$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5b238e81-1019-32c5-83cc-2f3278883642.roa File: 5b238e81-1019-32c5-83cc-2f3278883642.roa (raw, json) Hash identifier: 39oJYQwgyaGdkRbj3lRR/CAFIlZ2QtyAjUTeq6zsPZU= Subject key identifier: 38:72:46:B9:EF:45:47:51:45:1E:5B:B2:CC:BC:0F:D6:14:C4:B5:C7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584E4588E7EF71E9B740A35FC280 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5b238e81-1019-32c5-83cc-2f3278883642.roa Signing time: Tue 23 Jun 2026 22:35:08 +0000 ROA not before: Tue 23 Jun 2026 22:35:08 +0000 ROA not after: Mon 21 Sep 2026 22:35:08 +0000 asID: 5650 IP address blocks: 47.137.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:88:e7:ef:71:e9:b7:40:a3:5f:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 23 22:35:08 2026 GMT Not After : Sep 21 22:35:08 2026 GMT Subject: CN=de1af7e0-ec5f-4502-bdaa-4439a1742225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:20:d2:d7:0e:01:8c:aa:4c:3d:36:58:6e:73: d8:73:74:43:d0:f7:5c:7f:19:89:43:a0:3f:80:71: 76:3c:83:2b:b4:a0:f8:90:b0:3e:79:bd:3a:11:83: dc:98:b1:9c:50:27:0f:93:bb:17:11:7d:20:8f:e1: a1:c3:76:2c:9f:2c:80:88:ad:47:03:d7:14:8a:fc: 22:ac:5e:dc:5c:e6:47:48:f5:43:6d:60:77:ce:4b: d2:27:2d:ef:d0:2c:4e:e9:df:76:01:05:ff:d6:29: dc:a8:30:6b:b8:f4:2c:d7:bc:18:a7:57:a5:84:7f: 41:5e:1e:21:74:20:c1:db:de:6e:d2:d0:a4:c2:4d: 80:e7:fe:e7:b4:c2:85:6c:f4:af:51:fd:dc:1b:b7: da:72:a1:4e:51:56:50:d5:22:6a:45:3c:2f:60:ec: 06:9a:4c:6d:23:de:00:2d:32:42:98:00:50:7e:36: ac:66:2c:67:16:2b:52:49:ea:8a:51:cf:06:c6:f3: 94:66:38:87:b2:65:c3:5a:6c:e8:0f:aa:89:d2:d1: aa:07:de:e6:bb:c6:8b:3f:f5:f6:83:66:f6:bb:9b: 02:23:36:94:38:4f:8e:5c:c1:ce:bc:51:78:8f:ec: 7b:75:88:5e:fb:2f:ed:6f:fe:e0:a9:d9:be:a3:7a: e7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:72:46:B9:EF:45:47:51:45:1E:5B:B2:CC:BC:0F:D6:14:C4:B5:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5b238e81-1019-32c5-83cc-2f3278883642.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 47.137.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:d8:83:1c:2b:29:09:94:df:18:17:6b:fc:ec:63:2f:7c:81: 2c:32:97:eb:dc:9d:ba:70:13:22:fb:0c:d0:67:11:81:6c:7a: 28:4b:c7:b3:0b:2f:38:81:00:ba:0b:cd:34:61:3a:93:e0:9c: 10:a8:56:34:d5:62:8d:8b:05:a2:d4:56:b5:fe:52:3e:25:37: 92:b7:3f:5c:0a:06:0c:55:35:5a:88:cb:cd:96:78:d4:b2:30: 66:8b:aa:62:cb:8a:5f:7f:8a:13:72:75:aa:61:c2:af:b2:b1: da:ba:3a:d3:5f:46:28:2d:5d:86:a8:1e:96:b9:52:a9:93:90: 8f:46:13:cc:9c:e3:27:c4:f9:98:f9:d5:32:c1:77:59:32:95: e2:d8:8d:b4:d3:45:e4:a2:55:7d:c4:7e:da:45:44:48:a1:17: b3:07:ff:c9:60:19:b3:e8:a7:a5:bf:3c:52:64:78:1e:d5:bc: d1:bf:e9:94:b7:6b:a2:63:27:87:28:ff:a6:25:15:47:41:78: 8c:c4:4d:42:70:d8:80:d9:2e:ae:dd:6d:a5:fa:95:3f:df:a4: ca:a0:ba:2b:36:c8:54:9e:10:70:6d:ac:a1:a0:43:0a:d4:d5: 0a:d0:b9:c9:f0:c8:ac:22:14:1d:d1:45:3c:ac:6a:5a:39:d5: 58:d7:4a:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FiOfvcem3QKNfwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDYyMzIyMzUwOFoXDTI2MDkyMTIyMzUwOFowLzEtMCsGA1UEAxMk ZGUxYWY3ZTAtZWM1Zi00NTAyLWJkYWEtNDQzOWExNzQyMjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSDS1w4BjKpMPTZYbnPYc3RD0PdcfxmJQ6A/ gHF2PIMrtKD4kLA+eb06EYPcmLGcUCcPk7sXEX0gj+Ghw3YsnyyAiK1HA9cUivwi rF7cXOZHSPVDbWB3zkvSJy3v0CxO6d92AQX/1incqDBruPQs17wYp1elhH9BXh4h dCDB295u0tCkwk2A5/7ntMKFbPSvUf3cG7facqFOUVZQ1SJqRTwvYOwGmkxtI94A LTJCmABQfjasZixnFitSSeqKUc8GxvOUZjiHsmXDWmzoD6qJ0tGqB97mu8aLP/X2 g2b2u5sCIzaUOE+OXMHOvFF4j+x7dYhe+y/tb/7gqdm+o3rnXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhyRrnvRUdRRR5bssy8D9YUxLXHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWIyMzhlODEtMTAxOS0z MmM1LTgzY2MtMmYzMjc4ODgzNjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDL4nYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzYgxwrKQmU3xgXa/zsYy98gSwyl+vcnbpwEyL7DNBnEYFseihLx7ML LziBALoLzTRhOpPgnBCoVjTVYo2LBaLUVrX+Uj4lN5K3P1wKBgxVNVqIy82WeNSy MGaLqmLLil9/ihNydaphwq+ysdq6OtNfRigtXYaoHpa5UqmTkI9GE8yc4yfE+Zj5 1TLBd1kyleLYjbTTReSiVX3EftpFREihF7MH/8lgGbPop6W/PFJkeB7VvNG/6ZS3 a6JjJ4co/6YlFUdBeIzETUJw2IDZLq7dbaX6lT/fpMqguis2yFSeEHBtrKGgQwrU 1QrQucnwyKwiFB3RRTysalo51VjXSp8= -----END CERTIFICATE-----Generated at Mon Jul 13 11:33:22 2026 by rpki-client