$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/587f5796-a760-3231-bb0d-3d616b9884cf.roa File: 587f5796-a760-3231-bb0d-3d616b9884cf.roa (raw, json) Hash identifier: 3+xM3jDVJb/E+Kp9doNw6JpgtaihRPGMEC+LFE++OIw= Subject key identifier: 22:9E:B3:68:25:DD:37:D1:F0:EB:4A:E9:8F:36:2F:A2:CE:1C:6A:91 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EE7BCCEBD4A3067D70BA51340 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/587f5796-a760-3231-bb0d-3d616b9884cf.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 5650 IP address blocks: 47.140.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:ce:bd:4a:30:67:d7:0b:a5:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=ef65cfd0-3b3c-432d-a7b1-61a9ae2c4e7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:47:8e:ba:f7:67:4c:66:5f:bb:83:f7:cb:d4: aa:e4:da:ea:e5:23:a5:c2:59:85:a9:ed:08:b6:7e: 25:4b:4c:41:de:47:ec:e6:f9:bf:35:db:d1:bf:fe: 5b:2d:9a:70:28:8e:89:d3:40:90:b2:10:a0:33:49: 91:c9:73:b5:d1:87:bf:38:ba:d5:78:f0:b4:10:ba: 0c:c0:5f:75:1c:59:5d:d2:e1:a8:90:2c:97:cd:42: b2:f9:9c:e9:d4:f4:e5:4d:6d:0d:0a:45:f9:6a:4d: a8:f1:25:c5:a9:39:8e:1d:f5:34:75:72:0a:44:13: f4:5b:26:d0:77:a8:94:54:bc:44:a7:1f:86:02:51: b5:7b:1e:b7:20:f9:7f:55:57:ab:70:19:bd:ad:01: 80:cb:b2:76:49:53:0f:12:73:ce:82:3d:55:51:de: e6:1d:6f:0e:bc:ba:9a:df:8a:c8:dd:e1:a7:a4:89: ef:11:a8:6d:7c:1e:20:81:f5:95:b4:2c:58:49:cd: 74:47:0d:66:89:ae:94:ec:4d:a7:cd:ab:b4:c3:26: 83:e4:6e:96:d4:b7:e8:ab:4c:8a:1e:1a:cb:6b:41: 9d:8d:dc:8b:99:6f:75:6e:41:50:f4:05:a1:53:bf: 48:89:5e:07:c0:48:03:14:63:98:10:d2:58:e1:12: 7d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9E:B3:68:25:DD:37:D1:F0:EB:4A:E9:8F:36:2F:A2:CE:1C:6A:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/587f5796-a760-3231-bb0d-3d616b9884cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 47.140.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:9d:4b:e4:c8:ed:aa:f5:1e:4f:63:80:d4:ac:f2:ee:09:18: 38:3f:07:f2:a9:53:d7:71:af:bc:d2:0c:58:85:c3:af:83:f3: 07:8d:ed:6a:ac:f2:4c:e8:7a:91:2b:05:2a:3c:89:9c:19:3a: 22:17:c9:70:75:11:8b:4b:c0:43:3b:43:04:8e:69:d9:e7:b3: e1:f7:3e:ed:22:37:1d:47:8a:d2:6a:25:1d:7a:2d:ba:84:48: 1d:d4:ab:59:89:08:57:34:66:77:7d:31:fb:65:27:2b:07:65: d2:bb:98:20:45:ec:5a:48:75:52:1f:10:29:dd:d9:ef:d1:40: f6:e8:1c:2b:aa:69:b4:0a:71:05:0b:29:7d:fd:f2:c5:e8:68: 80:2d:91:5e:a4:90:6e:15:37:6f:06:94:e5:5e:25:ec:1b:f5: 15:a3:71:b4:31:49:e0:4e:ff:21:cf:5e:08:02:3f:eb:9b:28: f0:ec:9b:15:43:99:29:71:cb:49:da:a6:36:41:29:dd:14:65: db:f1:f6:fc:48:b5:46:22:4f:12:d1:18:4f:d0:50:b3:a9:36: a5:e3:da:88:54:9c:0b:58:fd:00:2d:41:ef:01:d2:00:98:80: 40:6f:ea:4d:1d:24:97:90:6b:5d:65:09:7c:06:27:32:69:43: b9:1c:32:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvM69SjBn1wulE0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk ZWY2NWNmZDAtM2IzYy00MzJkLWE3YjEtNjFhOWFlMmM0ZTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkeOuvdnTGZfu4P3y9Sq5Nrq5SOlwlmFqe0I tn4lS0xB3kfs5vm/NdvRv/5bLZpwKI6J00CQshCgM0mRyXO10Ye/OLrVePC0ELoM wF91HFld0uGokCyXzUKy+Zzp1PTlTW0NCkX5ak2o8SXFqTmOHfU0dXIKRBP0WybQ d6iUVLxEpx+GAlG1ex63IPl/VVercBm9rQGAy7J2SVMPEnPOgj1VUd7mHW8OvLqa 34rI3eGnpInvEahtfB4ggfWVtCxYSc10Rw1mia6U7E2nzau0wyaD5G6W1Lfoq0yK HhrLa0GdjdyLmW91bkFQ9AWhU79IiV4HwEgDFGOYENJY4RJ9kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKes2gl3TfR8OtK6Y82L6LOHGqRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTg3ZjU3OTYtYTc2MC0z MjMxLWJiMGQtM2Q2MTZiOTg4NGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAL4yeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALGdS+TI7ar1Hk9jgNSs8u4JGDg/B/KpU9dxr7zSDFiFw6+D8weN7Wqs 8kzoepErBSo8iZwZOiIXyXB1EYtLwEM7QwSOadnns+H3Pu0iNx1HitJqJR16LbqE SB3Uq1mJCFc0Znd9MftlJysHZdK7mCBF7FpIdVIfECnd2e/RQPboHCuqabQKcQUL KX398sXoaIAtkV6kkG4VN28GlOVeJewb9RWjcbQxSeBO/yHPXggCP+ubKPDsmxVD mSlxy0napjZBKd0UZdvx9vxItUYiTxLRGE/QULOpNqXj2ohUnAtY/QAtQe8B0gCY gEBv6k0dJJeQa11lCXwGJzJpQ7kcMsA= -----END CERTIFICATE-----Generated at Fri Aug 28 02:39:43 2026 by rpki-client