$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b97072b6-881f-3441-9a12-6e28401c50f5.roa File: b97072b6-881f-3441-9a12-6e28401c50f5.roa (raw, json) Hash identifier: lESvZ1mJUJDfnJ6qAUuRhXcSoKA0imwtaYRj/+JxcWw= Subject key identifier: 7B:76:15:70:35:8C:F8:46:A7:41:2B:CD:E8:5A:E0:DB:B5:CF:61:21 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F06725A77F3FE9E83A529CA80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b97072b6-881f-3441-9a12-6e28401c50f5.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 22394 IP address blocks: 199.224.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:5a:77:f3:fe:9e:83:a5:29:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=3075d622-c6a6-47db-9e72-f06ee70b32d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2b:40:26:8f:17:05:48:c7:e4:13:f0:79:7b: da:67:82:c5:32:ef:01:87:a7:70:a3:7a:54:5a:23: 8c:28:f5:8c:c0:fe:e3:64:8a:7f:a0:4d:49:28:06: d6:6b:a5:6f:03:0f:49:8b:94:88:1c:65:42:e0:7b: a9:79:a7:d1:c9:54:dc:c0:cb:22:80:b7:e7:67:a4: c9:43:a9:72:56:ab:2f:0c:53:2b:47:71:d5:0d:91: 59:b5:ae:6b:42:d6:e8:5b:02:27:85:04:49:5f:70: a3:52:1e:e8:d3:d7:64:28:9a:55:d8:25:87:30:1f: 43:03:17:a1:8b:8f:41:12:2e:9b:0b:b6:5e:52:65: 67:6d:33:10:a8:87:7d:81:97:e4:ee:6d:f5:69:6f: 10:63:9a:df:81:fa:8a:56:cc:59:c1:34:1a:b1:fb: 5c:49:86:a0:32:39:b8:d9:6f:e0:5d:2d:27:be:d2: c2:d0:b3:29:e1:47:03:2e:c2:c9:dc:b5:9e:3f:f9: eb:6a:a2:08:8f:1e:2a:f8:b0:40:28:57:27:90:83: 4f:2a:6f:6d:0e:c5:d2:f1:cc:3a:8a:e2:3d:0a:1c: 62:74:0b:2b:81:90:79:45:4d:51:05:33:b3:b6:a3: b5:92:bf:23:d2:51:d8:7d:f9:46:1e:2c:90:d7:37: fe:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:76:15:70:35:8C:F8:46:A7:41:2B:CD:E8:5A:E0:DB:B5:CF:61:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b97072b6-881f-3441-9a12-6e28401c50f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 199.224.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:a6:7b:b5:08:fb:34:bb:9f:1a:14:74:a6:30:6d:44:da:c5: eb:f5:14:63:95:ac:84:46:2c:b4:30:e2:b8:e8:30:e6:8a:c4: f4:d5:c0:cf:7b:be:04:70:4b:31:b5:cc:ad:67:18:fc:f9:c7: 94:72:79:4d:11:63:29:fe:22:5b:9f:37:74:66:db:80:27:64: cb:f1:f1:4b:a2:c7:62:64:60:93:95:4f:09:b4:d7:89:61:b5: d1:0a:7d:a6:46:3d:3e:f1:72:d6:0c:88:5c:f3:21:5b:e1:52: 8b:07:99:49:63:7a:7b:37:b2:93:57:20:01:9f:5c:bc:34:14: cf:3c:c2:4a:bf:dc:70:31:01:af:9a:91:a4:0a:1b:61:ea:f6: 58:c0:e4:2e:3a:2d:f9:23:26:ae:be:31:07:f5:bd:f1:ee:4d: 9c:e2:b8:83:92:c8:dc:b2:6b:3e:19:e3:9c:f3:5c:d3:6e:d3: aa:c9:87:2d:e7:4c:00:e5:38:70:5a:00:f4:03:2f:99:d1:df: 3f:e6:d5:b8:74:1a:1f:c1:cd:16:9b:61:d6:1c:d7:97:e2:a7: 0d:fb:d6:48:58:bc:26:b0:a3:86:62:66:f4:20:39:93:8b:c5: 58:c3:45:91:b5:69:ba:85:77:f0:71:b6:42:46:7a:40:e5:81: 2a:37:04:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Gclp38/6eg6UpyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk MzA3NWQ2MjItYzZhNi00N2RiLTllNzItZjA2ZWU3MGIzMmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CtAJo8XBUjH5BPweXvaZ4LFMu8Bh6dwo3pU WiOMKPWMwP7jZIp/oE1JKAbWa6VvAw9Ji5SIHGVC4HupeafRyVTcwMsigLfnZ6TJ Q6lyVqsvDFMrR3HVDZFZta5rQtboWwInhQRJX3CjUh7o09dkKJpV2CWHMB9DAxeh i49BEi6bC7ZeUmVnbTMQqId9gZfk7m31aW8QY5rfgfqKVsxZwTQasftcSYagMjm4 2W/gXS0nvtLC0LMp4UcDLsLJ3LWeP/nraqIIjx4q+LBAKFcnkINPKm9tDsXS8cw6 iuI9ChxidAsrgZB5RU1RBTOztqO1kr8j0lHYfflGHiyQ1zf+DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHt2FXA1jPhGp0Erzeha4Nu1z2EhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjk3MDcyYjYtODgxZi0z NDQxLTlhMTItNmUyODQwMWM1MGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFx+AgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6me7UI+zS7nxoUdKYwbUTaxev1FGOVrIRGLLQw4rjoMOaKxPTVwM97 vgRwSzG1zK1nGPz5x5RyeU0RYyn+IlufN3Rm24AnZMvx8Uuix2JkYJOVTwm014lh tdEKfaZGPT7xctYMiFzzIVvhUosHmUljens3spNXIAGfXLw0FM88wkq/3HAxAa+a kaQKG2Hq9ljA5C46LfkjJq6+MQf1vfHuTZziuIOSyNyyaz4Z45zzXNNu06rJhy3n TADlOHBaAPQDL5nR3z/m1bh0Gh/BzRabYdYc15fipw371khYvCawo4ZiZvQgOZOL xVjDRZG1abqFd/BxtkJGekDlgSo3BPc= -----END CERTIFICATE-----Generated at Mon Sep 28 05:52:41 2026 by rpki-client