$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eba4ae94-ead6-3e99-9ce9-933e47db254e.roa File: eba4ae94-ead6-3e99-9ce9-933e47db254e.roa (raw, json) Hash identifier: nqnz4oXhKyqPPWjw+HBA5/4HkpK2c8lrt0KuJhZ7t1g= Subject key identifier: 1B:D7:F8:E2:E6:1F:3D:2B:9E:E5:A7:39:F3:63:01:F7:D1:1B:19:EA Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F3FAD462DED7BA1DFA7876400 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eba4ae94-ead6-3e99-9ce9-933e47db254e.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 701 IP address blocks: 209.158.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:46:2d:ed:7b:a1:df:a7:87:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=fdf6eca5-e42f-4281-b183-2ee320ed95ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5c:eb:ad:ca:f7:ad:3a:60:1e:9a:ca:bb:27: 33:d4:ac:4f:56:30:a1:0a:2c:6b:37:9b:9c:24:af: 9d:ae:32:ad:56:7e:f5:a1:cb:70:b9:dc:3d:13:4f: 3e:2b:d9:bd:a8:ab:ea:71:9e:1c:9a:91:ee:80:54: 09:5d:5a:24:16:eb:1b:a9:81:c1:c6:4b:c3:b3:97: 5e:5b:de:e1:88:23:01:b1:48:e6:0d:e5:0c:2d:97: 46:33:86:9f:29:6a:60:da:c4:9f:61:df:62:0e:16: d0:1c:ba:96:69:12:30:b4:0c:65:99:4c:47:55:29: 7f:75:c4:44:b8:5d:fb:5b:f4:de:16:b0:e4:38:5b: d7:15:49:a8:d0:0e:48:cb:d5:00:19:cc:32:df:79: ec:e2:9a:c2:d1:d2:79:59:59:37:c3:46:aa:50:7d: 94:96:35:88:29:39:a9:63:9a:f9:b2:4e:9a:2c:19: ed:b3:8e:14:3f:ff:71:4f:45:38:52:fc:fa:6d:da: 8b:f7:01:64:e1:d0:15:de:4f:ef:78:f0:8d:e9:c0: 5a:96:6b:ee:9a:ac:14:ce:3e:ce:17:d2:e7:6a:71: e3:e3:6b:f9:24:bb:f5:2c:f9:d6:ed:df:57:7a:81: 2f:4c:63:be:55:61:4d:e0:66:e1:3c:eb:cc:1d:ff: 50:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D7:F8:E2:E6:1F:3D:2B:9E:E5:A7:39:F3:63:01:F7:D1:1B:19:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eba4ae94-ead6-3e99-9ce9-933e47db254e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 209.158.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:9f:05:c4:91:a0:e7:1d:da:8c:2e:28:57:93:49:29:ce:2e: 8b:61:a5:67:ae:ed:d1:c0:b3:a3:d8:01:6e:c5:6c:a8:62:64: 9d:09:a1:d9:3f:13:93:7b:de:8a:45:93:e4:13:8e:16:41:99: f3:64:f2:96:75:24:6f:af:9e:48:69:4d:33:f3:0d:c2:0c:51: f2:c6:97:1a:9e:5c:8a:df:19:ab:21:2b:0c:a6:8d:85:83:01: be:25:10:1b:7b:a7:ba:8e:7d:91:08:e9:5f:46:49:10:0d:b4: cc:33:1e:49:2a:6e:f9:44:de:98:28:84:b5:60:f4:9e:58:7e: ac:6a:16:52:c4:9b:55:de:ae:9f:67:06:b1:69:7a:6f:c4:9a: 17:19:b4:87:6b:9f:31:c6:0b:4b:02:f0:63:a3:fe:56:b5:a7: 51:01:cc:e3:fa:68:43:07:3e:2f:1b:33:1c:9c:4c:74:8b:e5: b0:5a:db:3d:ce:b5:f1:f6:b6:6a:df:5d:1f:4b:fd:df:3b:02: b3:bc:9f:af:66:a9:c8:7b:a9:5b:17:eb:52:32:c5:29:85:6d: 34:a6:6d:11:df:86:e4:ae:9c:f9:4e:74:41:ba:b5:79:58:f2: d8:c5:a7:6c:96:9e:8a:7d:a1:7e:a1:2c:15:0a:f2:b1:06:5a: 5c:25:d0:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rUYt7Xuh36eHZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk ZmRmNmVjYTUtZTQyZi00MjgxLWIxODMtMmVlMzIwZWQ5NWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolzrrcr3rTpgHprKuycz1KxPVjChCixrN5uc JK+drjKtVn71octwudw9E08+K9m9qKvqcZ4cmpHugFQJXVokFusbqYHBxkvDs5de W97hiCMBsUjmDeUMLZdGM4afKWpg2sSfYd9iDhbQHLqWaRIwtAxlmUxHVSl/dcRE uF37W/TeFrDkOFvXFUmo0A5Iy9UAGcwy33ns4prC0dJ5WVk3w0aqUH2UljWIKTmp Y5r5sk6aLBnts44UP/9xT0U4Uvz6bdqL9wFk4dAV3k/vePCN6cBalmvumqwUzj7O F9LnanHj42v5JLv1LPnW7d9XeoEvTGO+VWFN4GbhPOvMHf9QpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvX+OLmHz0rnuWnOfNjAffRGxnqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZWJhNGFlOTQtZWFkNi0z ZTk5LTljZTktOTMzZTQ3ZGIyNTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0Z6gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCfBcSRoOcd2owuKFeTSSnOLothpWeu7dHAs6PYAW7FbKhiZJ0Jodk/ E5N73opFk+QTjhZBmfNk8pZ1JG+vnkhpTTPzDcIMUfLGlxqeXIrfGashKwymjYWD Ab4lEBt7p7qOfZEI6V9GSRANtMwzHkkqbvlE3pgohLVg9J5YfqxqFlLEm1Xerp9n BrFpem/EmhcZtIdrnzHGC0sC8GOj/la1p1EBzOP6aEMHPi8bMxycTHSL5bBa2z3O tfH2tmrfXR9L/d87ArO8n69mqch7qVsX61IyxSmFbTSmbRHfhuSunPlOdEG6tXlY 8tjFp2yWnop9oX6hLBUK8rEGWlwl0MY= -----END CERTIFICATE-----Generated at Tue Sep 22 12:26:49 2026 by rpki-client