$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/58d80a97-adc6-3803-adf9-445d02074f2e.roa File: 58d80a97-adc6-3803-adf9-445d02074f2e.roa (raw, json) Hash identifier: 3Ks4YeiwehFvNPNcSPjjNECp/QZCTPES8Zkk0Hn4oVs= Subject key identifier: DB:4A:07:AF:5A:3D:45:02:46:56:C7:0A:E3:1D:51:3A:10:06:34:A3 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584E4588EC156BA8D8DA2BC1F100 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/58d80a97-adc6-3803-adf9-445d02074f2e.roa Signing time: Tue 23 Jun 2026 22:35:10 +0000 ROA not before: Tue 23 Jun 2026 22:35:10 +0000 ROA not after: Mon 21 Sep 2026 22:35:10 +0000 asID: 395292 IP address blocks: 47.176.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:88:ec:15:6b:a8:d8:da:2b:c1:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 23 22:35:10 2026 GMT Not After : Sep 21 22:35:10 2026 GMT Subject: CN=3233cb52-b103-4747-94bf-36e35b9f2bd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8b:bb:d7:32:7c:6d:b3:4f:25:70:7a:5c:1f: dd:38:33:8c:3d:74:0d:97:b9:6d:a2:cb:f2:f7:a2: 19:11:d9:66:8d:be:14:40:1b:74:71:b9:12:f7:7e: b0:39:8e:35:a8:4e:8e:08:e1:8f:78:89:ee:ae:ca: 83:91:50:80:b4:06:58:9d:26:1d:83:47:c0:52:53: 6b:7e:88:54:c3:68:04:99:04:59:86:16:ab:3e:64: 34:f4:1a:d4:ae:54:d6:9b:0c:d7:47:7e:52:a3:67: ee:83:5d:3e:72:30:37:60:df:0c:69:ed:ff:ce:70: 9b:1d:4d:cf:07:08:2c:75:f2:cd:a9:d1:63:a7:e6: ed:40:4f:79:b4:27:ba:c5:fa:ac:50:2e:0f:34:bf: 8a:b6:cd:9c:bb:28:6c:2c:c6:98:a8:ed:fa:99:62: 24:85:df:f5:2e:c6:8a:9d:51:5d:82:81:f3:d3:68: ed:45:9e:53:17:3d:81:1c:44:9f:28:c0:10:d6:3f: 59:05:f6:6e:a7:3d:41:0e:fe:26:43:70:3c:28:1a: d9:a7:b8:88:81:94:88:b2:be:6c:b9:30:dd:b8:bc: 7a:66:ed:5c:37:55:75:16:6a:24:83:e1:40:a7:e6: 5c:d5:67:b1:11:53:cc:02:d9:a5:c1:b9:d2:c9:54: 31:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:4A:07:AF:5A:3D:45:02:46:56:C7:0A:E3:1D:51:3A:10:06:34:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/58d80a97-adc6-3803-adf9-445d02074f2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 47.176.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:1b:61:50:54:1c:7a:4d:3c:ef:2a:cb:09:31:07:dd:10:a6: 31:4f:39:ab:3b:d9:66:e0:ec:f2:cc:88:7d:2b:08:db:65:8a: 87:80:9d:e4:e9:8a:e4:81:44:87:1a:81:96:bd:25:b0:85:07: 38:32:af:e8:e1:0a:5a:7f:0d:8c:3d:a0:9b:46:1e:23:64:ed: b2:48:9e:fa:cc:f5:a3:f4:f3:f4:bc:af:ef:36:89:16:5f:29: 25:13:d5:0c:aa:5d:c5:bd:b1:66:2e:2b:e6:2d:a3:b3:e2:20: 66:f3:62:78:cb:bb:dd:21:45:cb:54:5d:9f:ad:17:9c:46:b7: a8:a4:41:26:84:99:ef:75:b3:f9:3b:44:d5:5f:17:29:d7:e1: 5b:12:c6:e9:cf:3d:4e:8e:e5:7c:62:91:a3:9b:c1:de:13:a4: 6a:d0:34:96:08:46:4d:5d:95:e1:6c:37:41:c9:ac:cf:ff:07: 87:c4:88:81:fd:7c:9a:be:a3:ea:c9:61:16:64:f2:ee:96:da: 54:36:ae:7e:ff:57:ee:6e:f4:e5:d2:31:bc:9b:de:cc:44:3e: c5:34:58:71:a1:1e:10:34:23:dd:bc:bf:26:65:14:64:aa:16: b6:1f:66:18:8d:92:1e:22:2a:b0:a7:b5:c7:19:ad:30:ca:03: 34:b3:9f:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FiOwVa6jY2ivB8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDYyMzIyMzUxMFoXDTI2MDkyMTIyMzUxMFowLzEtMCsGA1UEAxMk MzIzM2NiNTItYjEwMy00NzQ3LTk0YmYtMzZlMzViOWYyYmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4u71zJ8bbNPJXB6XB/dODOMPXQNl7ltosvy 96IZEdlmjb4UQBt0cbkS936wOY41qE6OCOGPeInursqDkVCAtAZYnSYdg0fAUlNr fohUw2gEmQRZhharPmQ09BrUrlTWmwzXR35So2fug10+cjA3YN8Mae3/znCbHU3P BwgsdfLNqdFjp+btQE95tCe6xfqsUC4PNL+Kts2cuyhsLMaYqO36mWIkhd/1LsaK nVFdgoHz02jtRZ5TFz2BHESfKMAQ1j9ZBfZupz1BDv4mQ3A8KBrZp7iIgZSIsr5s uTDduLx6Zu1cN1V1Fmokg+FAp+Zc1WexEVPMAtmlwbnSyVQxcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtKB69aPUUCRlbHCuMdUToQBjSjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNThkODBhOTctYWRjNi0z ODAzLWFkZjktNDQ1ZDAyMDc0ZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAL7DyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKwbYVBUHHpNPO8qywkxB90QpjFPOas72Wbg7PLMiH0rCNtlioeAneTp iuSBRIcagZa9JbCFBzgyr+jhClp/DYw9oJtGHiNk7bJInvrM9aP08/S8r+82iRZf KSUT1QyqXcW9sWYuK+Yto7PiIGbzYnjLu90hRctUXZ+tF5xGt6ikQSaEme91s/k7 RNVfFynX4VsSxunPPU6O5XxikaObwd4TpGrQNJYIRk1dleFsN0HJrM//B4fEiIH9 fJq+o+rJYRZk8u6W2lQ2rn7/V+5u9OXSMbyb3sxEPsU0WHGhHhA0I928vyZlFGSq FrYfZhiNkh4iKrCntccZrTDKAzSznx4= -----END CERTIFICATE-----Generated at Mon Jul 13 11:32:33 2026 by rpki-client