1OWYtNmQ0MjQzN2Y4MDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghdgKmihDqj0Ez9A6mBEOq65XP1gZcvrTDL9 sGtlcT43U7ITKMl3wtVHZW7hhKSbRTbZ/Plu+ViOdcFO8f4sqpC9SPpxY9LbYRC+ X6avQ1W7t3Tce0Kk9iz8mjdAq9FIeywgI5Ybc/gwIxVSLIAgumRljidUgjYX/cOJ ARlW6ADOuQ+ykgZ/zW1ZuGp76RtHDFBdGnUpQri/c7jINCAeIShciTI8YeihF9V2 Cr/1jaNH7ZwGedO0l0tyamgCmZES85Jl3zpNAJHBnV49LofykrIg0wAuUfjK3VoE 9X15ijwoFdct4jDNdBgAxP6R+GONARsoOCQ96RJFx4bfcdUZDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUcZFx8tGuUQmp4BUS3p1t8LCy7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYWFhZjZiYTItZmQ3Ni0z Y2Q5LTg1NDItYjNjYWFkZDM3ODAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGR/OAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdEk925iQtlWG3JpRN+Dfix+0Os0s36I7niMFqg/ELQQ2LaWiXfeczY oWMiu2PlOSITmdhH/PGdQ0KTpQLu8igvnW0PdNHV3PLeoBML549arQH5FcHJVFH0 I6mVAVzC+nWO/NzhRit7EOBftrEdt7QcBIA2CkLW/fP9YWF0Chj0TeYOSwUfneiK 7v8jwMVeL3uNEnSBKnSIIgF4e16U3pTbXS6qelLtQlDlBHxxwG2iDhW6ROoDt2IG 6vq5FfKTYOhf3UoosLh2tvf7siEe6wHSmuAAixgnpXbBkdFjZq2uOqiFlk35SNt8 xS0KPFRCOanh+zEvKAtA+82HUxBb5is= -----END CERTIFICATE-----Generated at Fri Apr 17 13:24:32 2026 by rpki-client