$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/478b2254-68a5-38fb-b621-1a1c5a7c8a63.roa File: 478b2254-68a5-38fb-b621-1a1c5a7c8a63.roa (raw, json) Hash identifier: xBR09MW7y9o46p/+IWCvM6wTs9O4pfwwRD+xouAXiIs= Subject key identifier: 2A:94:C1:6E:C9:93:A6:14:A3:2F:F3:4E:4E:7A:42:A5:92:40:EF:6F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EE7BCD185166518C4F22692C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/478b2254-68a5-38fb-b621-1a1c5a7c8a63.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 5650 IP address blocks: 47.188.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:d1:85:16:65:18:c4:f2:26:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=c499f0a0-6e11-4da3-abac-b9976334b035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0f:c9:77:1d:60:c0:74:62:71:2d:8a:0e:26: 89:fe:60:dd:b4:ff:4d:14:e4:34:41:fd:50:eb:6e: 23:70:22:25:04:2e:15:a4:8e:98:b3:4d:bf:c1:76: b2:08:e7:b5:d3:88:48:98:f0:64:f7:fb:e9:36:57: e7:43:f9:c8:7e:a2:33:54:d7:14:c9:28:35:0c:77: 6d:5c:d5:b8:4c:7f:38:e2:ea:03:9f:fb:61:bd:a1: dd:6c:b2:4d:ce:e7:16:65:73:f4:e3:fc:33:6b:76: 96:a8:6e:6d:09:f0:43:cc:2f:86:79:fd:cf:59:9c: 11:0d:c0:29:50:a0:43:57:41:7b:ef:8c:19:3f:99: 08:e0:b9:53:97:7e:ca:89:cd:98:88:4f:3a:8a:79: f2:c5:e6:52:43:54:56:8f:9f:e8:0c:bb:24:36:9d: 81:31:c6:37:80:1d:3b:96:80:31:db:1e:f2:39:3e: a4:2d:ee:45:65:68:53:65:f5:4f:f1:59:e0:c0:e5: 46:db:aa:5f:5c:1d:9a:17:c8:29:6f:6e:49:14:98: ee:fc:12:e2:73:61:52:c1:3e:e4:8d:d0:8a:1a:55: 2c:9c:88:e9:6f:a0:76:9f:4f:9a:ff:8e:c9:cd:ae: 99:60:f3:df:93:6c:1a:c5:b0:ac:9b:af:33:ed:6f: ec:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:94:C1:6E:C9:93:A6:14:A3:2F:F3:4E:4E:7A:42:A5:92:40:EF:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/478b2254-68a5-38fb-b621-1a1c5a7c8a63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 47.188.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:68:a0:0a:0b:13:23:f8:b7:e5:b1:cc:64:0d:6e:79:08:9a: ac:9e:ee:07:37:6a:02:a7:c8:4e:73:ae:99:82:36:19:8a:e5: ac:81:35:a9:02:f8:a3:ae:22:6d:6c:8a:cb:a1:74:3d:cb:67: 18:e7:bd:92:c4:fc:40:4b:cd:3f:af:6b:72:af:6b:02:53:66: 8c:85:79:8d:71:90:35:8d:aa:9d:52:64:c3:ba:34:01:e9:aa: a1:eb:91:2b:13:32:4e:a5:8e:4f:fd:36:74:73:d2:f4:22:40: 34:73:a4:68:59:3e:dd:24:3e:87:dc:23:af:54:3d:c8:0b:ac: 5d:c2:32:5a:64:a8:eb:80:7a:5a:83:14:7c:d8:f8:de:87:a2: c2:9d:67:2f:bb:b8:2b:13:98:20:dd:a2:8e:de:de:11:95:68: 07:1b:00:6a:7d:73:c7:92:5b:9a:65:7e:3d:87:ff:fb:db:a4: bc:92:4e:d4:88:3e:cc:4b:2b:01:82:68:15:99:5d:cf:f4:21: fb:b7:e9:d3:6c:ca:a5:75:be:bb:23:2b:10:7c:ec:66:d5:3d: b4:9e:c9:f5:9b:2b:c0:c4:61:b5:02:eb:a5:48:ef:11:b5:52: 3a:2d:7d:e5:a4:41:27:9a:4f:e4:52:0a:ea:db:88:4a:4b:fd: 8d:c9:10:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvNGFFmUYxPImksAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk YzQ5OWYwYTAtNmUxMS00ZGEzLWFiYWMtYjk5NzYzMzRiMDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhw/Jdx1gwHRicS2KDiaJ/mDdtP9NFOQ0Qf1Q 624jcCIlBC4VpI6Ys02/wXayCOe104hImPBk9/vpNlfnQ/nIfqIzVNcUySg1DHdt XNW4TH844uoDn/thvaHdbLJNzucWZXP04/wza3aWqG5tCfBDzC+Gef3PWZwRDcAp UKBDV0F774wZP5kI4LlTl37Kic2YiE86innyxeZSQ1RWj5/oDLskNp2BMcY3gB07 loAx2x7yOT6kLe5FZWhTZfVP8VngwOVG26pfXB2aF8gpb25JFJju/BLic2FSwT7k jdCKGlUsnIjpb6B2n0+a/47Jza6ZYPPfk2waxbCsm68z7W/s8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqUwW7Jk6YUoy/zTk56QqWSQO9vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDc4YjIyNTQtNjhhNS0z OGZiLWI2MjEtMWExYzVhN2M4YTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCL7zgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxooAoLEyP4t+WxzGQNbnkImqye7gc3agKnyE5zrpmCNhmK5ayBNakC +KOuIm1sisuhdD3LZxjnvZLE/EBLzT+va3KvawJTZoyFeY1xkDWNqp1SZMO6NAHp qqHrkSsTMk6ljk/9NnRz0vQiQDRzpGhZPt0kPofcI69UPcgLrF3CMlpkqOuAelqD FHzY+N6HosKdZy+7uCsTmCDdoo7e3hGVaAcbAGp9c8eSW5plfj2H//vbpLySTtSI PsxLKwGCaBWZXc/0Ifu36dNsyqV1vrsjKxB87GbVPbSeyfWbK8DEYbUC66VI7xG1 UjotfeWkQSeaT+RSCurbiEpL/Y3JEKA= -----END CERTIFICATE-----Generated at Thu Aug 27 23:52:21 2026 by rpki-client