$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a8f1d65-906f-33d0-90de-5a741f0df881.roa File: 2a8f1d65-906f-33d0-90de-5a741f0df881.roa (raw, json) Hash identifier: ykgzHyKqxnHTjmhACsxN2qbfBigueiBvbEjaph8DZbw= Subject key identifier: B5:1F:A6:C3:E1:59:98:B8:09:A1:B5:01:A1:75:AF:E3:A4:A5:DB:3D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EE7BCCEC8ABA39880E17301E8 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a8f1d65-906f-33d0-90de-5a741f0df881.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 5650 IP address blocks: 47.140.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:ce:c8:ab:a3:98:80:e1:73:01:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=33a6976b-670f-40de-b007-cd75570ab9ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:15:58:81:36:51:02:07:b5:e8:91:fd:4f:91: 0c:b4:d4:cf:83:fa:5e:8f:d1:fc:41:5c:ec:a7:55: e6:d4:06:79:3b:a7:6a:87:ec:c0:48:8a:fb:4f:8d: 23:b9:b5:e7:9c:f7:0f:34:f8:da:d6:66:9c:96:b1: 06:de:6b:00:93:80:21:7f:0c:0d:b3:09:1d:c9:78: 20:03:35:47:f1:8a:00:60:e8:d4:18:75:e5:ed:66: 95:97:cb:c2:e4:36:0e:9e:84:a7:de:38:05:87:26: 95:a3:d7:0a:ef:b9:4a:98:a7:51:69:7e:5b:27:7e: bd:20:c0:b2:a3:76:31:71:48:a4:78:3a:42:8e:ea: 1d:2e:e1:28:6f:63:3b:38:f4:bd:ce:bf:83:ee:13: 3a:68:c1:2b:af:b3:51:dd:ef:55:e9:dc:77:30:bf: 01:fd:66:d1:c1:25:44:f6:34:9c:6c:7a:01:60:4b: 43:46:76:ca:15:95:0d:a2:21:f5:85:cc:7d:2b:95: 94:4e:e0:0b:5f:75:3a:fc:81:ce:a6:42:25:e5:6a: a4:94:bc:2e:5e:87:b5:12:bc:cf:7e:4a:a0:67:d5: 3d:d4:0e:2e:8a:22:6f:a9:6e:57:d8:fa:68:bc:b6: 54:52:6e:e1:65:45:44:35:b4:94:cc:70:1d:96:78: 76:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:1F:A6:C3:E1:59:98:B8:09:A1:B5:01:A1:75:AF:E3:A4:A5:DB:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a8f1d65-906f-33d0-90de-5a741f0df881.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 47.140.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:32:a1:31:a5:59:e0:d1:51:ac:6a:17:e5:39:28:c9:aa:88: 21:c5:5c:2c:f0:25:fa:74:ea:16:58:30:9a:39:f2:ad:0c:4d: fb:c7:e6:d0:6e:8d:fe:a1:11:42:c8:bf:cc:4d:a0:42:b6:81: cb:33:42:af:5b:d1:1c:49:a0:c7:80:64:be:45:11:18:95:94: 28:03:e0:a2:c8:a0:54:e3:8a:33:35:3f:ea:f2:f2:82:9e:e2: 3e:31:13:b1:ac:5c:de:73:f1:71:af:de:86:63:ca:2f:5b:07: 2a:d3:1c:17:31:28:7f:9b:59:87:e3:57:15:d3:c8:29:1b:5a: bd:45:f9:80:f0:84:4f:0c:5d:fd:2c:f6:e9:49:9f:82:5e:02: 74:78:88:0c:a1:de:30:59:a1:36:fe:78:dc:f8:07:a5:ce:eb: 24:17:ff:75:2f:65:fd:59:01:f8:15:61:70:d8:42:08:2e:b3: a5:ca:a6:37:8f:79:7d:b4:8e:a8:ef:76:1e:26:ac:73:2c:6b: cf:08:72:90:c4:fd:43:33:be:db:91:1e:2c:7e:02:db:a2:db: 29:20:78:e3:eb:73:5c:46:7e:c3:4b:22:d3:3b:1d:b6:f8:a8: 17:3a:de:10:35:26:52:6b:95:84:d5:45:e0:55:a7:33:e2:78: d5:60:0f:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvM7Iq6OYgOFzAegwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk MzNhNjk3NmItNjcwZi00MGRlLWIwMDctY2Q3NTU3MGFiOWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixVYgTZRAge16JH9T5EMtNTPg/pej9H8QVzs p1Xm1AZ5O6dqh+zASIr7T40jubXnnPcPNPja1maclrEG3msAk4AhfwwNswkdyXgg AzVH8YoAYOjUGHXl7WaVl8vC5DYOnoSn3jgFhyaVo9cK77lKmKdRaX5bJ369IMCy o3YxcUikeDpCjuodLuEob2M7OPS9zr+D7hM6aMErr7NR3e9V6dx3ML8B/WbRwSVE 9jScbHoBYEtDRnbKFZUNoiH1hcx9K5WUTuALX3U6/IHOpkIl5WqklLwuXoe1ErzP fkqgZ9U91A4uiiJvqW5X2PpovLZUUm7hZUVENbSUzHAdlnh2ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUfpsPhWZi4CaG1AaF1r+Okpds9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmE4ZjFkNjUtOTA2Zi0z M2QwLTkwZGUtNWE3NDFmMGRmODgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAL4zNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJsyoTGlWeDRUaxqF+U5KMmqiCHFXCzwJfp06hZYMJo58q0MTfvH5tBu jf6hEULIv8xNoEK2gcszQq9b0RxJoMeAZL5FERiVlCgD4KLIoFTjijM1P+ry8oKe 4j4xE7GsXN5z8XGv3oZjyi9bByrTHBcxKH+bWYfjVxXTyCkbWr1F+YDwhE8MXf0s 9ulJn4JeAnR4iAyh3jBZoTb+eNz4B6XO6yQX/3UvZf1ZAfgVYXDYQggus6XKpjeP eX20jqjvdh4mrHMsa88IcpDE/UMzvtuRHix+Atui2ykgeOPrc1xGfsNLItM7Hbb4 qBc63hA1JlJrlYTVReBVpzPieNVgD5w= -----END CERTIFICATE-----Generated at Thu Aug 27 20:48:13 2026 by rpki-client