$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3389cdc1-931e-3e0a-ad81-8498b69081e2.roa File: 3389cdc1-931e-3e0a-ad81-8498b69081e2.roa (raw, json) Hash identifier: vJDlO6ThfbESdQIXCjXTjMwJe4YCidblpfk6LemBeKY= Subject key identifier: 2E:5C:1F:10:4E:8C:A8:AC:16:32:E6:04:7B:B6:14:50:87:23:93:06 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EF717A23B9BF60AA10D5CB900 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3389cdc1-931e-3e0a-ad81-8498b69081e2.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 701 IP address blocks: 173.59.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:a2:3b:9b:f6:0a:a1:0d:5c:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=93d83796-95d9-4bbc-9242-6dddacd0d4fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8c:68:26:83:3f:01:d5:c7:37:e6:c3:d1:27: ca:98:17:c3:cb:42:2d:ea:50:c5:de:c5:d8:ab:b7: ea:52:d7:fb:1d:c5:97:94:3e:ca:78:17:36:8d:7e: dc:31:51:e4:ab:d7:82:53:17:d1:e0:2d:a6:87:a4: 2f:a0:fc:d0:fc:d2:11:25:08:71:ad:f6:08:f3:76: 49:0d:06:2a:84:a4:64:85:58:f7:02:e6:f3:ed:3e: 1a:f6:5d:84:35:09:87:3c:5b:31:1e:9a:74:67:01: 47:dc:67:e0:8c:0b:08:54:30:ac:82:0d:fa:a2:7a: 56:81:80:61:20:df:9f:0e:82:42:be:d5:d3:7c:c8: d6:ff:79:36:78:ec:b3:fc:c1:cf:33:f5:e2:e0:88: d9:79:51:7d:fc:38:7f:67:2d:78:6b:b3:95:a9:89: 73:f6:f1:67:0f:cf:1d:87:a9:1e:28:25:cd:7d:57: 16:7e:8d:a3:75:a9:80:58:18:6c:17:bc:4b:6a:8e: 24:59:e5:0f:1d:a1:7b:c3:16:b0:85:f4:de:9f:1c: 03:0e:46:8d:db:e4:b4:b2:c0:f0:0e:a1:b0:4e:54: 2c:4a:8c:4d:ab:ca:a5:69:1f:37:78:d2:2f:84:59: 2f:36:8b:8a:5a:b4:a4:e1:2a:d4:33:dd:e0:47:24: 91:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:5C:1F:10:4E:8C:A8:AC:16:32:E6:04:7B:B6:14:50:87:23:93:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3389cdc1-931e-3e0a-ad81-8498b69081e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 173.59.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:3e:e8:3d:09:17:2b:92:25:6a:b6:2d:66:ac:7b:92:c5:e1: ed:c8:5f:f0:a8:6b:e2:b0:d6:2b:1e:ed:8c:70:eb:67:34:b7: 99:55:8b:a4:b5:3d:a4:ef:f4:65:be:23:9a:65:43:60:94:dd: 76:e9:ef:77:e3:e8:2d:91:2c:2f:4f:85:04:d7:cc:3a:17:62: ab:89:17:0d:4e:30:c6:6b:ee:68:74:ca:de:8e:49:2e:19:ed: 08:17:9a:04:48:d5:54:80:1f:dd:19:d4:bf:6c:98:0a:3c:88: e5:69:31:26:c7:53:ac:d5:d6:1a:49:3f:ba:1d:b5:96:ee:a7: 67:f2:a5:7a:fd:b5:a4:88:ed:e8:b2:25:07:63:ea:d8:2b:86: de:d6:8a:50:dd:80:f6:e3:91:2f:53:43:81:50:da:ca:d3:00: 9a:2d:9c:1c:6d:90:04:7c:2e:a8:68:da:42:7d:28:34:af:e2: e8:62:c4:37:df:ad:ae:29:f0:ad:47:a0:50:c0:68:49:b7:1f: c7:b9:bf:4e:c0:63:cc:2c:97:17:47:ba:33:5f:6e:cf:3c:24: 6b:4f:be:c7:7f:89:c4:97:73:06:c3:32:8e:07:59:41:2b:d9: c0:68:85:1d:d8:43:df:78:3f:46:8a:41:c1:84:85:fe:36:1a: ae:01:9e:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F6I7m/YKoQ1cuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk OTNkODM3OTYtOTVkOS00YmJjLTkyNDItNmRkZGFjZDBkNGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoxoJoM/AdXHN+bD0SfKmBfDy0It6lDF3sXY q7fqUtf7HcWXlD7KeBc2jX7cMVHkq9eCUxfR4C2mh6QvoPzQ/NIRJQhxrfYI83ZJ DQYqhKRkhVj3Aubz7T4a9l2ENQmHPFsxHpp0ZwFH3GfgjAsIVDCsgg36onpWgYBh IN+fDoJCvtXTfMjW/3k2eOyz/MHPM/Xi4IjZeVF9/Dh/Zy14a7OVqYlz9vFnD88d h6keKCXNfVcWfo2jdamAWBhsF7xLao4kWeUPHaF7wxawhfTenxwDDkaN2+S0ssDw DqGwTlQsSoxNq8qlaR83eNIvhFkvNouKWrSk4SrUM93gRySR7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5cHxBOjKisFjLmBHu2FFCHI5MGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzM4OWNkYzEtOTMxZS0z ZTBhLWFkODEtODQ5OGI2OTA4MWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErTvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEI+6D0JFyuSJWq2LWase5LF4e3IX/Coa+Kw1ise7Yxw62c0t5lVi6S1 PaTv9GW+I5plQ2CU3Xbp73fj6C2RLC9PhQTXzDoXYquJFw1OMMZr7mh0yt6OSS4Z 7QgXmgRI1VSAH90Z1L9smAo8iOVpMSbHU6zV1hpJP7odtZbup2fypXr9taSI7eiy JQdj6tgrht7WilDdgPbjkS9TQ4FQ2srTAJotnBxtkAR8Lqho2kJ9KDSv4uhixDff ra4p8K1HoFDAaEm3H8e5v07AY8wslxdHujNfbs88JGtPvsd/icSXcwbDMo4HWUEr 2cBohR3YQ994P0aKQcGEhf42Gq4Bni4= -----END CERTIFICATE-----Generated at Sun Sep 13 15:03:53 2026 by rpki-client