$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3ec3111-595e-378e-a332-2caa25072fb0.roa File: d3ec3111-595e-378e-a332-2caa25072fb0.roa (raw, json) Hash identifier: bvDy53nmubYS8Vp+RzFJmj3M8aIdduCOU28qlGlpOg0= Subject key identifier: 2A:C3:C9:4D:F4:75:43:A2:C9:31:4E:EB:2F:38:48:3A:F0:34:41:7D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584E9D4A9B073982805D6E0C0480 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3ec3111-595e-378e-a332-2caa25072fb0.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 701 IP address blocks: 71.161.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:9b:07:39:82:80:5d:6e:0c:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=6452c325-7475-4c75-8609-ea37a9f2b527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e1:c9:18:cd:90:c1:6e:1b:89:29:f4:b7:2d: 77:9c:63:60:42:32:fe:f6:24:92:09:47:25:90:d6: 01:56:3e:d8:f9:8d:64:51:b4:38:5f:56:1c:26:62: 1a:03:32:2d:3b:c8:54:4a:e8:e6:8f:8c:3f:26:63: 52:b4:9c:52:e5:1d:96:97:d9:a1:7a:3d:52:3a:23: 95:a7:52:9a:29:74:d9:77:57:5c:60:2b:98:07:cb: 75:98:53:d6:be:fb:cf:94:d1:b1:9f:62:82:d7:7c: 6d:be:ee:44:4f:f2:34:77:81:38:00:0c:e7:5e:aa: 24:dd:ee:dd:e8:46:cb:42:39:b5:8c:6a:c0:e3:60: cb:ee:3a:08:a9:36:72:e6:a0:7b:cd:13:8e:d9:d2: 1e:11:90:40:2f:c1:94:a8:b6:62:bc:3d:a5:f1:dc: 4e:a8:12:5d:80:f2:a9:bd:4c:3b:4e:3e:ec:5e:fd: 0d:86:47:66:c8:1e:69:15:e5:77:2d:05:fb:60:81: 8a:88:25:aa:cc:f6:6f:48:53:b8:a3:eb:ea:72:a1: 53:8f:ec:75:3d:df:52:17:ae:63:fb:e3:c2:53:6b: f3:2f:4c:9f:51:01:e9:0d:e9:bf:e5:5f:32:5c:f7: ed:76:48:5e:0e:f9:6d:d6:48:ef:83:38:6c:c2:58: c9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C3:C9:4D:F4:75:43:A2:C9:31:4E:EB:2F:38:48:3A:F0:34:41:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d3ec3111-595e-378e-a332-2caa25072fb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.161.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:b5:1c:dd:58:64:fd:72:e0:2a:c3:b5:c6:a8:02:68:36:a9: 61:66:4b:93:80:f8:c5:99:45:28:2f:ad:ae:bb:a4:48:c2:b2: 19:38:b0:ca:ff:5d:ee:29:21:28:23:9c:6e:46:65:57:7c:40: a3:81:92:fa:59:23:68:a5:a0:ed:bc:23:c9:a0:66:8f:0c:67: ee:02:0f:9b:8e:46:24:43:6e:de:b9:6c:0b:21:bb:6c:10:00: f5:f5:b1:8d:aa:fd:a3:4d:18:cf:2b:2b:e5:1a:e5:fb:7d:93: a9:1f:39:2b:fe:3a:e5:66:ae:2a:23:32:a9:49:c5:ed:9f:ec: 54:0e:e1:93:2f:61:93:49:2d:f3:9c:79:a9:28:fc:78:31:4d: f4:be:e0:ec:41:65:b8:cc:34:e9:ac:af:93:15:a2:38:67:a9: e2:80:ce:5f:cd:16:4b:22:80:67:6e:f7:8d:27:7b:f9:20:aa: fa:0e:d7:15:5d:67:20:7d:49:1b:25:cf:ef:df:5f:68:c6:03: de:05:8f:11:e9:61:0f:ef:b7:2c:8d:67:d6:49:9e:7c:4f:2f: 9b:d9:19:e3:35:75:4f:1a:78:db:f3:61:a4:a7:c8:cc:6b:3a: 33:f3:d5:15:bd:19:d3:1b:42:b6:22:af:97:10:69:e5:14:3c: 71:43:3d:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSpsHOYKAXW4MBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk NjQ1MmMzMjUtNzQ3NS00Yzc1LTg2MDktZWEzN2E5ZjJiNTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeHJGM2QwW4biSn0ty13nGNgQjL+9iSSCUcl kNYBVj7Y+Y1kUbQ4X1YcJmIaAzItO8hUSujmj4w/JmNStJxS5R2Wl9mhej1SOiOV p1KaKXTZd1dcYCuYB8t1mFPWvvvPlNGxn2KC13xtvu5ET/I0d4E4AAznXqok3e7d 6EbLQjm1jGrA42DL7joIqTZy5qB7zROO2dIeEZBAL8GUqLZivD2l8dxOqBJdgPKp vUw7Tj7sXv0NhkdmyB5pFeV3LQX7YIGKiCWqzPZvSFO4o+vqcqFTj+x1Pd9SF65j ++PCU2vzL0yfUQHpDem/5V8yXPftdkheDvlt1kjvgzhswljJpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrDyU30dUOiyTFO6y84SDrwNEF9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDNlYzMxMTEtNTk1ZS0z NzhlLWEzMzItMmNhYTI1MDcyZmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGR6GAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIS1HN1YZP1y4CrDtcaoAmg2qWFmS5OA+MWZRSgvra67pEjCshk4sMr/ Xe4pISgjnG5GZVd8QKOBkvpZI2iloO28I8mgZo8MZ+4CD5uORiRDbt65bAshu2wQ APX1sY2q/aNNGM8rK+Ua5ft9k6kfOSv+OuVmriojMqlJxe2f7FQO4ZMvYZNJLfOc eako/HgxTfS+4OxBZbjMNOmsr5MVojhnqeKAzl/NFksigGdu940ne/kgqvoO1xVd ZyB9SRslz+/fX2jGA94FjxHpYQ/vtyyNZ9ZJnnxPL5vZGeM1dU8aeNvzYaSnyMxr OjPz1RW9GdMbQrYir5cQaeUUPHFDPXI= -----END CERTIFICATE-----Generated at Wed Jul 29 08:32:32 2026 by rpki-client