$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52effa5b-6376-385f-a351-c1d3d0ab0b74.roa File: 52effa5b-6376-385f-a351-c1d3d0ab0b74.roa (raw, json) Hash identifier: piXSCRAcNtrehb9JqDQYbbWukvjz/BSWdgZ55p6BzNE= Subject key identifier: 28:67:B4:12:6A:65:76:4E:4C:02:04:B9:F4:72:1B:42:B1:38:03:7E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EE7BCD27BBFBADA5F5B780D40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52effa5b-6376-385f-a351-c1d3d0ab0b74.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 5650 IP address blocks: 172.99.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:d2:7b:bf:ba:da:5f:5b:78:0d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=7c39d76b-6295-49d5-b92f-69129af2fc99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:48:a5:b3:ca:1c:ec:64:7a:b3:19:00:38:4c: 73:ad:3a:a9:89:ef:3b:64:2f:e6:24:a6:92:e6:1f: 85:80:4f:2a:d1:e5:23:fe:7d:02:bf:33:46:79:90: f2:e0:7f:1e:d2:68:b9:b0:ca:79:68:47:21:cc:79: fa:9d:89:93:37:7c:dd:b0:bf:ac:a5:18:a7:ae:3d: 6b:8a:df:c4:83:b6:0f:4c:ad:93:9a:49:fa:d8:ac: 45:3c:e0:e9:7c:e0:2b:91:43:a2:e8:69:48:92:0a: 6e:e0:fc:3b:28:36:1e:28:b1:33:aa:b8:3e:13:71: 9b:c2:f7:02:da:4e:64:bd:ff:85:e4:19:28:e6:0c: 38:86:6e:66:91:a9:6f:9e:20:17:25:e2:34:1f:77: df:99:bd:cd:aa:cf:4a:1c:9d:35:71:d1:b5:e3:bd: 0e:f7:08:f7:56:18:d9:a7:db:15:4d:6e:4e:47:86: d4:44:62:85:c5:3f:35:34:26:59:d7:1b:74:fd:bf: ae:e9:81:5a:77:1b:4e:49:71:e2:1f:5f:54:cd:2f: 7f:0e:1e:7b:b7:a8:f6:46:2b:63:4b:8f:53:0f:20: 8e:4a:0f:8b:59:20:ec:c9:1b:21:c7:2a:37:46:c6: 9d:72:34:f6:b0:32:11:11:8b:e2:5a:60:37:e4:cb: fa:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:67:B4:12:6A:65:76:4E:4C:02:04:B9:F4:72:1B:42:B1:38:03:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/52effa5b-6376-385f-a351-c1d3d0ab0b74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 172.99.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:b3:d4:6d:27:f8:c1:88:d4:d0:29:28:16:64:7d:d1:61:96: da:f1:39:bb:78:41:b9:d8:a3:03:ac:0e:de:01:ce:5a:57:9b: 09:2a:e6:f0:98:36:04:5a:00:31:86:81:11:94:da:d8:90:29: 42:c1:08:83:18:65:f6:48:d1:ea:29:c4:2b:52:af:6c:e5:29: 90:b3:61:ff:93:f6:fd:7f:92:14:c9:3c:b5:28:49:07:24:31: b8:d6:88:c8:59:6d:4a:a3:fc:3f:a0:15:4d:bb:41:c6:af:f5: e6:36:67:4d:d5:69:ea:4e:a8:f2:c3:eb:91:95:b2:80:0e:86: 9f:29:1f:55:40:10:1c:ca:8a:c5:0f:02:96:7e:52:5f:50:bf: b6:ca:e2:61:98:dc:1c:fe:8e:df:09:30:64:5c:4e:40:29:9b: b2:01:35:50:46:b1:75:f8:e7:61:64:cd:c1:95:40:18:ef:91: 72:c4:f6:22:f3:92:60:fa:53:8d:fa:1f:ac:4e:84:2a:e7:12: 0b:1b:13:ae:94:17:da:3d:61:38:76:50:86:f7:9a:8a:b6:35: c2:d7:04:55:c8:90:5e:ff:84:0b:a7:ac:84:d1:b8:fb:01:d0: 4c:48:e0:2c:dc:14:01:27:f8:1f:e2:25:cc:a4:cd:db:ff:51: 76:9c:f5:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvNJ7v7raX1t4DUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk N2MzOWQ3NmItNjI5NS00OWQ1LWI5MmYtNjkxMjlhZjJmYzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUils8oc7GR6sxkAOExzrTqpie87ZC/mJKaS 5h+FgE8q0eUj/n0CvzNGeZDy4H8e0mi5sMp5aEchzHn6nYmTN3zdsL+spRinrj1r it/Eg7YPTK2Tmkn62KxFPODpfOArkUOi6GlIkgpu4Pw7KDYeKLEzqrg+E3GbwvcC 2k5kvf+F5Bko5gw4hm5mkalvniAXJeI0H3ffmb3Nqs9KHJ01cdG1470O9wj3VhjZ p9sVTW5OR4bURGKFxT81NCZZ1xt0/b+u6YFadxtOSXHiH19UzS9/Dh57t6j2Ritj S49TDyCOSg+LWSDsyRshxyo3RsadcjT2sDIREYviWmA35Mv6VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChntBJqZXZOTAIEufRyG0KxOAN+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTJlZmZhNWItNjM3Ni0z ODVmLWEzNTEtYzFkM2QwYWIwYjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrGMwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSz1G0n+MGI1NApKBZkfdFhltrxObt4QbnYowOsDt4BzlpXmwkq5vCY NgRaADGGgRGU2tiQKULBCIMYZfZI0eopxCtSr2zlKZCzYf+T9v1/khTJPLUoSQck MbjWiMhZbUqj/D+gFU27Qcav9eY2Z03VaepOqPLD65GVsoAOhp8pH1VAEBzKisUP ApZ+Ul9Qv7bK4mGY3Bz+jt8JMGRcTkApm7IBNVBGsXX452FkzcGVQBjvkXLE9iLz kmD6U436H6xOhCrnEgsbE66UF9o9YTh2UIb3moq2NcLXBFXIkF7/hAunrITRuPsB 0ExI4CzcFAEn+B/iJcykzdv/UXac9TI= -----END CERTIFICATE-----Generated at Thu Aug 27 23:53:35 2026 by rpki-client