$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7aff284f-2e21-38ca-a19a-2f8132670917.roa File: 7aff284f-2e21-38ca-a19a-2f8132670917.roa (raw, json) Hash identifier: 4T18NydAm0Kwja7QQnDY3fGSNcIKCAt3Rscoa+Py9vs= Subject key identifier: F6:04:51:CD:52:0C:40:09:9D:3B:17:75:41:6B:11:C4:98:B2:35:D1 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EE7BCD242D6CFEA57E3276F00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7aff284f-2e21-38ca-a19a-2f8132670917.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 5650 IP address blocks: 172.95.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:d2:42:d6:cf:ea:57:e3:27:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=8955c397-a6b4-4260-bb09-dbd428efde8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:32:26:c7:3f:49:79:c5:36:29:d5:aa:21:58: dd:50:d4:a6:70:2f:27:ad:94:f5:09:32:9e:31:b4: ae:85:92:f1:c4:d4:4c:04:8d:31:f4:a0:f5:de:98: 37:7b:9f:9b:f3:cb:06:6b:c9:75:39:6a:1b:81:f1: c7:7e:b1:36:00:fe:e1:5a:41:4d:cf:59:cd:57:c8: 02:62:b4:bc:c5:71:e5:b3:27:78:e3:6c:2e:8c:b2: 7d:f1:e8:16:9b:c7:e8:dd:4a:d1:eb:6f:11:d2:4d: 64:4c:68:12:bc:4f:91:03:08:10:6a:ac:3d:cb:06: 4f:1a:88:53:2b:e6:6d:da:09:b1:fe:ad:05:dc:82: 1d:46:a2:11:c3:4b:a8:fb:a5:0c:59:7a:fd:15:ab: 5b:60:46:21:03:a8:08:05:ad:b6:8e:82:39:1b:ff: 59:9d:e3:61:69:f6:67:96:51:d5:bf:ad:36:a8:7e: 52:aa:2b:b9:0a:b2:ef:de:5b:4c:e2:ce:f4:bf:5a: e9:d1:a0:29:cb:18:bf:ef:e4:88:b5:de:da:b8:99: 7e:43:e5:05:23:e6:3e:f2:0d:f3:bb:2f:ce:ad:5f: 4b:45:fc:d1:8d:6d:ce:b9:f1:b4:3d:8e:34:34:04: e7:2d:6c:21:5b:ad:6e:85:b7:5d:09:24:1e:ed:0c: a1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:04:51:CD:52:0C:40:09:9D:3B:17:75:41:6B:11:C4:98:B2:35:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7aff284f-2e21-38ca-a19a-2f8132670917.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 172.95.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:5e:5d:96:60:0b:94:f4:4d:e4:ae:66:0a:b8:11:2e:e7:37: fa:75:e4:e0:f5:73:35:8e:c1:7b:0c:43:47:ac:38:9e:a7:ab: 76:d2:b3:09:06:ff:a7:15:be:74:49:35:42:32:63:a8:85:38: a9:ff:26:85:59:6f:60:46:46:df:ea:f8:3c:6b:15:69:66:d4: b0:f7:94:29:e8:70:2d:26:2d:28:39:75:b7:29:2e:0c:9f:0d: c3:d3:3c:5b:1b:ce:44:7c:03:dd:a9:0f:88:4e:26:94:f1:43: 9f:8f:3b:5a:c6:2e:82:78:d0:90:7a:f0:67:32:56:4e:50:cc: 9d:0a:83:20:73:a8:3f:95:75:7f:ff:ba:f8:dd:4b:15:c6:37: ed:76:bb:51:2d:c5:19:27:15:ce:79:d6:2a:e0:f7:06:c5:33: 4f:b6:fb:fd:67:53:b3:a1:fb:a0:a2:44:d7:10:89:f9:fb:53: 0c:77:e1:3d:e4:ee:a9:64:8f:db:e6:48:0d:43:39:8d:b2:70: fa:4c:5b:d9:d4:c5:eb:6a:de:cf:0e:a1:25:38:be:56:86:48: 7a:7a:5b:fe:07:21:9d:cd:c0:1b:2d:fd:25:5d:2f:d0:a5:c3: 33:ff:3c:71:02:e4:1c:b1:84:df:a3:67:1b:23:4f:6f:20:47: fe:15:0f:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvNJC1s/qV+MnbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk ODk1NWMzOTctYTZiNC00MjYwLWJiMDktZGJkNDI4ZWZkZThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDImxz9JecU2KdWqIVjdUNSmcC8nrZT1CTKe MbSuhZLxxNRMBI0x9KD13pg3e5+b88sGa8l1OWobgfHHfrE2AP7hWkFNz1nNV8gC YrS8xXHlsyd442wujLJ98egWm8fo3UrR628R0k1kTGgSvE+RAwgQaqw9ywZPGohT K+Zt2gmx/q0F3IIdRqIRw0uo+6UMWXr9FatbYEYhA6gIBa22joI5G/9ZneNhafZn llHVv602qH5Sqiu5CrLv3ltM4s70v1rp0aApyxi/7+SItd7auJl+Q+UFI+Y+8g3z uy/OrV9LRfzRjW3OufG0PY40NATnLWwhW61uhbddCSQe7QyhlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPYEUc1SDEAJnTsXdUFrEcSYsjXRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvN2FmZjI4NGYtMmUyMS0z OGNhLWExOWEtMmY4MTMyNjcwOTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF/nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANeXZZgC5T0TeSuZgq4ES7nN/p15OD1czWOwXsMQ0esOJ6nq3bSswkG /6cVvnRJNUIyY6iFOKn/JoVZb2BGRt/q+DxrFWlm1LD3lCnocC0mLSg5dbcpLgyf DcPTPFsbzkR8A92pD4hOJpTxQ5+PO1rGLoJ40JB68GcyVk5QzJ0KgyBzqD+VdX// uvjdSxXGN+12u1EtxRknFc551irg9wbFM0+2+/1nU7Oh+6CiRNcQifn7Uwx34T3k 7qlkj9vmSA1DOY2ycPpMW9nUxetq3s8OoSU4vlaGSHp6W/4HIZ3NwBst/SVdL9Cl wzP/PHEC5ByxhN+jZxsjT28gR/4VD9M= -----END CERTIFICATE-----Generated at Thu Aug 27 21:48:57 2026 by rpki-client