$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/e7fc0022-9bfa-36eb-83b7-c5de5ad92462.roa File: e7fc0022-9bfa-36eb-83b7-c5de5ad92462.roa (raw, json) Hash identifier: 6J6GiSPD3kcaqSjflsWGvJ8Pz4Fb8HgdiaUh+ccf2cU= Subject key identifier: DB:49:43:29:1D:03:8D:B9:2D:F0:89:00:B1:74:C5:8E:FA:73:A4:32 Certificate issuer: /CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279 Certificate serial: 010D0C9F4328584EED5204006AAB4476D4BF66C8 Authority key identifier: C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/e7fc0022-9bfa-36eb-83b7-c5de5ad92462.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 393233 IP address blocks: 173.0.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:04:00:6a:ab:44:76:d4:bf:66:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279 Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=85955e9a-de5d-4881-961e-9d14cf67a7d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:62:77:e7:4d:de:74:47:ee:5b:5b:01:bf:6f: 31:86:f0:5b:3c:64:57:12:48:5d:80:22:20:c2:fe: a6:64:d4:03:42:23:cb:d0:78:8a:42:db:bf:eb:e6: 7a:6c:96:ca:5d:bd:70:17:b2:04:eb:70:b8:c5:c1: ff:82:24:6b:20:36:15:90:59:f1:34:6f:ed:8d:57: 6b:5d:72:5a:52:83:d1:01:37:83:dc:85:13:61:49: 24:69:b3:c2:f2:79:e6:32:76:08:ac:ac:4a:88:3e: 48:73:23:5d:03:a0:bc:92:45:aa:73:6c:8e:6d:8c: 72:81:3d:45:65:61:14:66:f4:15:d9:11:7e:48:d5: e2:15:49:34:d5:ae:25:6d:ef:32:a7:9f:99:0b:11: 2b:d1:b0:82:a8:5f:80:7b:ec:2e:33:4f:80:5e:7b: fb:b4:e6:ec:be:3e:3b:68:1c:b8:3a:78:41:b0:80: f8:73:44:64:0f:e0:55:9f:02:8a:f5:93:6c:f9:f8: f4:b8:df:0f:bb:b8:59:ee:a2:46:b9:86:d4:1a:57: 4d:62:a7:f2:c9:a2:56:86:c9:51:d0:0d:b9:70:23: 08:fb:19:61:10:98:c4:4d:70:1f:f2:4b:ec:d2:c4: c5:e9:39:a9:8f:eb:a9:e0:e8:85:77:1a:ae:d8:e4: 84:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:49:43:29:1D:03:8D:B9:2D:F0:89:00:B1:74:C5:8E:FA:73:A4:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/e7fc0022-9bfa-36eb-83b7-c5de5ad92462.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl X509v3 Authority Key Identifier: keyid:C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer sbgp-ipAddrBlock: critical IPv4: 173.0.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:48:cf:a5:6f:6d:ba:1d:3f:ef:1d:c7:3c:5e:51:b8:25:08: f0:3b:af:bb:a5:93:73:25:2a:d8:a4:b3:39:0a:39:80:14:29: b0:36:89:41:34:00:3c:84:75:9b:86:33:58:2a:2c:20:58:e2: aa:a2:d6:f5:95:74:d1:f8:11:8e:55:58:13:ca:a0:68:8c:fc: a2:ca:4a:41:56:2c:98:b5:41:3c:53:39:b5:64:a0:99:b7:10: 7b:cb:e4:b7:1f:30:c2:a7:73:47:8a:1a:71:b6:c9:df:3a:49: b2:58:d8:0c:c4:91:0a:c2:f2:ef:46:29:bb:1a:b1:b4:3e:a6: 37:08:0e:b8:72:b7:45:fb:db:a6:a5:49:a9:8a:b9:69:4b:7c: 8a:cc:8a:a6:dc:a7:4d:19:9c:b7:55:48:79:d0:22:ee:84:91: 20:77:f2:c9:e6:5c:ca:6d:fb:ea:39:7f:b2:37:cd:10:10:f9: 3f:dd:d0:7c:05:8d:bb:b6:e4:98:25:4d:33:8c:4c:a5:b3:54: fb:55:84:1d:6f:32:e7:af:a0:17:1b:68:ef:7b:73:d1:a1:b6: 4f:db:3c:28:a6:72:ef:44:ec:0b:b9:22:29:24:a8:5f:8f:41: d3:be:3f:e7:aa:ad:ab:ab:10:d7:1c:14:3b:09:7f:3f:96:00: 9b:ea:6c:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUgQAaqtEdtS/ZsgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDUzMjNkYWMtYTE1ZC00ZjgyLWE3MGItMzBlMWE0Y2Ex Mjc5MB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk ODU5NTVlOWEtZGU1ZC00ODgxLTk2MWUtOWQxNGNmNjdhN2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWJ3503edEfuW1sBv28xhvBbPGRXEkhdgCIg wv6mZNQDQiPL0HiKQtu/6+Z6bJbKXb1wF7IE63C4xcH/giRrIDYVkFnxNG/tjVdr XXJaUoPRATeD3IUTYUkkabPC8nnmMnYIrKxKiD5IcyNdA6C8kkWqc2yObYxygT1F ZWEUZvQV2RF+SNXiFUk01a4lbe8yp5+ZCxEr0bCCqF+Ae+wuM0+AXnv7tObsvj47 aBy4OnhBsID4c0RkD+BVnwKK9ZNs+fj0uN8Pu7hZ7qJGuYbUGldNYqfyyaJWhslR 0A25cCMI+xlhEJjETXAf8kvs0sTF6Tmpj+up4OiFdxqu2OSEuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtJQykdA425LfCJALF0xY76c6QyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNTMy M2RhYy1hMTVkLTRmODItYTcwYi0zMGUxYTRjYTEyNzkvZTdmYzAwMjItOWJmYS0z NmViLTgzYjctYzVkZTVhZDkyNDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDUzMjNkYWMtYTE1ZC00ZjgyLWE3 MGItMzBlMWE0Y2ExMjc5L2Q1MzIzZGFjLWExNWQtNGY4Mi1hNzBiLTMwZTFhNGNh MTI3OS5jcmwwHwYDVR0jBBgwFoAUyDY3c/UqyujL65IZblyvIFXxGr4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNTMyM2RhYy1hMTVkLTRmODItYTcwYi0zMGUx YTRjYTEyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArQBIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBIz6VvbbodP+8dxzxeUbglCPA7r7ulk3MlKtikszkKOYAUKbA2iUE0 ADyEdZuGM1gqLCBY4qqi1vWVdNH4EY5VWBPKoGiM/KLKSkFWLJi1QTxTObVkoJm3 EHvL5LcfMMKnc0eKGnG2yd86SbJY2AzEkQrC8u9GKbsasbQ+pjcIDrhyt0X726al SamKuWlLfIrMiqbcp00ZnLdVSHnQIu6EkSB38snmXMpt++o5f7I3zRAQ+T/d0HwF jbu25JglTTOMTKWzVPtVhB1vMuevoBcbaO97c9Ghtk/bPCimcu9E7Au5IikkqF+P QdO+P+eqraurENccFDsJfz+WAJvqbMk= -----END CERTIFICATE-----Generated at Tue Sep 29 09:58:44 2026 by rpki-client